📦 Sa515m Firmware

by Qualcomm

🔍 What is Sa515m Firmware?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2023-21651

CRITICAL CVSS 9.3 Aug 8, 2023

CVE-2023-21651 is a memory corruption vulnerability in Qualcomm's Trusted Execution Environment (TEE) due to incorrect type conversion in secure_io_read/write functions. This allows attackers to poten...

CVE-2022-40510

CRITICAL CVSS 9.8 Aug 8, 2023

CVE-2022-40510 is a critical memory corruption vulnerability in Qualcomm audio components that allows attackers to execute arbitrary code or cause denial of service. The vulnerability affects devices ...

CVE-2022-40514

CRITICAL CVSS 9.8 Feb 12, 2023

This vulnerability allows remote attackers to execute arbitrary code or cause denial of service on affected devices by exploiting a buffer overflow in WLAN firmware. It affects Qualcomm chipsets used ...

CVE-2022-25651

CRITICAL CVSS 9.8 Jun 14, 2022

This vulnerability allows remote attackers to execute arbitrary code or cause denial of service via memory corruption in Qualcomm Bluetooth chips. It affects devices using Snapdragon processors with B...

CVE-2021-35104

CRITICAL CVSS 9.8 Jun 14, 2022

This vulnerability allows remote attackers to execute arbitrary code on affected Qualcomm Snapdragon devices by exploiting a buffer overflow in the FLAC audio header parser. Attackers can trigger this...

CVE-2021-30347

CRITICAL CVSS 9.1 Jun 14, 2022

This vulnerability in Qualcomm Snapdragon chipsets allows improper integrity checks leading to race conditions between PDCP and RRC tasks after receiving valid RRC command packets. Attackers could pot...

CVE-2021-30341

CRITICAL CVSS 9.8 Jun 14, 2022

This vulnerability allows improper buffer size validation in DSM packets received by Qualcomm Snapdragon chipsets, leading to memory corruption. Attackers can exploit this to execute arbitrary code or...

CVE-2021-30343

CRITICAL CVSS 9.1 Jun 14, 2022

This vulnerability in Qualcomm Snapdragon chipsets allows improper integrity checks leading to race conditions between PDCP and RRC tasks after receiving valid RRC Command packets. Attackers could pot...

CVE-2021-30317

CRITICAL CVSS 9.3 Feb 11, 2022

This vulnerability allows attackers to bypass image verification in Qualcomm Snapdragon chipsets by exploiting improper validation of ELF metadata in program headers. This affects numerous Snapdragon ...

CVE-2021-30285

CRITICAL CVSS 9.3 Jan 13, 2022

This vulnerability in Qualcomm Snapdragon hypervisors allows improper memory region validation, potentially enabling attackers to map incorrect memory regions. It affects numerous Snapdragon platforms...

CVE-2021-30351

CRITICAL CVSS 9.8 Jan 3, 2022

CVE-2021-30351 is a critical buffer overflow vulnerability in Qualcomm Snapdragon chipsets, allowing attackers to execute arbitrary code or cause denial of service by exploiting improper validation du...

CVE-2021-30275

CRITICAL CVSS 9.3 Jan 3, 2022

This vulnerability is an integer overflow in Qualcomm Snapdragon chipsets that could allow attackers to execute arbitrary code or cause denial of service. It affects multiple Snapdragon product lines ...

CVE-2021-1924

CRITICAL CVSS 9.0 Nov 12, 2021

This vulnerability allows attackers to extract RSA private keys through timing and power side-channel attacks during modular exponentiation in RSA-CRT implementations. It affects Qualcomm Snapdragon c...

CVE-2021-1976

CRITICAL CVSS 9.8 Sep 17, 2021

This critical vulnerability in Qualcomm Snapdragon chipsets allows remote code execution due to a use-after-free memory corruption flaw in Wi-Fi P2P (peer-to-peer) device address validation. Attackers...

