📦 Qcx315 Firmware

by Qualcomm

🔍 What is Qcx315 Firmware?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2023-21651

CRITICAL CVSS 9.3 Aug 8, 2023

CVE-2023-21651 is a memory corruption vulnerability in Qualcomm's Trusted Execution Environment (TEE) due to incorrect type conversion in secure_io_read/write functions. This allows attackers to poten...

CVE-2022-40510

CRITICAL CVSS 9.8 Aug 8, 2023

CVE-2022-40510 is a critical memory corruption vulnerability in Qualcomm audio components that allows attackers to execute arbitrary code or cause denial of service. The vulnerability affects devices ...

CVE-2021-35104

CRITICAL CVSS 9.8 Jun 14, 2022

This vulnerability allows remote attackers to execute arbitrary code on affected Qualcomm Snapdragon devices by exploiting a buffer overflow in the FLAC audio header parser. Attackers can trigger this...

CVE-2021-30347

CRITICAL CVSS 9.1 Jun 14, 2022

This vulnerability in Qualcomm Snapdragon chipsets allows improper integrity checks leading to race conditions between PDCP and RRC tasks after receiving valid RRC command packets. Attackers could pot...

CVE-2021-30341

CRITICAL CVSS 9.8 Jun 14, 2022

This vulnerability allows improper buffer size validation in DSM packets received by Qualcomm Snapdragon chipsets, leading to memory corruption. Attackers can exploit this to execute arbitrary code or...

CVE-2021-30343

CRITICAL CVSS 9.1 Jun 14, 2022

This vulnerability in Qualcomm Snapdragon chipsets allows improper integrity checks leading to race conditions between PDCP and RRC tasks after receiving valid RRC Command packets. Attackers could pot...

CVE-2021-30317

CRITICAL CVSS 9.3 Feb 11, 2022

This vulnerability allows attackers to bypass image verification in Qualcomm Snapdragon chipsets by exploiting improper validation of ELF metadata in program headers. This affects numerous Snapdragon ...

CVE-2021-30285

CRITICAL CVSS 9.3 Jan 13, 2022

This vulnerability in Qualcomm Snapdragon hypervisors allows improper memory region validation, potentially enabling attackers to map incorrect memory regions. It affects numerous Snapdragon platforms...

CVE-2021-30351

CRITICAL CVSS 9.8 Jan 3, 2022

CVE-2021-30351 is a critical buffer overflow vulnerability in Qualcomm Snapdragon chipsets, allowing attackers to execute arbitrary code or cause denial of service by exploiting improper validation du...

CVE-2021-30275

CRITICAL CVSS 9.3 Jan 3, 2022

This vulnerability is an integer overflow in Qualcomm Snapdragon chipsets that could allow attackers to execute arbitrary code or cause denial of service. It affects multiple Snapdragon product lines ...

CVE-2021-1924

CRITICAL CVSS 9.0 Nov 12, 2021

This vulnerability allows attackers to extract RSA private keys through timing and power side-channel attacks during modular exponentiation in RSA-CRT implementations. It affects Qualcomm Snapdragon c...

CVE-2021-1975

CRITICAL CVSS 9.8 Nov 12, 2021

CVE-2021-1975 is a critical heap overflow vulnerability in Qualcomm Snapdragon chipsets that allows remote code execution via malformed DNS responses. Attackers can exploit this to execute arbitrary c...

CVE-2021-1976

CRITICAL CVSS 9.8 Sep 17, 2021

This critical vulnerability in Qualcomm Snapdragon chipsets allows remote code execution due to a use-after-free memory corruption flaw in Wi-Fi P2P (peer-to-peer) device address validation. Attackers...

CVE-2021-1972

CRITICAL CVSS 9.8 Sep 8, 2021

This vulnerability allows remote attackers to execute arbitrary code on affected Qualcomm Snapdragon devices due to a buffer overflow in the P2P search functionality. Attackers can exploit improper va...

CVE-2021-1916

CRITICAL CVSS 9.8 Sep 8, 2021

This vulnerability allows attackers to execute arbitrary code or cause denial of service by exploiting a buffer underflow in Qualcomm Snapdragon chipsets. It affects numerous Qualcomm-powered devices ...

CVE-2021-1920

CRITICAL CVSS 9.8 Sep 8, 2021

CVE-2021-1920 is an integer underflow vulnerability in Qualcomm Snapdragon chipsets' RTCP packet handling that allows remote code execution. Attackers can send specially crafted RTCP packets to trigge...

CVE-2023-21646

HIGH CVSS 7.5 Sep 5, 2023

This vulnerability allows attackers to cause a denial-of-service condition in Qualcomm modems by sending specially crafted System Information Block 1 messages. The modem may crash or become unresponsi...

CVE-2023-21626

HIGH CVSS 7.1 Aug 8, 2023

This cryptographic vulnerability in Qualcomm's HLOS (High-Level Operating System) allows improper authentication during key velocity checks when multiple keys are involved. It affects devices using Qu...

