Qualcomm SM8475 Firmware vulnerabilities

83 CVEs affecting Qualcomm SM8475 Firmware, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-53011, published 2025-03-03.

More from Qualcomm.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-33063: Qualcomm Multiple Chipsets Use-After-Free Vulnerability, published 2023-12-05. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2023-12-05. EPSS: 0.7% chance of exploitation in the next 30 days. Memory corruption in DSP Services during a remote call from HLOS to DSP.
• CVE-2022-40507, published 2023-06-06. High severity, CVSS 7.8. EPSS: 1.3% chance of exploitation in the next 30 days. Memory corruption due to double free in Core while mapping HLOS address to the list.
• CVE-2022-22083, published 2022-06-14. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. Denial of service due to memory corruption while extracting ape header from clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…
• CVE-2023-33042, published 2023-12-05. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. Transient DOS in Modem after RRC Setup message is received.
• CVE-2022-22087, published 2022-06-14. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. memory corruption in video due to buffer overflow while parsing mkv clip with no codechecker in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon…
• CVE-2022-25670, published 2022-09-16. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. Denial of service in WLAN HOST due to buffer over read while unpacking frames in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon…
• CVE-2022-22086, published 2022-06-14. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. Memory corruption in video due to double free while parsing 3gp clip with invalid meta data atoms in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon…
• CVE-2023-33028, published 2023-10-03. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. Memory corruption in WLAN Firmware while doing a memory copy of pmk cache.
• CVE-2021-35083, published 2022-06-14. Critical severity, CVSS 9.1. EPSS: 0.5% chance of exploitation in the next 30 days. Possible out of bound read due to improper validation of certificate chain in SSL or Internet key exchange in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…
• CVE-2022-22096, published 2022-09-02. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. Memory corruption in Bluetooth HOST due to stack-based buffer overflow when when extracting data using command length parameter in Snapdragon Connectivity, Snapdragon Mobile

Latest

• CVE-2024-53011, published 2025-03-03. High severity, CVSS 7.9. EPSS: 0.1% chance of exploitation in the next 30 days. Information disclosure may occur due to improper permission and access controls to Video Analytics engine.
• CVE-2023-33080, published 2023-12-05. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame.
• CVE-2023-33054, published 2023-12-05. Critical severity, CVSS 9.1. EPSS: 0.4% chance of exploitation in the next 30 days. Cryptographic issue in GPS HLOS Driver while downloading Qualcomm GNSS assistance data.
• CVE-2023-33044, published 2023-12-05. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. Transient DOS in Data modem while handling TLB control messages from the Network.
• CVE-2023-33043, published 2023-12-05. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. Transient DOS in Modem when a Beam switch request is made with a non-configured BWP.
• CVE-2023-33018, published 2023-12-05. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption while using the UIM diag command to get the operators name.
• CVE-2023-33017, published 2023-12-05. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Memory corruption in Boot while running a ListVars test in UEFI Menu during boot.
• CVE-2023-33074, published 2023-11-07. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption in Audio when SSR event is triggered after music playback is stopped.