Qualcomm Snapdragon Wear 4100\+ vulnerabilities
26 vulnerabilities
Known vulnerabilities in Qualcomm Snapdragon Wear 4100\+, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2024-21468qualcomm, inc.snapdragon+225
EPSS score0.11%
Memory corruption when there is failed unmap operation in GPU.CVE-2024-21475qualcomm, inc.snapdragon+229EPSS score0.11%
Memory corruption when the payload received from firmware is not as per the expected protocol size.CVE-2024-38404qualcomm, inc.snapdragon+40EPSS score0.25%
Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in modem.CVE-2024-38426qualcomm, inc.snapdragon+163EPSS score0.27%
While processing the authentication message in UE, improper authentication may lead to information disclosure.CVE-2024-49844qualcomm, inc.snapdragon+179EPSS score0.11%
Memory corruption while triggering commands in the PlayReady Trusted application.CVE-2024-49847qualcomm, inc.snapdragon+47EPSS score0.26%
Transient DOS while processing of a registration acceptance OTA due to incorrect ciphering key data IE.CVE-2024-49842qualcomm, inc.snapdragon+176EPSS score0.09%
Memory corruption during memory mapping into protected VM address space due to incorrect API restrictions.CVE-2023-21637qualcomm, inc.snapdragon+54EPSS score0.11%
Memory corruption in Linux while calling system configuration APIs.CVE-2023-21624qualcomm, inc.snapdragon+65EPSS score0.11%
Information disclosure in DSP Services while loading dynamic module.CVE-2023-21635qualcomm, inc.snapdragon+48EPSS score0.11%
Memory Corruption in Data Network Stack & Connectivity when sim gets detected on telephony.CVE-2023-21633qualcomm, inc.snapdragon+96EPSS score0.11%
Memory Corruption in Linux while processing QcRilRequestImsRegisterMultiIdentityMessage request.CVE-2023-43555qualcomm, inc.snapdragon+113EPSS score0.24%
Information disclosure in Video while parsing mp2 clip with invalid section length.CVE-2023-43551qualcomm, inc.snapdragon+234EPSS score0.26%
Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command.CVE-2023-43527qualcomm, inc.snapdragon+53EPSS score0.12%
Information disclosure while parsing dts header atom in Video.CVE-2023-43521qualcomm, inc.snapdragon+76EPSS score0.11%
Memory corruption when multiple listeners are being registered with the same file descriptor.CVE-2023-43548qualcomm, inc.snapdragon+136EPSS score0.26%
Memory corruption while parsing qcp clip with invalid chunk data size.CVE-2023-43528qualcomm, inc.snapdragon+90EPSS score0.11%
Information disclosure when the ADSP payload size received in HLOS in response to Audio Stream Manager matrix session is less than this expected size.CVE-2023-22387qualcomm, inc.snapdragon+266EPSS score0.12%
Arbitrary memory overwrite when VM gets compromised in TX write leading to Memory Corruption.CVE-2023-22667qualcomm, inc.snapdragon+200EPSS score0.12%
Memory Corruption in Audio while allocating the ion buffer during the music playback.CVE-2023-28575qualcomm, inc.snapdragon+59EPSS score0.12%
The cam_get_device_priv function does not check the type of handle being returned (device/session/link). This would lead to invalid type usage if a wrong handle is passed to it.