Qualcomm SC8180X Firmware vulnerabilities

220 CVEs affecting Qualcomm SC8180X Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-43050, published 2024-12-02.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-3657, published 2020-11-02. Critical severity, CVSS 9.8. EPSS: 28.3% chance of exploitation in the next 30 days. u'Remote code execution can happen by sending a carefully crafted POST query when Device configuration is accessed from a tethered client through webserver due to lack of array bound check.' in…
CVE-2020-11301, published 2021-09-08. High severity, CVSS 7.5. EPSS: 11.1% chance of exploitation in the next 30 days. Improper authentication of un-encrypted plaintext Wi-Fi frames in an encrypted network can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
CVE-2020-11153, published 2020-11-02. Critical severity, CVSS 9.8. EPSS: 2.3% chance of exploitation in the next 30 days. u'Out of bound memory access while processing GATT data received due to lack of check of pdu data length and leads to remote code execution' in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2020-3669, published 2020-09-08. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. u'Buffer Overflow issue in WLAN tcp ip verification due to usage of out of range pointer offset' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics…
CVE-2020-3700, published 2020-07-30. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. Possible out of bounds read due to a missing bounds check and could lead to local information disclosure in the wifi driver with no additional execution privileges needed in Snapdragon Auto,…
CVE-2019-2271, published 2019-11-21. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. Buffer over read can happen while parsing downlink session management OTA messages if network sends un-intended values in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon…
CVE-2020-3667, published 2020-09-08. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. u'Buffer Overflow in mic calculation for WPA due to copying data into buffer without validating the length of buffer' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
CVE-2020-3675, published 2020-09-08. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. u'Potential integer underflow while parsing Service Info and IPv6 link-local TLVs that comes as part of NDPE attribute' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
CVE-2020-3668, published 2020-09-08. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. u'Buffer overflow while parsing PMF enabled MCBC frames due to frame length being lesser than what is expected while parsing' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
CVE-2019-10554, published 2020-03-05. Critical severity, CVSS 9.1. EPSS: 1% chance of exploitation in the next 30 days. Multiple Read overflows issue due to improper length check while decoding Identity Request in CSdomain/Authentication Reject in CS domain/ PRAU accept/while logging DL message in Snapdragon Auto,…

Latest

CVE-2024-43050, published 2024-12-02. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption while invoking IOCTL calls from user space to issue factory test command inside WLAN driver.
CVE-2024-33056, published 2024-12-02. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption when allocating and accessing an entry in an SMEM partition continuously.
CVE-2024-33044, published 2024-12-02. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption while Configuring the SMR/S2CR register in Bypass mode.
CVE-2024-33051, published 2024-09-02. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Transient DOS while processing TIM IE from beacon frame as there is no check for IE length.
CVE-2022-40514, published 2023-02-12. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. Memory corruption due to buffer copy without checking the size of input in WLAN Firmware while processing CCKM IE in reassoc response frame.
CVE-2022-40512, published 2023-02-12. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. Transient DOS in WLAN Firmware due to buffer over-read while processing probe response or beacon.
CVE-2022-33277, published 2023-02-12. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption in modem due to buffer copy without checking size of input while receiving WMI command.
CVE-2022-33271, published 2023-02-12. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. Information disclosure due to buffer over-read in WLAN while parsing NMF frame.
CVE-2022-33248, published 2023-02-12. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption in User Identity Module due to integer overflow to buffer overflow when a segement is received via qmi http.
CVE-2022-33233, published 2023-02-12. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption due to configuration weakness in modem wile sending command to write protected files.