CVE-2023-22666

HIGH CVSS 8.4 Aug 8, 2023

CVE-2023-22666 is a memory corruption vulnerability in Qualcomm's audio processing component when playing specially crafted AMR-WB+ audio clips. This vulnerability allows attackers to execute arbitrar...

CVE-2022-33272

HIGH CVSS 7.5 Mar 10, 2023

CVE-2022-33272 is a reachable assertion vulnerability in Qualcomm modem firmware that can cause a denial of service (DoS) condition. When exploited, it triggers a modem crash requiring device reboot. ...

CVE-2022-40530

HIGH CVSS 8.4 Mar 10, 2023

This vulnerability allows attackers to execute arbitrary code or cause denial of service on affected Qualcomm WLAN chipsets due to memory corruption during initialization. It affects devices using vul...

CVE-2022-33248

HIGH CVSS 7.8 Feb 12, 2023

This vulnerability allows memory corruption in Qualcomm's User Identity Module due to an integer overflow that leads to buffer overflow when processing segments via QMI HTTP. It affects devices using ...

CVE-2022-33277

HIGH CVSS 8.4 Feb 12, 2023

This CVE describes a buffer overflow vulnerability in Qualcomm modem firmware that allows memory corruption when processing WMI commands. Attackers could potentially execute arbitrary code on affected...

CVE-2021-30350

HIGH CVSS 8.4 Jun 14, 2022

This vulnerability in Qualcomm Snapdragon chipsets allows memory corruption due to insufficient validation of MBN header size against input buffer. Attackers could potentially execute arbitrary code o...

CVE-2021-30281

HIGH CVSS 8.4 Jun 14, 2022

This vulnerability allows unauthorized access to secure memory space in Qualcomm Snapdragon chipsets due to improper access control checks during device configuration flashing. It affects multiple Sna...

CVE-2021-30334

HIGH CVSS 8.4 Jun 14, 2022

This CVE describes a use-after-free vulnerability in Qualcomm Snapdragon chipsets where DRM file status isn't properly checked after file structure is freed. This could allow attackers to execute arbi...

CVE-2021-30329

HIGH CVSS 7.5 Apr 1, 2022

This vulnerability in Qualcomm Snapdragon chipsets allows attackers to trigger an assertion failure due to improper validation of TCI configuration. It affects automotive, compute, connectivity, indus...

CVE-2021-30332

HIGH CVSS 7.5 Apr 1, 2022

This vulnerability in Qualcomm Snapdragon chipsets allows attackers to trigger a denial-of-service condition via improper validation of Over-The-Air (OTA) configuration data. It affects devices using ...

CVE-2021-35088

HIGH CVSS 8.2 Apr 1, 2022

This vulnerability allows attackers to read memory beyond intended boundaries during Wi-Fi SSID information element parsing when using DFS channels on affected Qualcomm Snapdragon chipsets. Successful...

CVE-2021-30322

HIGH CVSS 7.8 Feb 11, 2022

This vulnerability allows an attacker to write data beyond the intended memory boundaries in Qualcomm Snapdragon chipsets due to improper validation of GPIO configurations. It affects devices using Sn...

CVE-2021-30326

HIGH CVSS 7.5 Feb 11, 2022

This vulnerability in Qualcomm Snapdragon chipsets allows remote attackers to cause denial of service through improper size validation of DownlinkPreemption IE in RRC messages. It affects Snapdragon A...

CVE-2021-35069

HIGH CVSS 7.8 Feb 11, 2022

This vulnerability allows improper validation of data length from DMA buffers, leading to memory corruption in Qualcomm Snapdragon chipsets. It affects multiple Snapdragon product lines including Auto...

CVE-2021-30300

HIGH CVSS 7.5 Jan 13, 2022

This vulnerability in Qualcomm Snapdragon chipsets allows denial of service attacks due to improper hex data decoding in SIB2 OTA messages. When processing SRS configuration, the system assigns garbag...

CVE-2021-30307

HIGH CVSS 7.5 Jan 13, 2022

This vulnerability in Qualcomm Snapdragon chipsets allows denial of service attacks due to improper DNS response validation. When DNS clients request PTR, NAPTR, or SRV query types, malicious response...

CVE-2021-30311

HIGH CVSS 7.8 Jan 13, 2022

This vulnerability allows heap overflow attacks due to improper index validation in Qualcomm Snapdragon chipsets before allocating and writing to heap buffers. Attackers could potentially execute arbi...

CVE-2021-30319

HIGH CVSS 7.8 Jan 13, 2022

This vulnerability allows integer overflow in Qualcomm Snapdragon chipsets when processing WMI commands due to improper validation of command length parameters. Attackers could potentially execute arb...

CVE-2021-30353

HIGH CVSS 7.5 Jan 13, 2022

This vulnerability in Qualcomm Snapdragon chipsets involves improper validation of function pointer types, which can trigger an assertion failure. It affects various Snapdragon platforms including Aut...

