Home/Product/qualcomm sd680 firmware
Product

qualcomm sd680 firmware

114 known vulnerabilities across versions
Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.
CVE-2023-28538
all versions
Memory corruption in WIN Product while invoking WinAcpi update driver in the UEFI region.
8.4HIGH
CVE-2023-28537
all versions
Memory corruption while allocating memory in COmxApeDec module in Audio.
8.4HIGH
CVE-2023-22666
all versions
Memory Corruption in Audio while playing amrwbplus clips with modified content.
8.4HIGH
CVE-2023-21652
all versions
Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use.
7.7HIGH
CVE-2023-21651
all versions
Memory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE.
9.3CRITICAL
CVE-2023-21626
all versions
Cryptographic issue in HLOS due to improper authentication while performing key velocity checks using more than one key.
7.1HIGH
CVE-2022-40510
all versions
Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder.
9.8CRITICAL
CVE-2023-21630
all versions
Memory Corruption in Multimedia Framework due to integer overflow when synx bind is called along with synx signal.
8.4HIGH
CVE-2022-40537
all versions
Memory corruption in Bluetooth HOST while processing the AVRC_PDU_GET_PLAYER_APP_VALUE_TEXT AVRCP response.
7.3HIGH
CVE-2022-40535
all versions
Transient DOS due to buffer over-read in WLAN while sending a packet to device.
7.5HIGH
CVE-2022-40531
all versions
Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message.
8.4HIGH
CVE-2022-40515
all versions
Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms.
7.3HIGH
CVE-2022-33278
all versions
Memory corruption due to buffer copy without checking the size of input in HLOS when input message size is larger than the buffer
7.8HIGH
CVE-2022-33257
all versions
Memory corruption in Core due to time-of-check time-of-use race condition during dump collection in trust zone.
9.3CRITICAL
CVE-2022-33242
all versions
Memory corruption due to improper authentication in Qualcomm IPC while loading unsigned lib in audio PD.
7.8HIGH
CVE-2022-33213
all versions
Memory corruption in modem due to buffer overflow while processing a PPP packet
7.5HIGH
CVE-2022-25705
all versions
Memory corruption in modem due to integer overflow to buffer overflow while handling APDU response
7.8HIGH
CVE-2022-25694
all versions
Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM
8.4HIGH
CVE-2022-25655
all versions
Memory corruption in WLAN HAL while arbitrary value is passed in WMI UTF command payload.
8.4HIGH
CVE-2022-22075
all versions
Information Disclosure in Graphics during GPU context switch.
6.2MEDIUM
CVE-2022-40514
all versions
Memory corruption due to buffer copy without checking the size of input in WLAN Firmware while processing CCKM IE in reassoc respo
9.8CRITICAL
CVE-2022-40512
all versions
Transient DOS in WLAN Firmware due to buffer over-read while processing probe response or beacon.
7.5HIGH
CVE-2022-40502
all versions
Transient DOS due to improper input validation in WLAN Host.
7.5HIGH
CVE-2022-34146
all versions
Transient DOS due to improper input validation in WLAN Host while parsing frame during defragmentation.
7.5HIGH
CVE-2022-33277
all versions
Memory corruption in modem due to buffer copy without checking size of input while receiving WMI command.
8.4HIGH
CVE-2022-33271
all versions
Information disclosure due to buffer over-read in WLAN while parsing NMF frame.
8.2HIGH
CVE-2022-33248
all versions
Memory corruption in User Identity Module due to integer overflow to buffer overflow when a segement is received via qmi http.
7.8HIGH
CVE-2022-33233
all versions
Memory corruption due to configuration weakness in modem wile sending command to write protected files.
7.8HIGH
CVE-2022-40519
all versions
Information disclosure due to buffer overread in Core
6.8MEDIUM
CVE-2022-40518
all versions
Information disclosure due to buffer overread in Core
6.8MEDIUM
CVE-2022-40517
all versions
Memory corruption in core due to stack-based buffer overflow
8.4HIGH
CVE-2022-40516
all versions
Memory corruption in Core due to stack-based buffer overflow.
8.4HIGH
CVE-2022-33286
all versions
Transient DOS due to buffer over-read in WLAN while processing 802.11 management frames.
7.5HIGH
CVE-2022-33285
all versions
Transient DOS due to buffer over-read in WLAN while parsing WLAN CSA action frames.
7.5HIGH
CVE-2022-33284
all versions
Information disclosure due to buffer over-read in WLAN while parsing BTM action frame.