CVE-2021-1972

CRITICAL CVSS 9.8 Sep 8, 2021

This vulnerability allows remote attackers to execute arbitrary code on affected Qualcomm Snapdragon devices due to a buffer overflow in the P2P search functionality. Attackers can exploit improper va...

CVE-2021-1916

CRITICAL CVSS 9.8 Sep 8, 2021

This vulnerability allows attackers to execute arbitrary code or cause denial of service by exploiting a buffer underflow in Qualcomm Snapdragon chipsets. It affects numerous Qualcomm-powered devices ...

CVE-2021-1920

CRITICAL CVSS 9.8 Sep 8, 2021

CVE-2021-1920 is an integer underflow vulnerability in Qualcomm Snapdragon chipsets' RTCP packet handling that allows remote code execution. Attackers can send specially crafted RTCP packets to trigge...

CVE-2020-11176

CRITICAL CVSS 9.8 Jun 9, 2021

This vulnerability allows remote attackers to execute arbitrary code or cause denial of service via heap overflow during IPSec certificate validation in Qualcomm Snapdragon chipsets. It affects device...

CVE-2020-11291

CRITICAL CVSS 9.8 Jun 9, 2021

This vulnerability allows remote attackers to execute arbitrary code or cause denial of service via buffer overflow in IKEv2 protocol handling in Qualcomm Snapdragon chipsets. It affects devices using...

CVE-2020-11159

CRITICAL CVSS 9.1 Jun 9, 2021

This CVE describes a buffer over-read vulnerability in Qualcomm Snapdragon chipsets when processing WPA/RSN information elements in Wi-Fi beacon and response frames. Attackers can exploit this to read...

CVE-2023-21646

HIGH CVSS 7.5 Sep 5, 2023

This vulnerability allows attackers to cause a denial-of-service condition in Qualcomm modems by sending specially crafted System Information Block 1 messages. The modem may crash or become unresponsi...

CVE-2023-21626

HIGH CVSS 7.1 Aug 8, 2023

This cryptographic vulnerability in Qualcomm's HLOS (High-Level Operating System) allows improper authentication during key velocity checks when multiple keys are involved. It affects devices using Qu...

CVE-2023-22666

HIGH CVSS 8.4 Aug 8, 2023

CVE-2023-22666 is a memory corruption vulnerability in Qualcomm's audio processing component when playing specially crafted AMR-WB+ audio clips. This vulnerability allows attackers to execute arbitrar...

CVE-2022-40530

HIGH CVSS 8.4 Mar 10, 2023

This vulnerability allows attackers to execute arbitrary code or cause denial of service on affected Qualcomm WLAN chipsets due to memory corruption during initialization. It affects devices using vul...

CVE-2022-33243

HIGH CVSS 8.4 Feb 12, 2023

CVE-2022-33243 is a memory corruption vulnerability in Qualcomm's Inter-Processor Communication (IPC) subsystem due to improper access control. This allows attackers to execute arbitrary code or cause...

CVE-2022-33248

HIGH CVSS 7.8 Feb 12, 2023

This vulnerability allows memory corruption in Qualcomm's User Identity Module due to an integer overflow that leads to buffer overflow when processing segments via QMI HTTP. It affects devices using ...

CVE-2022-33277

HIGH CVSS 8.4 Feb 12, 2023

This CVE describes a buffer overflow vulnerability in Qualcomm modem firmware that allows memory corruption when processing WMI commands. Attackers could potentially execute arbitrary code on affected...

CVE-2022-22065

HIGH CVSS 7.5 Jun 14, 2022

This vulnerability is an out-of-bounds read in the WLAN HOST component of Qualcomm Snapdragon chipsets due to improper length checking. It affects multiple Qualcomm Snapdragon product lines including ...

CVE-2021-35112

HIGH CVSS 8.4 Jun 14, 2022

This vulnerability allows a user with standard permissions to access protected graphics memory regions due to improper access control in register configuration on Qualcomm Snapdragon chips. It affects...

