Qualcomm sda/sdm845 Firmware vulnerabilities
8 CVEs affecting Qualcomm sda/sdm845 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-40504, published 2023-05-02.
More from Qualcomm.
Highest priority
Known exploited (CISA KEV) first, then by EPSS exploit probability.
- CVE-2022-40503, published 2023-04-13. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. Information disclosure due to buffer over-read in Bluetooth Host while A2DP streaming.
- CVE-2022-40504, published 2023-05-02. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. Transient DOS due to reachable assertion in Modem when UE received Downlink Data Indication message from the network.
- CVE-2022-33289, published 2023-04-13. Medium severity, CVSS 6.8. EPSS: 0.2% chance of exploitation in the next 30 days. Memory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card.
- CVE-2023-21666, published 2023-05-02. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Memory Corruption in Graphics while accessing a buffer allocated through the graphics pool.
- CVE-2023-21665, published 2023-05-02. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Memory corruption in Graphics while importing a file.
- CVE-2022-33273, published 2023-05-02. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. Information disclosure due to buffer over-read in Trusted Execution Environment while QRKS report generation.
- CVE-2022-33288, published 2023-04-13. High severity, CVSS 8.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption due to buffer copy without checking the size of input in Core while sending SCM command to get write protection information.
- CVE-2022-40532, published 2023-04-13. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target.