8.2HIGH
CVE-2022-22088
all versions
Memory corruption in Bluetooth HOST due to buffer overflow while parsing the command response received from remote
9.8CRITICAL
CVE-2022-33238
all versions
Transient DOS due to loop with unreachable exit condition in WLAN while processing an incoming FTM frames. in Snapdragon Auto, Sna
7.5HIGH
CVE-2022-33235
all versions
Information disclosure due to buffer over-read in WLAN firmware while parsing security context info attributes. in Snapdragon Auto
8.2HIGH
CVE-2022-25695
all versions
Memory corruption in MODEM due to Improper Validation of Array Index while processing GSTK Proactive commands in Snapdragon Auto,
8.4HIGH
CVE-2022-25685
all versions
Denial of service in Modem module due to improper authorization while error handling in Snapdragon Auto, Snapdragon Compute, Snapd
7.5HIGH
CVE-2022-25682
all versions
Memory corruption in MODEM UIM due to usage of out of range pointer offset while decoding command from card in Snapdragon Auto, Sn
8.4HIGH
CVE-2022-33239
all versions
Transient DOS due to loop with unreachable exit condition in WLAN firmware while parsing IPV6 extension header. in Snapdragon Auto
7.5HIGH
CVE-2022-33237
all versions
Transient DOS due to buffer over-read in WLAN firmware while processing PPE threshold. in Snapdragon Auto, Snapdragon Compute, Sna
7.5HIGH
CVE-2022-33234
all versions
Memory corruption in video due to configuration weakness. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdra
7.3HIGH
CVE-2022-25743
all versions
Memory corruption in graphics due to use-after-free while importing graphics buffer in Snapdragon Auto, Snapdragon Compute, Snapdr
8.4HIGH
CVE-2022-25741
all versions
Denial of service in WLAN due to potential null pointer dereference while accessing the memory location in Snapdragon Auto, Snapdr
7.5HIGH
CVE-2022-25724
all versions
Memory corruption in graphics due to buffer overflow while validating the user address in Snapdragon Auto, Snapdragon Compute, Sna
8.4HIGH
CVE-2022-25679
all versions
Denial of service in video due to improper access control in broadcast receivers in Snapdragon Compute, Snapdragon Consumer IOT, S
6.2MEDIUM
CVE-2022-25676
all versions
Information disclosure in video due to buffer over-read while parsing avi files in Snapdragon Auto, Snapdragon Compute, Snapdragon
6.8MEDIUM
CVE-2022-33214
all versions
Memory corruption in display due to time-of-check time-of-use of metadata reserved size in Snapdragon Auto, Snapdragon Compute, Sn
8.4HIGH
CVE-2022-25749
all versions
Transient Denial-of-Service in WLAN due to buffer over-read while parsing MDNS frames. in Snapdragon Auto, Snapdragon Compute, Sna
7.5HIGH
CVE-2022-25748
all versions
Memory corruption in WLAN due to integer overflow to buffer overflow while parsing GTK frames. in Snapdragon Auto, Snapdragon Comp
9.8CRITICAL
CVE-2022-25736
all versions
Denial of service in WLAN due to out-of-bound read happens while processing VHT action frame in Snapdragon Auto, Snapdragon Comput
7.5HIGH
CVE-2022-25687
all versions
memory corruption in video due to buffer overflow while parsing asf clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Conne
7.3HIGH
CVE-2022-25706
all versions
Information disclosure in Bluetooth driver due to buffer over-read while reading l2cap length in Snapdragon Auto, Snapdragon Compu
8.2HIGH
CVE-2022-25696
all versions
Memory corruption in display due to time-of-check time-of-use race condition during map or unmap in Snapdragon Auto, Snapdragon Co
8.4HIGH
CVE-2022-25690
all versions
Information disclosure in WLAN due to improper validation of array index while parsing crafted ANQP action frames in Snapdragon Au
7.5HIGH
CVE-2022-25688
all versions
Memory corruption in video due to buffer overflow while parsing ps video clips in Snapdragon Auto, Snapdragon Compute, Snapdragon
7.3HIGH
CVE-2022-25686
all versions
Memory corruption in video module due to buffer overflow while processing WAV file in Snapdragon Auto, Snapdragon Compute, Snapdra
7.3HIGH
CVE-2022-25669
all versions
Denial of service in video due to buffer over read while parsing MP4 clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Conne
7.5HIGH
CVE-2022-25653
all versions
Information disclosure in video due to buffer over-read while processing avi file in Snapdragon Compute, Snapdragon Connectivity,
6.8MEDIUM
CVE-2022-22095
all versions
Memory corruption in synx driver due to use-after-free condition in the synx driver due to accessing object handles without acquir
8.4HIGH
CVE-2022-22091
all versions
