📦 Qcs8155 Firmware

by Qualcomm

🔍 What is Qcs8155 Firmware?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2023-33032

CRITICAL CVSS 9.3 Jan 2, 2024

This vulnerability allows memory corruption in the TrustZone Secure OS when requesting memory allocation from the Trusted Application region. It affects Qualcomm chipsets with TrustZone technology, po...

CVE-2022-33231

CRITICAL CVSS 9.3 Apr 13, 2023

CVE-2022-33231 is a double-free memory corruption vulnerability in Qualcomm chipsets that occurs during encryption key initialization. Successful exploitation could allow attackers to execute arbitrar...

CVE-2025-27053

HIGH CVSS 7.8 Oct 9, 2025

This vulnerability allows memory corruption in Qualcomm's PlayReady APP implementation when processing TA commands, potentially enabling arbitrary code execution. It affects devices with Qualcomm chip...

CVE-2025-21424

HIGH CVSS 7.8 Mar 3, 2025

This CVE describes a use-after-free vulnerability (CWE-416) in Qualcomm NPU driver APIs that can be triggered through concurrent calls, leading to memory corruption. It affects devices with Qualcomm c...

CVE-2024-33044

HIGH CVSS 8.4 Dec 2, 2024

This vulnerability allows memory corruption when configuring SMR/S2CR registers in Bypass mode on Qualcomm chipsets. Attackers could potentially execute arbitrary code or cause denial of service. Affe...

CVE-2024-33056

HIGH CVSS 8.4 Dec 2, 2024

CVE-2024-33056 is a memory corruption vulnerability in Qualcomm's Shared Memory (SMEM) subsystem that allows attackers to potentially execute arbitrary code or cause denial of service. This affects de...

CVE-2024-38423

HIGH CVSS 7.8 Nov 4, 2024

This vulnerability allows memory corruption during GPU page table switching in Qualcomm GPU drivers. Attackers could potentially execute arbitrary code or cause denial of service. Affects devices usin...

CVE-2024-21469

HIGH CVSS 7.3 Jul 1, 2024

This vulnerability involves memory corruption when an invoke call and a TEE (Trusted Execution Environment) call target the same trusted application simultaneously. It affects devices with Qualcomm ch...

CVE-2024-21462

HIGH CVSS 7.1 Jul 1, 2024

This vulnerability allows a denial-of-service attack when loading Trusted Application (TA) ELF files on Qualcomm chipsets. It affects devices using Qualcomm processors with vulnerable firmware. Attack...

CVE-2024-21468

HIGH CVSS 8.4 Apr 1, 2024

CVE-2024-21468 is a use-after-free vulnerability in Qualcomm GPU drivers where failed memory unmapping operations can lead to memory corruption. This allows attackers to potentially execute arbitrary ...

CVE-2023-28547

HIGH CVSS 8.4 Apr 1, 2024

This CVE describes a memory corruption vulnerability in the SPS Application's sorter Trusted Application (TA) when requesting public keys. Successful exploitation could allow attackers to execute arbi...

CVE-2023-43513

HIGH CVSS 7.8 Feb 6, 2024

This vulnerability allows memory corruption in Qualcomm hardware components when processing event rings, where an untrusted context read pointer can be manipulated to point to arbitrary memory locatio...

CVE-2023-33070

HIGH CVSS 7.1 Dec 5, 2023

CVE-2023-33070 is a vulnerability in Qualcomm Automotive OS where improper authentication to secure IO calls allows attackers to cause a transient denial-of-service condition. This affects automotive ...

CVE-2023-33017

HIGH CVSS 7.8 Dec 5, 2023

This CVE describes a memory corruption vulnerability in the UEFI boot process when running a ListVars test during boot. It affects Qualcomm devices with vulnerable firmware, potentially allowing attac...

CVE-2023-28585

HIGH CVSS 8.2 Dec 5, 2023

This vulnerability allows memory corruption while loading ELF segments in the Trusted Execution Environment (TEE) kernel. Attackers could potentially execute arbitrary code in the TEE, compromising se...