CVE-2021-35083

HIGH CVSS 8.2 Jun 14, 2022

This vulnerability allows attackers to read memory beyond intended boundaries due to improper certificate chain validation in Qualcomm Snapdragon chipsets. It affects devices using vulnerable Snapdrag...

CVE-2021-35086

HIGH CVSS 7.5 Jun 14, 2022

This CVE describes a buffer over-read vulnerability in Qualcomm Snapdragon chipsets when processing NR system information messages. Attackers could potentially read sensitive data from adjacent memory...

CVE-2021-35096

HIGH CVSS 7.5 Jun 14, 2022

This vulnerability in Qualcomm Snapdragon chipsets involves improper memory allocation during counter check DLM handling, which can cause denial of service. It affects devices using Snapdragon Auto, C...

CVE-2021-35102

HIGH CVSS 7.8 Jun 14, 2022

This vulnerability is a buffer overflow in Qualcomm Snapdragon chipsets that could allow attackers to execute arbitrary code or cause denial of service. It affects devices using Snapdragon Auto, Compu...

CVE-2021-30350

HIGH CVSS 8.4 Jun 14, 2022

This vulnerability in Qualcomm Snapdragon chipsets allows memory corruption due to insufficient validation of MBN header size against input buffer. Attackers could potentially execute arbitrary code o...

CVE-2021-35076

HIGH CVSS 7.5 Jun 14, 2022

This vulnerability allows attackers to cause denial of service or potentially execute arbitrary code by sending a specially crafted RRC connection reconfiguration message to affected Qualcomm Snapdrag...

CVE-2021-30334

HIGH CVSS 8.4 Jun 14, 2022

This CVE describes a use-after-free vulnerability in Qualcomm Snapdragon chipsets where DRM file status isn't properly checked after file structure is freed. This could allow attackers to execute arbi...

CVE-2021-30281

HIGH CVSS 8.4 Jun 14, 2022

This vulnerability allows unauthorized access to secure memory space in Qualcomm Snapdragon chipsets due to improper access control checks during device configuration flashing. It affects multiple Sna...

CVE-2021-30329

HIGH CVSS 7.5 Apr 1, 2022

This vulnerability in Qualcomm Snapdragon chipsets allows attackers to trigger an assertion failure due to improper validation of TCI configuration. It affects automotive, compute, connectivity, indus...

CVE-2021-30332

HIGH CVSS 7.5 Apr 1, 2022

This vulnerability in Qualcomm Snapdragon chipsets allows attackers to trigger a denial-of-service condition via improper validation of Over-The-Air (OTA) configuration data. It affects devices using ...

CVE-2021-35088

HIGH CVSS 8.2 Apr 1, 2022

This vulnerability allows attackers to read memory beyond intended boundaries during Wi-Fi SSID information element parsing when using DFS channels on affected Qualcomm Snapdragon chipsets. Successful...

CVE-2021-35103

HIGH CVSS 7.8 Apr 1, 2022

This vulnerability allows an attacker to write data beyond allocated memory bounds in Qualcomm Snapdragon chipsets due to improper validation of timer values from firmware. It affects multiple Snapdra...

CVE-2021-35106

HIGH CVSS 7.8 Apr 1, 2022

This vulnerability allows attackers to read memory beyond intended boundaries in Qualcomm Snapdragon chipsets due to improper WMI message length calculation. It affects numerous Snapdragon-powered dev...

CVE-2021-30322

HIGH CVSS 7.8 Feb 11, 2022

This vulnerability allows an attacker to write data beyond the intended memory boundaries in Qualcomm Snapdragon chipsets due to improper validation of GPIO configurations. It affects devices using Sn...

CVE-2021-30326

HIGH CVSS 7.5 Feb 11, 2022

This vulnerability in Qualcomm Snapdragon chipsets allows remote attackers to cause denial of service through improper size validation of DownlinkPreemption IE in RRC messages. It affects Snapdragon A...

CVE-2021-35069

HIGH CVSS 7.8 Feb 11, 2022

This vulnerability allows improper validation of data length from DMA buffers, leading to memory corruption in Qualcomm Snapdragon chipsets. It affects multiple Snapdragon product lines including Auto...