Improper authorization of a replayed LTE security mode command can lead to a denial of service in Snapdragon Auto, Snapdragon Comp
7.5HIGH
CVE-2022-22074
all versions
Memory Corruption during wma file playback due to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity
8.4HIGH
CVE-2022-22066
all versions
Memory corruption occurs while processing command received from HLOS due to improper length check in Snapdragon Auto, Snapdragon C
8.4HIGH
CVE-2022-25668
all versions
Memory corruption in video driver due to double free while parsing ASF clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Con
7.3HIGH
CVE-2022-25659
all versions
Memory corruption due to buffer overflow while parsing MKV clips with invalid bitmap size in Snapdragon Auto, Snapdragon Compute,
7.3HIGH
CVE-2022-25658
all versions
Memory corruption due to incorrect pointer arithmetic when attempting to change the endianness in video parser function in Snapdra
7.3HIGH
CVE-2022-25657
all versions
Memory corruption due to buffer overflow occurs while processing invalid MKV clip which has invalid seek header in Snapdragon Auto
7.3HIGH
CVE-2022-22096
all versions
Memory corruption in Bluetooth HOST due to stack-based buffer overflow when extracting data using command length parameter in
9.8CRITICAL
CVE-2022-22080
all versions
Improper validation of backend id in PCM routing process can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Sna
8.4HIGH
CVE-2022-22070
all versions
Memory corruption in audio due to lack of check of invalid routing address into APR Routing table in Snapdragon Auto, Snapdragon C
7.8HIGH
CVE-2022-22069
all versions
Devices with keyprotect off may store unencrypted keybox in RPMB and cause cryptographic issue in Snapdragon Auto, Snapdragon Comp
7.7HIGH
CVE-2022-22062
all versions
An out-of-bounds read can occur while parsing a server certificate due to improper length check in Snapdragon Auto, Snapdragon Com
8.2HIGH
CVE-2022-22059
all versions
Memory corruption due to out of bound read while parsing a video file in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectiv
8.4HIGH
CVE-2021-35135
all versions
A null pointer dereference may potentially occur during RSA key import in Snapdragon Auto, Snapdragon Compute, Snapdragon Connecti
6.2MEDIUM
CVE-2021-35132
all versions
Out of bound write in DSP service due to improper bound check for response buffer size in Snapdragon Auto, Snapdragon Compute, Sna
8.4HIGH
CVE-2021-35122
all versions
Non-secure region can try modifying RG permissions of IO space xPUs due to improper input validation in Snapdragon Auto, Snapdrago
9.3CRITICAL
CVE-2021-35097
all versions
Possible authentication bypass due to improper order of signature verification and hashing in the signature verification call in S
7.3HIGH
CVE-2022-22087
all versions
memory corruption in video due to buffer overflow while parsing mkv clip with no codechecker in Snapdragon Auto, Snapdragon Comput
7.3HIGH
CVE-2022-22086
all versions
Memory corruption in video due to double free while parsing 3gp clip with invalid meta data atoms in Snapdragon Auto, Snapdragon C
7.3HIGH
CVE-2022-22085
all versions
Memory corruption in video due to buffer overflow while reading the dts file in Snapdragon Auto, Snapdragon Compute, Snapdragon Co
8.4HIGH
CVE-2022-22084
all versions
Memory corruption when extracting qcp audio file due to lack of check on data length in Snapdragon Auto, Snapdragon Compute, Snapd
8.4HIGH
CVE-2022-22083
all versions
Denial of service due to memory corruption while extracting ape header from clips in Snapdragon Auto, Snapdragon Compute, Snapdrag
7.5HIGH
CVE-2022-22082
all versions
Memory corruption due to possible buffer overflow while parsing DSF header with corrupted channel count in Snapdragon Auto, Snapdr
8.4HIGH
CVE-2022-22071
all versions
Possible use after free when process shell memory is freed using IOCTL munmap call and process initialization is in progress in Sn
8.4HIGH
CVE-2022-22068
all versions
kernel event may contain unexpected content which is not generated by NPU software in asynchronous execution mode in Snapdragon Au
8.4HIGH
CVE-2022-22065
all versions
Out of bound read in WLAN HOST due to improper length check can lead to DOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Con
7.5HIGH
CVE-2022-22064
all versions
Possible buffer over read due to lack of size validation while unpacking frame in Snapdragon Auto, Snapdragon Compute, Snapdragon
7.5HIGH
CVE-2022-22057
all versions
