Home/Product/qualcomm qcs8155 firmware
Product

qualcomm qcs8155 firmware

79 known vulnerabilities across versions
Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.
CVE-2025-27053
all versions
Memory corruption during PlayReady APP usecase while processing TA commands.
7.8HIGH
CVE-2025-27062
all versions
Memory corruption while handling client exceptions, allowing unauthorized channel access.
7.8HIGH
CVE-2025-21465
all versions
Information disclosure while processing the hash segment in an MBN file.
6.5MEDIUM
CVE-2025-21464
all versions
Information disclosure while reading data from an image using specified offset and size parameters.
6.5MEDIUM
CVE-2025-27061
all versions
Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmwar
7.8HIGH
CVE-2025-27042
all versions
Memory corruption while processing video packets received from video firmware.
7.8HIGH
CVE-2024-49844
all versions
Memory corruption while triggering commands in the PlayReady Trusted application.
7.8HIGH
CVE-2025-21424
all versions
Memory corruption while calling the NPU driver APIs concurrently.
7.8HIGH
CVE-2024-53011
all versions
Information disclosure may occur due to improper permission and access controls to Video Analytics engine.
7.9HIGH
CVE-2024-33056
all versions
Memory corruption when allocating and accessing an entry in an SMEM partition continuously.
8.4HIGH
CVE-2024-33044
all versions
Memory corruption while Configuring the SMR/S2CR register in Bypass mode.
8.4HIGH
CVE-2024-38423
all versions
Memory corruption while processing GPU page table switch.
7.8HIGH
CVE-2024-33016
all versions
memory corruption when an invalid firehose patch command is invoked.
6.8MEDIUM
CVE-2024-21469
all versions
Memory corruption when an invoke call and a TEE call are bound for the same trusted application.
7.3HIGH
CVE-2024-21465
all versions
Memory corruption while processing key blob passed by the user.
7.8HIGH
CVE-2024-21462
all versions
Transient DOS while loading the TA ELF file.
7.1HIGH
CVE-2024-21461
all versions
Memory corruption while performing finish HMAC operation when context is freed by keymaster.
8.4HIGH
CVE-2023-43542
all versions
Memory corruption while copying a keyblobs material when the key materials size is not accurately checked.
7.8HIGH
CVE-2024-21475
all versions
Memory corruption when the payload received from firmware is not as per the expected protocol size.
7.8HIGH
CVE-2024-21468
all versions
Memory corruption when there is failed unmap operation in GPU.
8.4HIGH
CVE-2023-28547
all versions
Memory corruption in SPS Application while requesting for public key in sorter TA.
8.4HIGH
CVE-2023-43513
all versions
Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitr
7.8HIGH
CVE-2023-33077
all versions
Memory corruption in HLOS while converting from authorization token to HIDL vector.
6.7MEDIUM
CVE-2023-33032
all versions
Memory corruption in TZ Secure OS while requesting a memory allocation from TA region.
9.3CRITICAL
CVE-2023-33030
all versions
Memory corruption in HLOS while running playready use-case.
9.3CRITICAL
CVE-2023-33107
all versions
Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.
8.4HIGH
CVE-2023-33070
all versions
Transient DOS in Automotive OS due to improper authentication to the secure IO calls.
7.1HIGH
CVE-2023-33063
all versions
Memory corruption in DSP Services during a remote call from HLOS to DSP.
7.8HIGH
CVE-2023-33017
all versions
Memory corruption in Boot while running a ListVars test in UEFI Menu during boot.
7.8HIGH
CVE-2023-28586
all versions
Information disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE.
6.0MEDIUM
CVE-2023-28585
all versions
Memory corruption while loading an ELF segment in TEE Kernel.
8.2HIGH
CVE-2023-28546
all versions
Memory Corruption in SPS Application while exporting public key in sorter TA.
7.8HIGH
CVE-2023-22383
all versions
Memory Corruption in camera while installing a fd for a particular DMA buffer.
6.7MEDIUM
CVE-2023-28556
all versions
Cryptographic issue in HLOS during key management.
7.1HIGH
CVE-2023-28554
all versions
Information Disclosure in Qualcomm IPC while reading values from shared memory in VM.
6.1MEDIUM
CVE-2023-24852
all versions
Memory Corruption in Core due to secure memory access by user while loading modem image.
8.4HIGH
CVE-2023-24853
all versions
Memory Corruption in HLOS while registering for key provisioning notify.
8.4HIGH
CVE-2023-28538
all versions
Memory corruption in WIN Product while invoking WinAcpi update driver in the UEFI region.
8.4HIGH
CVE-2023-21664
all versions
Memory Corruption in Core Platform while printing the response buffer in log.
7.8HIGH
CVE-2023-21662
all versions
Memory corruption in Core Platform while printing the response buffer in log.
7.8HIGH
CVE-2023-28575
all versions
The cam_get_device_priv function does not check the type of handle being returned (device/session/link). This would lead to invali
6.7MEDIUM
CVE-2023-21627
all versions
Memory corruption in Trusted Execution Environment while calling service API with invalid address.
6.7MEDIUM
CVE-2023-21626
all versions
Cryptographic issue in HLOS due to improper authentication while performing key velocity checks using more than one key.
