Qualcomm Sm8475 vulnerabilities
83 vulnerabilities
Known vulnerabilities in Qualcomm Sm8475, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-35083qualcommapq8009_firmware+173
EPSS score0.53%
Possible out of bound read due to improper validation of certificate chain in SSL or Internet key exchange in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesCVE-2021-35120qualcomm, inc.snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile+100EPSS score0.15%
Improper handling between export and release functions on the same handle from client can lead to use after free in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon MobileCVE-2021-35133qualcomm, inc.snapdragon connectivity, snapdragon industrial iot, snapdragon mobile+36EPSS score0.12%
Use after free in the synx driver issue while performing other functions during multiple invocation of synx release calls in Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon MobileCVE-2021-35111qualcomm, inc.snapdragon connectivity, snapdragon mobile+38EPSS score0.46%
Improper validation of tag id while RRC sending tag id to MAC can lead to TOCTOU race condition in Snapdragon Connectivity, Snapdragon MobileCVE-2021-35134qualcomm, inc.snapdragon connectivity, snapdragon industrial iot, snapdragon mobile+30EPSS score0.13%
Due to insufficient validation of ELF headers, an Incorrect Calculation of Buffer Size can occur in Boot leading to memory corruption in Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon MobileCVE-2021-35102qualcomm, inc.snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon mobile+68EPSS score0.17%
Possible buffer overflow due to lack of validation for the length of NAI string read from EFS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon MobileCVE-2021-35108qualcomm, inc.snapdragon connectivity, snapdragon mobile+15EPSS score0.20%
Improper checking of AP-S lock bit while verifying the secure resource group permissions can lead to non secure read and write access in Snapdragon Connectivity, Snapdragon MobileCVE-2021-35118qualcomm, inc.snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables+100EPSS score0.15%
An out-of-bounds write can occur due to an incorrect input check in the camera driver in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesCVE-2021-35109qualcomm, inc.snapdragon connectivity, snapdragon mobile+15EPSS score0.20%
Possible address manipulation from APP-NS while APP-S is configuring an RG where it tries to merge the address ranges in Snapdragon Connectivity, Snapdragon MobileCVE-2021-35119qualcomm, inc.snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile+83EPSS score0.14%
Potential out of Bounds read in FIPS event processing due to improper validation of the length from the firmware in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon MobileCVE-2022-40507qualcomm, inc.snapdragon+242EPSS score1.31%
Memory corruption due to double free in Core while mapping HLOS address to the list.CVE-2022-40521qualcomm, inc.snapdragon+242EPSS score0.35%
Transient DOS due to improper authorization in ModemCVE-2022-40504qualcomm, inc.snapdragon+189EPSS score0.38%
Transient DOS due to reachable assertion in Modem when UE received Downlink Data Indication message from the network.CVE-2022-40508qualcomm, inc.snapdragon+68EPSS score0.38%
Transient DOS due to reachable assertion in Modem while processing config related to cross carrier scheduling, which is not supported.CVE-2022-40533qualcomm, inc.snapdragon+110EPSS score0.10%
Transient DOS due to untrusted Pointer Dereference in core while sending USB QMI request.CVE-2022-40536qualcomm, inc.snapdragon+81EPSS score0.40%
Transient DOS due to improper authentication in modem while receiving plain TLB OTA request message from network.CVE-2022-40529qualcomm, inc.snapdragon+196EPSS score0.10%
Memory corruption due to improper access control in kernel while processing a mapping request from root process.CVE-2022-25658qualcomm, inc.snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables+145EPSS score0.37%
Memory corruption due to incorrect pointer arithmetic when attempting to change the endianness in video parser function in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesCVE-2022-25706qualcomm, inc.snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables+129EPSS score0.44%
Information disclosure in Bluetooth driver due to buffer over-read while reading l2cap length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon WearablesCVE-2022-25656qualcomm, inc.snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon wearables+65EPSS score0.13%
Possible integer overflow and memory corruption due to improper validation of buffer size sent to write to console when computing the payload size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables