Qualcomm SM6115 Firmware vulnerabilities
20 CVEs affecting Qualcomm SM6115 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-40504, published 2023-05-02.
More from Qualcomm.
Highest priority
Known exploited (CISA KEV) first, then by EPSS exploit probability.
- CVE-2020-11206, published 2020-11-12. High severity, CVSS 7.8. EPSS: 1.8% chance of exploitation in the next 30 days. Possible buffer overflow in Fastrpc while handling received parameters due to lack of validation on input parameters' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon…
- CVE-2020-11207, published 2020-11-12. High severity, CVSS 7.8. EPSS: 1.5% chance of exploitation in the next 30 days. Buffer overflow in LibFastCV library due to improper size checks with respect to buffer length' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon…
- CVE-2020-11184, published 2020-11-12. Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days. u'Possible buffer overflow will occur in video while parsing mp4 clip with crafted esds atom size.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile in QCM4290,…
- CVE-2020-3639, published 2020-11-12. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. u'When a non standard SIP sigcomp message is received from the network, then there may be chances of using more UDVM cycle or memory overflow' in Snapdragon Auto, Snapdragon Compute, Snapdragon…
- CVE-2020-11193, published 2020-11-12. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. u'Buffer over read can happen while parsing mkv clip due to improper typecasting of data returned from atomsize' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial…
- CVE-2020-11168, published 2020-11-12. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. u'Null-pointer dereference can occur while accessing data buffer beyond its size that leads to access the buffer beyond its range' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT,…
- CVE-2020-11196, published 2020-11-12. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. u'Integer overflow to buffer overflow occurs while playback of ASF clip having unexpected number of codec entries' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon…
- CVE-2022-40503, published 2023-04-13. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. Information disclosure due to buffer over-read in Bluetooth Host while A2DP streaming.
- CVE-2022-40504, published 2023-05-02. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. Transient DOS due to reachable assertion in Modem when UE received Downlink Data Indication message from the network.
- CVE-2022-33305, published 2023-05-02. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. Transient DOS due to NULL pointer dereference in Modem while sending invalid messages in DCCH.
Latest
- CVE-2023-21666, published 2023-05-02. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Memory Corruption in Graphics while accessing a buffer allocated through the graphics pool.
- CVE-2023-21665, published 2023-05-02. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Memory corruption in Graphics while importing a file.
- CVE-2022-40532, published 2023-04-13. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target.
- CVE-2022-33302, published 2023-04-13. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than command length.
- CVE-2022-33289, published 2023-04-13. Medium severity, CVSS 6.8. EPSS: 0.2% chance of exploitation in the next 30 days. Memory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card.