7.1HIGH
CVE-2023-22387
all versions
Arbitrary memory overwrite when VM gets compromised in TX write leading to Memory Corruption.
7.8HIGH
CVE-2023-21624
all versions
Information disclosure in DSP Services while loading dynamic module.
6.2MEDIUM
CVE-2023-21670
all versions
Memory Corruption in GPU Subsystem due to arbitrary command execution from GPU in privileged mode.
7.8HIGH
CVE-2022-40529
all versions
Memory corruption due to improper access control in kernel while processing a mapping request from root process.
7.1HIGH
CVE-2022-40507
all versions
Memory corruption due to double free in Core while mapping HLOS address to the list.
8.4HIGH
CVE-2022-33263
all versions
Memory corruption due to use after free in Core when multiple DCI clients register and deregister.
6.7MEDIUM
CVE-2022-33224
all versions
Memory corruption in core due to buffer copy without check9ing the size of input while processing ioctl queries.
6.7MEDIUM
CVE-2022-22076
all versions
information disclosure due to cryptographic issue in Core during RPMB read request.
7.1HIGH
CVE-2023-21666
all versions
Memory Corruption in Graphics while accessing a buffer allocated through the graphics pool.
8.4HIGH
CVE-2023-21665
all versions
Memory corruption in Graphics while importing a file.
8.4HIGH
CVE-2022-33231
all versions
Memory corruption due to double free in core while initializing the encryption key.
9.3CRITICAL
CVE-2022-33260
all versions
Memory corruption due to stack based buffer overflow in core while sending command from USB of large size.
5.9MEDIUM
CVE-2022-33242
all versions
Memory corruption due to improper authentication in Qualcomm IPC while loading unsigned lib in audio PD.
7.8HIGH
CVE-2022-22075
all versions
Information Disclosure in Graphics during GPU context switch.
6.2MEDIUM
CVE-2022-33243
all versions
Memory corruption due to improper access control in Qualcomm IPC.
8.4HIGH
CVE-2022-40520
all versions
Memory corruption due to stack-based buffer overflow in Core
8.4HIGH
CVE-2022-40519
all versions
Information disclosure due to buffer overread in Core
6.8MEDIUM
CVE-2022-40518
all versions
Information disclosure due to buffer overread in Core
6.8MEDIUM
CVE-2022-40517
all versions
Memory corruption in core due to stack-based buffer overflow
8.4HIGH
CVE-2022-40516
all versions
Memory corruption in Core due to stack-based buffer overflow.
8.4HIGH
CVE-2022-25721
all versions
Memory corruption in video driver due to type confusion error during video playback
6.7MEDIUM
CVE-2022-25717
all versions
Memory corruption in display due to double free while allocating frame buffer memory
6.7MEDIUM
CVE-2022-25715
all versions
Memory corruption in display driver due to incorrect type casting while accessing the fence structure fields
6.7MEDIUM
CVE-2022-25711
all versions
Memory corruption in camera due to improper validation of array index in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer
6.7MEDIUM
CVE-2022-25677
all versions
Memory corruption in diag due to use after free while processing dci packet in Snapdragon Auto, Snapdragon Compute, Snapdragon Con
6.7MEDIUM
CVE-2022-25743
all versions
Memory corruption in graphics due to use-after-free while importing graphics buffer in Snapdragon Auto, Snapdragon Compute, Snapdr
8.4HIGH
CVE-2022-25724
all versions
Memory corruption in graphics due to buffer overflow while validating the user address in Snapdragon Auto, Snapdragon Compute, Sna
8.4HIGH
CVE-2022-25666
all versions
Memory corruption due to use after free in service while trying to access maps by different threads in Snapdragon Auto, Snapdragon
6.7MEDIUM
CVE-2022-25664
all versions
Information disclosure due to exposure of information while GPU reads the data in Snapdragon Auto, Snapdragon Compute, Snapdragon
6.2MEDIUM
CVE-2022-22078
all versions
Denial of service in BOOT when partition size for a particular partition is requested due to integer overflow when blocks are calc
4.6MEDIUM
CVE-2021-30334
all versions
Possible use after free due to lack of null check of DRM file status after file structure is freed in Snapdragon Auto, Snapdragon
8.4HIGH
CVE-2021-30281
all versions
Possible unauthorized access to secure space due to improper check of data allowed while flashing the no access control device con
8.4HIGH
CVE-2021-35105
all versions
Possible out of bounds access due to improper input validation during graphics profiling in Snapdragon Auto, Snapdragon Compute, S
8.4HIGH
CVE-2021-30318
all versions
Improper validation of input when provisioning the HDCP key can lead to memory corruption in Snapdragon Auto, Snapdragon Compute,
8.4HIGH
CVE-2021-30269
all versions
Possible null pointer dereference due to lack of TLB validation for user provided address in Snapdragon Auto, Snapdragon Compute,
7.3HIGH
CVE-2021-1894
all versions
Improper access control in TrustZone due to improper error handling while handling the signing key in Snapdragon Auto, Snapdragon
7.1HIGH
Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities
Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs
Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures
Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1
About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service
threatengine.sh  ·  Open-source threat intelligence platform  ·  100+ authoritative sources  ·  Every fact traces to its origin