Qualcomm Sm7225 vulnerabilities, page 2
53 vulnerabilities
Known vulnerabilities in Qualcomm Sm7225, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2022-40536qualcomm, inc. · snapdragon +81 moreImproper authentication in ModemTransient DOS due to improper authentication in modem while receiving plain TLB OTA request message from network.EPSS0.40%HighCVE-2022-40529qualcomm, inc. · snapdragon +196 moreImproper access control in KernelMemory corruption due to improper access control in kernel while processing a mapping request from root process.EPSS0.10%HighCVE-2022-22076qualcomm, inc. · snapdragon +348 moreCryptographic issue in Coreinformation disclosure due to cryptographic issue in Core during RPMB read request.EPSS0.11%HighCVE-2022-22060qualcomm, inc. · snapdragon +74 moreReachable Assertion in ModemAssertion occurs while processing Reconfiguration message due to improper validationEPSS0.38%HighCVE-2022-33296qualcomm, inc. · snapdragon +114 moreInteger overflow to buffer overflow in ModemMemory corruption due to integer overflow to buffer overflow in Modem while parsing Traffic Channel Neighbor List Update message.EPSS0.11%CriticalCVE-2022-33288qualcomm, inc. · snapdragon +128 moreBuffer copy without checking the size of input in CoreMemory corruption due to buffer copy without checking the size of input in Core while sending SCM command to get write protection information.EPSS0.12%HighCVE-2022-33264qualcomm, inc. · snapdragon +241 moreStack-based buffer overflow in ModemMemory corruption in modem due to stack based buffer overflow while parsing OTASP Key Generation Request Message.EPSS0.11%HighCVE-2022-33275qualcomm, inc. · snapdragon +259 moreImproper validation of array index in WLAN HALMemory corruption due to improper validation of array index in WLAN HAL when received lm_itemNum is out of range.EPSS0.12%MediumCVE-2022-33289qualcomm, inc. · snapdragon +226 moreImproper validation of array index in ModemMemory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card.EPSS0.19%HighCVE-2022-33302qualcomm, inc. · snapdragon +225 moreImproper validation of array index in User Identity ModuleMemory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than command length.EPSS0.12%HighCVE-2022-33251qualcomm, inc. · snapdragon +74 moreReachable assertion in ModemTransient DOS due to reachable assertion in Modem because of invalid network configuration.EPSS0.38%CriticalCVE-2022-33231qualcomm, inc. · snapdragon +219 moreDouble free in CoreMemory corruption due to double free in core while initializing the encryption key.EPSS0.08%HighCVE-2023-21628qualcomm, inc. · snapdragon +283 moreBuffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN HALMemory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command.EPSS0.12%HighCVE-2023-21657qualcomm, inc. · snapdragon +126 moreImproper Input Validation in AudioMemoru corruption in Audio when ADSP sends input during record use case.EPSS0.12%HighCVE-2023-21659qualcomm, inc. · snapdragon +270 moreBuffer Over-read in WLAN FirmwareTransient DOS in WLAN Firmware while processing frames with missing header fields.EPSS0.38%HighCVE-2023-21665qualcomm, inc. · snapdragon +220 moreIncorrect Type Conversion or Cast in GraphicsMemory corruption in Graphics while importing a file.EPSS0.18%HighCVE-2023-21670qualcomm, inc. · snapdragon +182 moreImproper Access control in GPU SubsystemMemory Corruption in GPU Subsystem due to arbitrary command execution from GPU in privileged mode.EPSS0.12%HighCVE-2023-21666qualcomm, inc. · snapdragon +165 moreImproper Release of Memory Before Removing Last Reference (`Memory Leak`) in GraphicsMemory Corruption in Graphics while accessing a buffer allocated through the graphics pool.EPSS0.18%CriticalCVE-2023-28540qualcomm, inc. · snapdragon +151 moreImproper Authentication in Data ModemCryptographic issue in Data Modem due to improper authentication during TLS handshake.EPSS0.43%HighCVE-2023-28560qualcomm, inc. · snapdragon +267 moreBuffer Copy Without Checking Size of Input in WLAN HALMemory corruption in WLAN HAL while processing devIndex from untrusted WMI payload.EPSS0.12%