CVE-2021-30300

HIGH CVSS 7.5 Jan 13, 2022

This vulnerability in Qualcomm Snapdragon chipsets allows denial of service attacks due to improper hex data decoding in SIB2 OTA messages. When processing SRS configuration, the system assigns garbag...

CVE-2021-30307

HIGH CVSS 7.5 Jan 13, 2022

This vulnerability in Qualcomm Snapdragon chipsets allows denial of service attacks due to improper DNS response validation. When DNS clients request PTR, NAPTR, or SRV query types, malicious response...

CVE-2021-30311

HIGH CVSS 7.8 Jan 13, 2022

This vulnerability allows heap overflow attacks due to improper index validation in Qualcomm Snapdragon chipsets before allocating and writing to heap buffers. Attackers could potentially execute arbi...

CVE-2021-30319

HIGH CVSS 7.8 Jan 13, 2022

This vulnerability allows integer overflow in Qualcomm Snapdragon chipsets when processing WMI commands due to improper validation of command length parameters. Attackers could potentially execute arb...

CVE-2021-30353

HIGH CVSS 7.5 Jan 13, 2022

This vulnerability in Qualcomm Snapdragon chipsets involves improper validation of function pointer types, which can trigger an assertion failure. It affects various Snapdragon platforms including Aut...

CVE-2021-30272

HIGH CVSS 7.3 Jan 3, 2022

A null pointer dereference vulnerability in Qualcomm Snapdragon thread cache operation handler allows attackers to cause denial of service or potentially execute arbitrary code by exploiting insuffici...

CVE-2021-30274

HIGH CVSS 8.4 Jan 3, 2022

This integer overflow vulnerability in Qualcomm Snapdragon chipsets allows attackers to potentially bypass access control mechanisms or execute arbitrary code. It affects multiple Snapdragon product l...

CVE-2021-30278

HIGH CVSS 7.1 Jan 3, 2022

This vulnerability in Qualcomm's TrustZone memory transfer interface allows improper input validation that could lead to information disclosure. It affects multiple Snapdragon platforms including Auto...

CVE-2021-30282

HIGH CVSS 8.4 Jan 3, 2022

This vulnerability allows attackers to write data outside the intended memory boundaries in Qualcomm Snapdragon chipsets due to improper validation of partition counts in RAM partition tables. It affe...

CVE-2021-30303

HIGH CVSS 7.8 Jan 3, 2022

This vulnerability allows attackers to execute arbitrary code or cause denial of service on affected Qualcomm Snapdragon devices by sending specially crafted segmented WMI commands that trigger a buff...

CVE-2021-30268

HIGH CVSS 7.8 Jan 3, 2022

This vulnerability allows heap memory corruption due to insufficient input validation when processing HWTC IQ Capture commands in Qualcomm Snapdragon chipsets. Attackers could potentially execute arbi...

CVE-2021-1981

HIGH CVSS 7.5 Nov 12, 2021

This vulnerability is a buffer over-read in Qualcomm Snapdragon chipsets due to improper size checking of Bearer capability information elements in MT setup requests from networks. It affects multiple...

CVE-2021-30259

HIGH CVSS 7.8 Nov 12, 2021

This vulnerability allows out-of-bounds memory access due to improper validation of function table entries in Qualcomm Snapdragon chipsets. Attackers could potentially execute arbitrary code or cause ...

CVE-2021-1912

HIGH CVSS 8.4 Nov 12, 2021

This integer overflow vulnerability in Qualcomm Snapdragon chipsets could allow attackers to execute arbitrary code or cause denial of service. It affects devices using vulnerable Snapdragon Auto, Com...

CVE-2021-30310

HIGH CVSS 7.5 Oct 20, 2021

This vulnerability allows attackers to cause buffer overflow by sending specially crafted CF-ACK and CF-Poll data frames to affected Qualcomm Snapdragon chipsets. It affects a wide range of Snapdragon...