Use after free in graphics fence due to a race condition while closing fence file descriptor and destroy graphics timeline simulta
8.4HIGH
CVE-2021-35121
all versions
An array index is improperly used to lock and unlock a mutex which can lead to a Use After Free condition In the Synx driver in Sn
6.7MEDIUM
CVE-2021-35120
all versions
Improper handling between export and release functions on the same handle from client can lead to use after free in Snapdragon Com
6.7MEDIUM
CVE-2021-35119
all versions
Potential out of Bounds read in FIPS event processing due to improper validation of the length from the firmware in Snapdragon Aut
5.5MEDIUM
CVE-2021-35118
all versions
An out-of-bounds write can occur due to an incorrect input check in the camera driver in Snapdragon Auto, Snapdragon Compute, Snap
6.7MEDIUM
CVE-2021-35116
all versions
APK can load a crafted model into the CDSP which can lead to a compromise of CDSP and other APK`s data executing there in Snapdrag
7.7HIGH
CVE-2021-35098
all versions
Improper validation of session id in PCM routing process can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Sna
6.7MEDIUM
CVE-2021-35094
all versions
Improper verification of timeout-based authentication in identity credential can lead to invalid authorization in HLOS in Snapdrag
7.8HIGH
CVE-2021-35092
all versions
Processing DCB/AVB algorithm with an invalid queue index from IOCTL request could lead to arbitrary address modification in Snapdr
6.7MEDIUM
CVE-2021-35085
all versions
Possible buffer overflow due to lack of buffer length check during management frame Rx handling in Snapdragon Auto, Snapdragon Com
5.5MEDIUM
CVE-2021-35084
all versions
Possible out of bound read due to lack of length check of data length for a DIAG event in Snapdragon Auto, Snapdragon Compute, Sna
5.5MEDIUM
CVE-2021-35083
all versions
Possible out of bound read due to improper validation of certificate chain in SSL or Internet key exchange in Snapdragon Auto, Sna
8.2HIGH
CVE-2021-35080
all versions
Disabled SMMU from secure side while RPM is assigned a secure stream can lead to information disclosure in Snapdragon Industrial I
6.5MEDIUM
CVE-2021-35079
all versions
Improper validation of permissions for third party application accessing Telephony service API can lead to information disclosure
6.2MEDIUM
CVE-2021-35078
all versions
Possible memory leak due to improper validation of certificate chain length while parsing server certificate chain in Snapdragon A
7.5HIGH
CVE-2021-35072
all versions
Possible buffer overflow due to improper validation of array index while processing external DIAG command in Snapdragon Auto, Snap
7.8HIGH
CVE-2021-30350
all versions
Lack of MBN header size verification against input buffer can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Sn
8.4HIGH
CVE-2021-30349
all versions
Improper access control sequence for AC database after memory allocation can lead to possible memory corruption in Snapdragon Auto
8.2HIGH
CVE-2021-30346
all versions
RPM secure Stream can access any secure resource due to improper SMMU configuration in Snapdragon Industrial IOT, Snapdragon Mobil
6.5MEDIUM
CVE-2021-30345
all versions
RPM secure Stream can access any secure resource due to improper SMMU configuration in Snapdragon Industrial IOT, Snapdragon Mobil
6.5MEDIUM
CVE-2021-30344
all versions
Improper authorization of a replayed LTE security mode command can lead to a denial of service in Snapdragon Auto, Snapdragon Comp
7.5HIGH
CVE-2021-30342
all versions
Improper integrity check can lead to race condition between tasks PDCP and RRC? after a valid RRC Command packet has been received
9.1CRITICAL
CVE-2021-30341
all versions
Improper buffer size validation of DSM packet received can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapd
9.8CRITICAL
CVE-2021-30339
all versions
Reading PRNG output may lead to improper key generation due to lack of buffer validation in Snapdragon Connectivity, Snapdragon In
9.0CRITICAL
CVE-2021-30281
all versions
Possible unauthorized access to secure space due to improper check of data allowed while flashing the no access control device con
8.4HIGH
Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities
Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs
Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures
Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1
About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service
threatengine.sh  ·  Open-source threat intelligence platform  ·  100+ authoritative sources  ·  Every fact traces to its origin