Qualcomm Sm4350 vulnerabilities, page 3

80 vulnerabilities

Known vulnerabilities in Qualcomm Sm4350, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.5HighCVE-2022-40508qualcomm, inc. · snapdragon +68 moreReachable assertion in ModemTransient DOS due to reachable assertion in Modem while processing config related to cross carrier scheduling, which is not supported.EPSS0.38%8.2HighCVE-2022-40503qualcomm, inc. · snapdragon +185 moreBuffer over-read in Bluetooth Host.Information disclosure due to buffer over-read in Bluetooth Host while A2DP streaming.EPSS0.41%7.5HighCVE-2022-40536qualcomm, inc. · snapdragon +81 moreImproper authentication in ModemTransient DOS due to improper authentication in modem while receiving plain TLB OTA request message from network.EPSS0.40%7.8HighCVE-2022-40529qualcomm, inc. · snapdragon +196 moreImproper access control in KernelMemory corruption due to improper access control in kernel while processing a mapping request from root process.EPSS0.10%7.1HighCVE-2022-22076qualcomm, inc. · snapdragon +348 moreCryptographic issue in Coreinformation disclosure due to cryptographic issue in Core during RPMB read request.EPSS0.11%7.5HighCVE-2022-22060qualcomm, inc. · snapdragon +74 moreReachable Assertion in ModemAssertion occurs while processing Reconfiguration message due to improper validationEPSS0.38%7.5HighCVE-2022-34144qualcomm, inc. · snapdragon +68 moreReachable assertion in ModemTransient DOS due to reachable assertion in Modem during OSI decode scheduling.EPSS0.38%7.5HighCVE-2022-33305qualcomm, inc. · snapdragon +81 moreNull pointer dereference in ModemTransient DOS due to NULL pointer dereference in Modem while sending invalid messages in DCCH.EPSS0.38%7.8HighCVE-2022-33296qualcomm, inc. · snapdragon +114 moreInteger overflow to buffer overflow in ModemMemory corruption due to integer overflow to buffer overflow in Modem while parsing Traffic Channel Neighbor List Update message.EPSS0.11%7.9HighCVE-2022-33264qualcomm, inc. · snapdragon +241 moreStack-based buffer overflow in ModemMemory corruption in modem due to stack based buffer overflow while parsing OTASP Key Generation Request Message.EPSS0.11%7.8HighCVE-2022-33230qualcomm, inc. · snapdragon +44 moreBuffer copy without checking the size of input in FM HostMemory corruption in FM Host due to buffer copy without checking the size of input in FM HostEPSS0.11%8.4HighCVE-2022-33275qualcomm, inc. · snapdragon +259 moreImproper validation of array index in WLAN HALMemory corruption due to improper validation of array index in WLAN HAL when received lm_itemNum is out of range.EPSS0.12%7.8HighCVE-2022-33298qualcomm, inc. · snapdragon +77 moreUse after free in ModemMemory corruption due to use after free in Modem while modem initialization.EPSS0.11%6.8MediumCVE-2022-33289qualcomm, inc. · snapdragon +226 moreImproper validation of array index in ModemMemory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card.EPSS0.19%7.8HighCVE-2022-33302qualcomm, inc. · snapdragon +225 moreImproper validation of array index in User Identity ModuleMemory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than command length.EPSS0.12%7.5HighCVE-2022-33251qualcomm, inc. · snapdragon +74 moreReachable assertion in ModemTransient DOS due to reachable assertion in Modem because of invalid network configuration.EPSS0.38%7.5HighCVE-2022-33270qualcomm, inc. · snapdragon +42 moreTime-of-check time-of-use race condition in ModemTransient DOS due to time-of-check time-of-use race condition in Modem while processing RRC Reconfiguration message.EPSS0.28%9.3CriticalCVE-2022-33231qualcomm, inc. · snapdragon +219 moreDouble free in CoreMemory corruption due to double free in core while initializing the encryption key.EPSS0.08%8.4HighCVE-2023-21628qualcomm, inc. · snapdragon +283 moreBuffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN HALMemory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command.EPSS0.12%7.8HighCVE-2023-21657qualcomm, inc. · snapdragon +126 moreImproper Input Validation in AudioMemoru corruption in Audio when ADSP sends input during record use case.EPSS0.12%