CVE-2023-28546

HIGH CVSS 7.8 Dec 5, 2023

This vulnerability allows memory corruption in Qualcomm's SPS application when exporting public keys in the sorter TA. Attackers could potentially execute arbitrary code or cause denial of service on ...

CVE-2023-28556

HIGH CVSS 7.1 Nov 7, 2023

A cryptographic vulnerability in Qualcomm's HLOS (High-Level Operating System) during key management allows potential unauthorized access to sensitive cryptographic material. This affects devices usin...

CVE-2023-24852

HIGH CVSS 8.4 Nov 7, 2023

This vulnerability allows memory corruption in Qualcomm's Core due to improper secure memory access while loading modem images. Attackers could potentially execute arbitrary code or cause denial of se...

CVE-2023-28538

HIGH CVSS 8.4 Sep 5, 2023

This vulnerability allows memory corruption in Qualcomm WIN Product's UEFI region when invoking the WinAcpi update driver. Attackers could exploit this to execute arbitrary code or cause system crashe...

CVE-2023-21662

HIGH CVSS 7.8 Sep 5, 2023

CVE-2023-21662 is a memory corruption vulnerability in Qualcomm's Core Platform that occurs while printing response buffers in logs. This buffer overflow vulnerability could allow attackers to execute...

CVE-2023-21664

HIGH CVSS 7.8 Sep 5, 2023

This vulnerability allows memory corruption in Qualcomm's Core Platform when printing response buffers in logs. Attackers could potentially execute arbitrary code or cause denial of service. Affects d...

CVE-2023-21626

HIGH CVSS 7.1 Aug 8, 2023

This cryptographic vulnerability in Qualcomm's HLOS (High-Level Operating System) allows improper authentication during key velocity checks when multiple keys are involved. It affects devices using Qu...

CVE-2023-22387

HIGH CVSS 7.8 Jul 4, 2023

This vulnerability allows arbitrary memory overwrite when a virtual machine gets compromised during TX write operations, leading to memory corruption. It affects Qualcomm chipsets used in mobile devic...

CVE-2022-40529

HIGH CVSS 7.1 Jun 6, 2023

This vulnerability allows memory corruption in the Qualcomm kernel due to improper access control when processing mapping requests from root processes. It affects devices with Qualcomm chipsets, poten...

CVE-2023-21666

HIGH CVSS 8.4 May 2, 2023

CVE-2023-21666 is a memory corruption vulnerability in Qualcomm's Adreno GPU driver (KGSL) that allows attackers to access sensitive data from graphics memory pools. This affects Android devices with ...

CVE-2022-33243

HIGH CVSS 8.4 Feb 12, 2023

CVE-2022-33243 is a memory corruption vulnerability in Qualcomm's Inter-Processor Communication (IPC) subsystem due to improper access control. This allows attackers to execute arbitrary code or cause...

CVE-2021-30281

HIGH CVSS 8.4 Jun 14, 2022

This vulnerability allows unauthorized access to secure memory space in Qualcomm Snapdragon chipsets due to improper access control checks during device configuration flashing. It affects multiple Sna...

CVE-2021-30334

HIGH CVSS 8.4 Jun 14, 2022

This CVE describes a use-after-free vulnerability in Qualcomm Snapdragon chipsets where DRM file status isn't properly checked after file structure is freed. This could allow attackers to execute arbi...

CVE-2025-21464

MEDIUM CVSS 6.5 Aug 6, 2025

This vulnerability allows attackers to read sensitive information from image processing operations by manipulating offset and size parameters. It affects systems using Qualcomm components with vulnera...

CVE-2025-21465

MEDIUM CVSS 6.5 Aug 6, 2025

This vulnerability allows attackers to read sensitive information from memory when processing specially crafted MBN files. It affects systems using Qualcomm chipsets that process MBN files, potentiall...