CVE-2021-30272

HIGH CVSS 7.3 Jan 3, 2022

A null pointer dereference vulnerability in Qualcomm Snapdragon thread cache operation handler allows attackers to cause denial of service or potentially execute arbitrary code by exploiting insuffici...

CVE-2021-30274

HIGH CVSS 8.4 Jan 3, 2022

This integer overflow vulnerability in Qualcomm Snapdragon chipsets allows attackers to potentially bypass access control mechanisms or execute arbitrary code. It affects multiple Snapdragon product l...

CVE-2021-30278

HIGH CVSS 7.1 Jan 3, 2022

This vulnerability in Qualcomm's TrustZone memory transfer interface allows improper input validation that could lead to information disclosure. It affects multiple Snapdragon platforms including Auto...

CVE-2021-30282

HIGH CVSS 8.4 Jan 3, 2022

This vulnerability allows attackers to write data outside the intended memory boundaries in Qualcomm Snapdragon chipsets due to improper validation of partition counts in RAM partition tables. It affe...

CVE-2021-30303

HIGH CVSS 7.8 Jan 3, 2022

This vulnerability allows attackers to execute arbitrary code or cause denial of service on affected Qualcomm Snapdragon devices by sending specially crafted segmented WMI commands that trigger a buff...

CVE-2020-11263

HIGH CVSS 7.3 Jan 3, 2022

CVE-2020-11263 is an integer overflow vulnerability in Qualcomm Snapdragon chipsets that occurs when improper checks are performed after memory address and size alignment. This allows attackers to pot...

CVE-2021-30268

HIGH CVSS 7.8 Jan 3, 2022

This vulnerability allows heap memory corruption due to insufficient input validation when processing HWTC IQ Capture commands in Qualcomm Snapdragon chipsets. Attackers could potentially execute arbi...

CVE-2021-30270

HIGH CVSS 7.3 Jan 3, 2022

This vulnerability in Qualcomm Snapdragon chipsets allows potential denial-of-service or arbitrary code execution due to a null pointer dereference in the thread profile trap handler. Attackers could ...

CVE-2021-1981

HIGH CVSS 7.5 Nov 12, 2021

This vulnerability is a buffer over-read in Qualcomm Snapdragon chipsets due to improper size checking of Bearer capability information elements in MT setup requests from networks. It affects multiple...

CVE-2021-30254

HIGH CVSS 7.8 Nov 12, 2021

This vulnerability allows attackers to execute arbitrary code or cause denial of service through a buffer overflow in Qualcomm's factory calibration and test DIAG command. It affects numerous Snapdrag...

CVE-2021-30259

HIGH CVSS 7.8 Nov 12, 2021

This vulnerability allows out-of-bounds memory access due to improper validation of function table entries in Qualcomm Snapdragon chipsets. Attackers could potentially execute arbitrary code or cause ...

CVE-2021-1912

HIGH CVSS 8.4 Nov 12, 2021

This integer overflow vulnerability in Qualcomm Snapdragon chipsets could allow attackers to execute arbitrary code or cause denial of service. It affects devices using vulnerable Snapdragon Auto, Com...

CVE-2021-30302

HIGH CVSS 7.5 Oct 20, 2021

This vulnerability allows improper authentication of EAP WAPI EAPOL frames from unauthenticated users, potentially leading to information disclosure. It affects various Snapdragon chipsets used in com...

CVE-2021-1959

HIGH CVSS 7.8 Oct 20, 2021

This vulnerability in Qualcomm Snapdragon chipsets allows memory corruption due to improper input validation when handling index values. Attackers could exploit this to execute arbitrary code or cause...

CVE-2021-30261

HIGH CVSS 8.4 Sep 17, 2021

This vulnerability allows attackers to trigger integer and heap overflows by sending specially crafted beacon template update commands to affected Qualcomm Snapdragon chipsets. Successful exploitation...

CVE-2021-30295

HIGH CVSS 8.4 Sep 9, 2021

This vulnerability allows attackers to execute arbitrary code or cause denial of service via heap overflow in Qualcomm Snapdragon chipsets. It affects multiple Qualcomm Snapdragon platforms including ...

CVE-2021-1971

HIGH CVSS 7.5 Sep 9, 2021

This vulnerability in Qualcomm Snapdragon chipsets allows attackers to trigger an assertion failure due to lack of physical layer state validation. It affects multiple Snapdragon product lines includi...

CVE-2021-1952

HIGH CVSS 7.8 Sep 9, 2021

A buffer over-read vulnerability in Qualcomm Snapdragon chipsets allows attackers to read memory beyond allocated buffers due to insufficient length validation. This affects devices using vulnerable S...

CVE-2021-1935

HIGH CVSS 7.1 Sep 9, 2021

This vulnerability in Qualcomm Snapdragon chipsets allows potential denial of service or arbitrary code execution due to a null pointer dereference during key import operations. It affects multiple Sn...