📦 Qm215 Firmware

by Qualcomm

🔍 What is Qm215 Firmware?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2023-33054

CRITICAL CVSS 9.1 Dec 5, 2023

CVE-2023-33054 is a cryptographic vulnerability in Qualcomm's GPS HLOS driver that allows improper authentication when downloading GNSS assistance data. This affects Android devices with Qualcomm chip...

CVE-2023-28540

CRITICAL CVSS 9.1 Oct 3, 2023

This vulnerability in Qualcomm Data Modem chips allows attackers to bypass TLS authentication during handshake, potentially enabling man-in-the-middle attacks. It affects devices using vulnerable Qual...

CVE-2022-40510

CRITICAL CVSS 9.8 Aug 8, 2023

CVE-2022-40510 is a critical memory corruption vulnerability in Qualcomm audio components that allows attackers to execute arbitrary code or cause denial of service. The vulnerability affects devices ...

CVE-2020-11168

CRITICAL CVSS 9.8 Nov 12, 2020

This CVE describes a null-pointer dereference vulnerability in Qualcomm Snapdragon chipsets that allows attackers to access memory beyond allocated buffer boundaries. When exploited, it can lead to de...

CVE-2020-11184

CRITICAL CVSS 9.8 Nov 12, 2020

This vulnerability allows remote attackers to execute arbitrary code on affected Qualcomm Snapdragon devices by exploiting a buffer overflow in the video parser when processing specially crafted MP4 f...

CVE-2020-3703

CRITICAL CVSS 9.8 Nov 2, 2020

This CVE describes a buffer over-read vulnerability in Bluetooth peripheral firmware across multiple Qualcomm Snapdragon platforms. Attackers can exploit this by sending specially crafted Bluetooth pa...

CVE-2023-33070

HIGH CVSS 7.1 Dec 5, 2023

CVE-2023-33070 is a vulnerability in Qualcomm Automotive OS where improper authentication to secure IO calls allows attackers to cause a transient denial-of-service condition. This affects automotive ...

CVE-2023-33079

HIGH CVSS 7.8 Dec 5, 2023

This vulnerability allows memory corruption in the Audio subsystem when processing invalid audio recording data from the ADSP (Audio Digital Signal Processor). It affects Qualcomm devices with vulnera...

CVE-2023-28537

HIGH CVSS 8.4 Aug 8, 2023

This vulnerability allows memory corruption in Qualcomm's audio processing module (COmxApeDec) due to integer overflow during memory allocation. Attackers could potentially execute arbitrary code or c...

CVE-2023-21626

HIGH CVSS 7.1 Aug 8, 2023

This cryptographic vulnerability in Qualcomm's HLOS (High-Level Operating System) allows improper authentication during key velocity checks when multiple keys are involved. It affects devices using Qu...

CVE-2023-22666

HIGH CVSS 8.4 Aug 8, 2023

CVE-2023-22666 is a memory corruption vulnerability in Qualcomm's audio processing component when playing specially crafted AMR-WB+ audio clips. This vulnerability allows attackers to execute arbitrar...

CVE-2022-40521

HIGH CVSS 7.5 Jun 6, 2023

CVE-2022-40521 is an improper authorization vulnerability in Qualcomm modem firmware that allows attackers to cause a transient denial of service (DoS) by sending specially crafted requests. This affe...

CVE-2022-33264

HIGH CVSS 7.9 Jun 6, 2023

CVE-2022-33264 is a stack-based buffer overflow vulnerability in Qualcomm modem firmware that allows memory corruption when parsing OTASP Key Generation Request Messages. Successful exploitation could...

CVE-2022-40504

HIGH CVSS 7.5 May 2, 2023

This vulnerability allows a denial-of-service (DoS) attack on mobile devices by sending a specially crafted Downlink Data Indication message to the modem. When exploited, it triggers a reachable asser...

CVE-2023-21666

HIGH CVSS 8.4 May 2, 2023

CVE-2023-21666 is a memory corruption vulnerability in Qualcomm's Adreno GPU driver (KGSL) that allows attackers to access sensitive data from graphics memory pools. This affects Android devices with ...

CVE-2022-40503

HIGH CVSS 8.2 Apr 13, 2023

This vulnerability allows attackers to read sensitive information from Bluetooth-enabled devices during A2DP audio streaming. It affects devices with Qualcomm Bluetooth chipsets that have not been pat...