📦 Sc8180x\+sdx55 Firmware

This vulnerability allows a rogue LTE base station to bypass authentication during network attachment, enabling man-in-the-middle attacks. It affects mobile devices with Qualcomm chipsets that handle ...

CVE-2023-28578 is a memory corruption vulnerability in Qualcomm Core Services that occurs when removing a single event listener. This allows attackers to potentially execute arbitrary code or cause de...

This vulnerability allows memory corruption in the TrustZone Secure OS when requesting memory allocation from the Trusted Application region. It affects Qualcomm chipsets with TrustZone technology, po...

CVE-2023-28562 is a critical buffer overflow vulnerability in Qualcomm chipsets that allows remote attackers to execute arbitrary code or cause denial of service by sending specially crafted ESL paylo...

CVE-2022-40510 is a critical memory corruption vulnerability in Qualcomm audio components that allows attackers to execute arbitrary code or cause denial of service. The vulnerability affects devices ...

CVE-2022-33288 is a critical buffer overflow vulnerability in Qualcomm's Core component that allows memory corruption when sending SCM commands to retrieve write protection information. Attackers can ...

CVE-2022-33231 is a double-free memory corruption vulnerability in Qualcomm chipsets that occurs during encryption key initialization. Successful exploitation could allow attackers to execute arbitrar...

This vulnerability allows attackers to extract RSA private keys through timing and power side-channel attacks during modular exponentiation in RSA-CRT implementations. It affects Qualcomm Snapdragon c...

CVE-2021-1975 is a critical heap overflow vulnerability in Qualcomm Snapdragon chipsets that allows remote code execution via malformed DNS responses. Attackers can exploit this to execute arbitrary c...

This vulnerability allows remote attackers to trigger a UE (User Equipment) assertion in Qualcomm Snapdragon chipsets by sending a specially crafted SIP INVITE message with an SDP body. Affected devic...

This vulnerability allows remote attackers to execute arbitrary code or cause denial of service via buffer overflow in IKEv2 protocol handling in Qualcomm Snapdragon chipsets. It affects devices using...

This vulnerability allows remote code execution via heap overflow in Qualcomm Snapdragon chipsets when parsing NAL headers in video processing. It affects devices using vulnerable Snapdragon Auto, Com...

This vulnerability allows memory corruption when processing JPEG data through IOCTL calls without proper validation. Attackers could potentially execute arbitrary code or cause denial of service. This...

This vulnerability allows memory corruption in Qualcomm's PlayReady APP implementation when processing TA commands, potentially enabling arbitrary code execution. It affects devices with Qualcomm chip...

This CVE describes a cryptographic vulnerability in RSA PKCS padding decoding that could allow attackers to decrypt sensitive data or forge digital signatures. It affects Qualcomm products implementin...

This CVE describes a memory corruption vulnerability in Qualcomm components that occurs when processing simultaneous requests via an escape path. Successful exploitation could allow attackers to execu...

This CVE describes a use-after-free vulnerability (CWE-416) in Qualcomm components where abrupt client process termination during event handling causes memory corruption. Attackers could potentially e...

This vulnerability allows memory corruption when processing a private escape command in an event trigger, potentially leading to arbitrary code execution or system crashes. It affects Qualcomm product...

This vulnerability involves memory corruption in Qualcomm components when processing multiple simultaneous escape calls, potentially allowing attackers to execute arbitrary code or cause denial of ser...

This vulnerability allows memory corruption when a user-space application makes a specific IOCTL call to read board data on Qualcomm chipsets. Attackers could potentially execute arbitrary code or cau...

This vulnerability allows memory corruption when processing escape codes in a Qualcomm API, potentially leading to arbitrary code execution. It affects systems using Qualcomm chipsets with vulnerable ...

This vulnerability allows user-space applications to trigger memory corruption through an IOCTL call when reading board data. It affects systems using Qualcomm hardware with vulnerable drivers. Succes...

This vulnerability allows memory corruption when a user-space application makes a specific IOCTL call to write board data to the WLAN driver. Attackers could potentially execute arbitrary code or caus...

This vulnerability allows memory corruption in the Qualcomm JPEG Encoder driver when processing IOCTL input parameters. Attackers could exploit this to execute arbitrary code with kernel privileges on...

This vulnerability allows memory corruption in Qualcomm camera drivers when taking snapshots with specific offset variables. Attackers could potentially execute arbitrary code or cause denial of servi...

This vulnerability allows a denial-of-service attack when loading Trusted Application (TA) ELF files on Qualcomm chipsets. It affects devices using Qualcomm processors with vulnerable firmware. Attack...

This vulnerability allows memory corruption through improper input validation in FastRPC's IOCTL handler. Attackers could potentially execute arbitrary code with kernel privileges on affected Qualcomm...

