Qualcomm Qcn5121 vulnerabilities, page 4
85 vulnerabilities
Known vulnerabilities in Qualcomm Qcn5121, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2020-11267qualcommapq8009_firmware+270
EPSS score0.18%
Stack out-of-bounds write occurs while setting up a cipher device if the provided IV length exceeds the max limit value in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingCVE-2020-11289qualcommapq8009_firmware+495EPSS score0.20%
Out of bound write can occur in TZ command handler due to lack of validation of command ID in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingCVE-2020-11204qualcommapq8009_firmware+518EPSS score0.17%
Possible memory corruption and information leakage in sub-system due to lack of check for validity and boundary compliance for parameters that are read from shared MSG RAM in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingCVE-2020-11214qualcommaqt1000_firmware+348EPSS score0.79%
Buffer over-read while processing NDL attribute if attribute length is larger than expected and then FW is treating it as more number of immutable schedules in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and NetworkingCVE-2020-3664qualcommaqt1000_firmware+314EPSS score0.18%
Out of bound read access in hypervisor due to an invalid read access attempt by passing invalid addresses in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and NetworkingCVE-2022-40519qualcomm, inc.snapdragon+193EPSS score0.12%
Information disclosure due to buffer overread in CoreCVE-2022-40517qualcomm, inc.snapdragon+181EPSS score0.14%
Memory corruption in core due to stack-based buffer overflowCVE-2022-40525qualcomm, inc.snapdragon+31EPSS score0.11%
Information disclosure in Linux Networking Firmware due to unauthorized information leak during side channel analysis.CVE-2022-40522qualcomm, inc.snapdragon+54EPSS score0.12%
Memory corruption in Linux Networking due to double free while handling a hyp-assign.CVE-2022-40516qualcomm, inc.snapdragon+184EPSS score0.87%
Memory corruption in Core due to stack-based buffer overflow.CVE-2022-25655qualcomm, inc.snapdragon+238EPSS score0.12%
Memory corruption in WLAN HAL while arbitrary value is passed in WMI UTF command payload.CVE-2022-25652qualcomm, inc.snapdragon wired infrastructure and networking+60EPSS score0.11%
Cryptographic issues in BSP due to improper hash verification in Snapdragon Wired Infrastructure and NetworkingCVE-2022-22076qualcomm, inc.snapdragon+348EPSS score0.11%
information disclosure due to cryptographic issue in Core during RPMB read request.CVE-2024-21462qualcomm, inc.snapdragon+309EPSS score0.09%
Transient DOS while loading the TA ELF file.CVE-2024-43046qualcomm, inc.snapdragon+308EPSS score0.11%
There may be information disclosure during memory re-allocation in TZ Secure OS.CVE-2024-33016qualcomm, inc.snapdragon+331EPSS score0.15%
memory corruption when an invalid firehose patch command is invoked.CVE-2023-21628qualcomm, inc.snapdragon+283EPSS score0.12%
Memory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command.CVE-2023-24852qualcomm, inc.snapdragon+265EPSS score0.12%
Memory Corruption in Core due to secure memory access by user while loading modem image.CVE-2023-28564qualcomm, inc.snapdragon+247EPSS score0.12%
Memory corruption in WLAN HAL while passing command parameters through WMI interfaces.CVE-2023-28586qualcomm, inc.snapdragon+307EPSS score0.14%
Information disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE.