Qualcomm Sm8635P vulnerabilities, page 5
141 vulnerabilities
Known vulnerabilities in Qualcomm Sm8635P, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2025-27053qualcomm, inc. · snapdragon +317 moreIncorrect Calculation of Buffer Size in HLOSMemory corruption during PlayReady APP usecase while processing TA commands.EPSS0.09%HighCVE-2025-27066qualcomm, inc. · snapdragon +370 moreReachable Assertion in WLAN FirmwareTransient DOS while processing an ANQP message.EPSS0.28%HighCVE-2024-43065qualcomm, inc. · snapdragon +164 moreExposed Dangerous Method or Function in HLOSCryptographic issues while generating an asymmetric key pair for RKP use cases.EPSS0.11%MediumCVE-2024-43056qualcomm, inc. · snapdragon +187 moreBuffer Over-read in HypervisorTransient DOS during hypervisor virtual I/O operation in a virtual machine.EPSS0.11%MediumCVE-2024-43046qualcomm, inc. · snapdragon +308 moreInformation Exposure in TZ Secure OSThere may be information disclosure during memory re-allocation in TZ Secure OS.EPSS0.11%MediumCVE-2024-43051qualcomm, inc. · snapdragon +237 moreImproper Authorization in SPS-HLOSInformation disclosure while deriving keys for a session for any Widevine use case.EPSS0.11%HighCVE-2024-53027qualcomm, inc. · snapdragon +206 moreBuffer Copy Without Checking Size of Input in WLAN HostTransient DOS may occur while processing the country IE.EPSS0.30%HighCVE-2024-53011qualcomm, inc. · snapdragon +81 morePermissions, Privileges, and Access Controls in Video Analytics and ProcessingInformation disclosure may occur due to improper permission and access controls to Video Analytics engine.EPSS0.12%MediumCVE-2024-53015qualcomm, inc. · snapdragon +90 moreUse After Free in Computer VisionMemory corruption while processing IOCTL command to handle buffers associated with a session.EPSS0.09%HighCVE-2024-53026qualcomm, inc. · snapdragon +232 moreBuffer Over-read in Data Network Stack & ConnectivityInformation disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call.EPSS0.30%HighCVE-2024-53024qualcomm, inc. · snapdragon +161 moreNULL Pointer Dereference in DisplayMemory corruption in display driver while detaching a device.EPSS0.12%HighCVE-2024-53021qualcomm, inc. · snapdragon +223 moreBuffer Over-read in Data Network Stack & ConnectivityInformation disclosure may occur while processing goodbye RTCP packet from network.EPSS0.24%HighCVE-2024-53014qualcomm, inc. · snapdragon +244 moreImproper Validation of Array Index in AudioMemory corruption may occur while validating ports and channels in Audio driver.EPSS0.12%HighCVE-2024-53019qualcomm, inc. · snapdragon +79 moreBuffer Over-read in Data Network Stack & ConnectivityInformation disclosure may occur while decoding the RTP packet with improper header length for number of contributing sources.EPSS0.24%HighCVE-2024-53020qualcomm, inc. · snapdragon +232 moreBuffer Over-read in Data Network Stack & ConnectivityInformation disclosure may occur while decoding the RTP packet with invalid header extension from network.EPSS0.24%HighCVE-2024-38404qualcomm, inc. · snapdragon +40 moreBuffer Over-read in Multi Mode Call ProcessorTransient DOS when registration accept OTA is received with incorrect ciphering key data IE in modem.EPSS0.25%MediumCVE-2024-38426qualcomm, inc. · snapdragon +163 moreImproper Authentication in ModemWhile processing the authentication message in UE, improper authentication may lead to information disclosure.EPSS0.27%HighCVE-2024-45582qualcomm, inc. · snapdragon +33 moreImproper Validation of Array Index in Camera DriverMemory corruption while validating number of devices in Camera kernel .EPSS0.10%HighCVE-2024-45558qualcomm, inc. · snapdragon +182 moreBuffer Over-read in WLAN Host CmnTransient DOS can occur when the driver parses the per STA profile IE and tries to access the EXTN element ID without checking the IE length.EPSS0.38%HighCVE-2024-45584qualcomm, inc. · snapdragon +122 moreUntrusted Pointer Dereference in Automotive Android OSMemory corruption can occur when a compat IOCTL call is followed by a normal IOCTL call from userspace.EPSS0.10%