CVE-2024-21476 is a memory corruption vulnerability in Qualcomm components where improper validation of user-supplied channel IDs can lead to arbitrary code execution. This affects devices using vulne...

This vulnerability allows attackers to cause a denial-of-service condition in IKEv2 implementations by sending malformed fragment packets. It affects systems using Qualcomm's IKEv2 implementation, pot...

This CVE describes a memory corruption vulnerability in the SPS Application's sorter Trusted Application (TA) when requesting public keys. Successful exploitation could allow attackers to execute arbi...

This vulnerability allows memory corruption in Qualcomm audio drivers when processing RT proxy port register operations. Attackers could potentially execute arbitrary code or cause denial of service o...

This vulnerability in Qualcomm components allows a denial-of-service (DoS) attack when parsing files with specific length characteristics. It affects devices using vulnerable Qualcomm chipsets, potent...

This vulnerability in Qualcomm chipsets allows a denial-of-service attack when processing empty or NULL encrypted keys during key unwrapping. It affects devices using vulnerable Qualcomm components, p...

This vulnerability allows attackers to cause a denial-of-service (DoS) condition in Qualcomm WLAN firmware by sending specially crafted IPv6 packets with IPPROTO_NONE as the next header in extension h...

This vulnerability allows a remote attacker to cause a denial-of-service (DoS) condition in Qualcomm's Data Modem during DTLS handshake processing. It affects devices using Qualcomm chipsets with vuln...

This vulnerability allows attackers to cause a denial-of-service (DoS) condition by sending specially crafted WLAN packets that trigger a NULL pointer dereference in the wireless driver. It affects de...

CVE-2023-33081 is a buffer overflow vulnerability in Qualcomm chipsets that occurs when processing Target Wake Time (TWT) frame parameters in over-the-air broadcasts. This vulnerability allows attacke...

This CVE describes a memory corruption vulnerability in the UEFI boot process when running a ListVars test during boot. It affects Qualcomm devices with vulnerable firmware, potentially allowing attac...

This vulnerability allows memory corruption in the High-Level Operating System (HLOS) when user-space applications make specific IOCTL calls to Qualcomm hardware components. Attackers could exploit th...

This vulnerability allows memory corruption in Qualcomm modem UTILS when processing Diag commands with arbitrary address values. Attackers could potentially execute arbitrary code or cause denial of s...

This vulnerability allows memory corruption while loading ELF segments in the Trusted Execution Environment (TEE) kernel. Attackers could potentially execute arbitrary code in the TEE, compromising se...

This vulnerability allows memory corruption in Qualcomm Bluetooth controllers when parsing specific debug commands at the HCI interface level. Attackers could potentially execute arbitrary code or cau...

This vulnerability allows memory corruption in Qualcomm's SPS application when exporting public keys in the sorter TA. Attackers could potentially execute arbitrary code or cause denial of service on ...

A cryptographic vulnerability in Qualcomm's HLOS (High-Level Operating System) during key management allows potential unauthorized access to sensitive cryptographic material. This affects devices usin...

This vulnerability allows memory corruption in Qualcomm's Core due to improper secure memory access while loading modem images. Attackers could potentially execute arbitrary code or cause denial of se...

This vulnerability allows information disclosure in Qualcomm data modems during VoLTE calls when an undefined RTCP FB line value is processed. Attackers could potentially access sensitive information ...

This vulnerability allows memory corruption in Qualcomm data modem chipsets during mobile-originated or mobile-terminated VoLTE calls. Attackers could potentially execute arbitrary code or cause denia...

This vulnerability allows memory corruption in Qualcomm's WLAN Hardware Abstraction Layer (HAL) when processing command streams through WMI interfaces. Attackers could potentially execute arbitrary co...

This vulnerability allows memory corruption in Qualcomm's WLAN Hardware Abstraction Layer (HAL) when parsing WMI command parameters. Attackers could potentially execute arbitrary code or cause denial ...

This vulnerability allows an attacker to cause a denial-of-service (DoS) condition in Qualcomm WLAN firmware by sending specially crafted beacon frames with malformed MBSSID information elements. It a...

This vulnerability allows memory corruption in Qualcomm WIN Product's UEFI region when invoking the WinAcpi update driver. Attackers could exploit this to execute arbitrary code or cause system crashe...

This vulnerability allows memory corruption in Qualcomm WLAN firmware when sending transmit commands from the host operating system to UTF handlers. Attackers could potentially execute arbitrary code ...

This vulnerability allows attackers to read sensitive information from image processing operations by manipulating offset and size parameters. It affects systems using Qualcomm components with vulnera...

This vulnerability allows attackers to read sensitive information from memory when processing specially crafted MBN files. It affects systems using Qualcomm chipsets that process MBN files, potentiall...