📦 Sd680 Firmware

by Qualcomm

🔍 What is Sd680 Firmware?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2023-21651

CRITICAL CVSS 9.3 Aug 8, 2023

CVE-2023-21651 is a memory corruption vulnerability in Qualcomm's Trusted Execution Environment (TEE) due to incorrect type conversion in secure_io_read/write functions. This allows attackers to poten...

CVE-2022-40510

CRITICAL CVSS 9.8 Aug 8, 2023

CVE-2022-40510 is a critical memory corruption vulnerability in Qualcomm audio components that allows attackers to execute arbitrary code or cause denial of service. The vulnerability affects devices ...

CVE-2022-40514

CRITICAL CVSS 9.8 Feb 12, 2023

This vulnerability allows remote attackers to execute arbitrary code or cause denial of service on affected devices by exploiting a buffer overflow in WLAN firmware. It affects Qualcomm chipsets used ...

CVE-2021-30339

CRITICAL CVSS 9.0 Jun 14, 2022

This vulnerability in Qualcomm Snapdragon chipsets allows improper cryptographic key generation due to insufficient buffer validation when reading PRNG output. Attackers could potentially generate wea...

CVE-2021-30341

CRITICAL CVSS 9.8 Jun 14, 2022

This vulnerability allows improper buffer size validation in DSM packets received by Qualcomm Snapdragon chipsets, leading to memory corruption. Attackers can exploit this to execute arbitrary code or...

CVE-2023-28538

HIGH CVSS 8.4 Sep 5, 2023

This vulnerability allows memory corruption in Qualcomm WIN Product's UEFI region when invoking the WinAcpi update driver. Attackers could exploit this to execute arbitrary code or cause system crashe...

CVE-2023-28537

HIGH CVSS 8.4 Aug 8, 2023

This vulnerability allows memory corruption in Qualcomm's audio processing module (COmxApeDec) due to integer overflow during memory allocation. Attackers could potentially execute arbitrary code or c...

CVE-2023-21626

HIGH CVSS 7.1 Aug 8, 2023

This cryptographic vulnerability in Qualcomm's HLOS (High-Level Operating System) allows improper authentication during key velocity checks when multiple keys are involved. It affects devices using Qu...

CVE-2023-22666

HIGH CVSS 8.4 Aug 8, 2023

CVE-2023-22666 is a memory corruption vulnerability in Qualcomm's audio processing component when playing specially crafted AMR-WB+ audio clips. This vulnerability allows attackers to execute arbitrar...

CVE-2023-21630

HIGH CVSS 8.4 Apr 13, 2023

This vulnerability allows memory corruption in Qualcomm's multimedia framework due to integer overflow when synx bind is called with synx signal. It affects Android devices with Qualcomm chipsets, pot...

CVE-2022-40515

HIGH CVSS 7.3 Mar 10, 2023

This vulnerability allows memory corruption through a double-free error when processing specially crafted 3gp video files with invalid metadata atoms. Attackers could potentially execute arbitrary cod...

CVE-2022-40535

HIGH CVSS 7.5 Mar 10, 2023

This vulnerability allows attackers to cause a denial-of-service (DoS) condition in affected Qualcomm WLAN chipsets by sending specially crafted packets that trigger a buffer over-read. The vulnerabil...

CVE-2022-40502

HIGH CVSS 7.5 Feb 12, 2023

This vulnerability allows attackers to cause a denial-of-service (DoS) condition in affected wireless LAN (WLAN) hosts by sending specially crafted input that triggers improper validation. It affects ...

CVE-2022-33248

HIGH CVSS 7.8 Feb 12, 2023

This vulnerability allows memory corruption in Qualcomm's User Identity Module due to an integer overflow that leads to buffer overflow when processing segments via QMI HTTP. It affects devices using ...

CVE-2022-33277

HIGH CVSS 8.4 Feb 12, 2023

This CVE describes a buffer overflow vulnerability in Qualcomm modem firmware that allows memory corruption when processing WMI commands. Attackers could potentially execute arbitrary code on affected...

CVE-2022-34146

HIGH CVSS 7.5 Feb 12, 2023

This vulnerability allows attackers to cause a denial-of-service (DoS) condition in affected Qualcomm WLAN Host systems by sending specially crafted frames during defragmentation. It affects devices w...

CVE-2022-22071

HIGH CVSS 8.4 Jun 14, 2022

This is a use-after-free vulnerability in Qualcomm Snapdragon chipsets that allows attackers to execute arbitrary code or cause denial of service. It affects multiple Qualcomm product lines including ...

CVE-2022-22082

HIGH CVSS 8.4 Jun 14, 2022

This vulnerability allows memory corruption via buffer overflow when parsing DSF audio file headers with corrupted channel counts in Qualcomm Snapdragon chipsets. Attackers could potentially execute a...

CVE-2022-22084

HIGH CVSS 8.4 Jun 14, 2022

This vulnerability allows memory corruption when processing QCP audio files due to insufficient length validation in Qualcomm Snapdragon chipsets. Attackers could exploit this to execute arbitrary cod...

CVE-2022-22086

HIGH CVSS 7.3 Jun 14, 2022

This vulnerability allows memory corruption through a double free error when parsing malformed 3gp video files with invalid metadata atoms. It affects devices using Qualcomm Snapdragon chipsets across...

CVE-2022-22057

HIGH CVSS 8.4 Jun 14, 2022

This is a use-after-free vulnerability in Qualcomm's kgsl graphics driver that occurs due to a race condition when closing fence file descriptors while destroying graphics timelines simultaneously. Su...

CVE-2022-22065

HIGH CVSS 7.5 Jun 14, 2022

This vulnerability is an out-of-bounds read in the WLAN HOST component of Qualcomm Snapdragon chipsets due to improper length checking. It affects multiple Qualcomm Snapdragon product lines including ...

CVE-2021-35116

HIGH CVSS 7.7 Jun 14, 2022

This vulnerability allows a malicious Android application (APK) to load a specially crafted model into the Qualcomm CDSP (Compute DSP), potentially compromising the CDSP and accessing data from other ...

CVE-2021-35083

HIGH CVSS 8.2 Jun 14, 2022

This vulnerability allows attackers to read memory beyond intended boundaries due to improper certificate chain validation in Qualcomm Snapdragon chipsets. It affects devices using vulnerable Snapdrag...

CVE-2021-35094

HIGH CVSS 7.8 Jun 14, 2022

This vulnerability allows attackers to bypass authentication in Qualcomm Snapdragon chipsets by exploiting improper timeout-based verification in identity credential handling. It affects devices using...

CVE-2021-30350

HIGH CVSS 8.4 Jun 14, 2022

This vulnerability in Qualcomm Snapdragon chipsets allows memory corruption due to insufficient validation of MBN header size against input buffer. Attackers could potentially execute arbitrary code o...

CVE-2021-35072

HIGH CVSS 7.8 Jun 14, 2022

This vulnerability allows attackers to execute arbitrary code or cause denial of service on Qualcomm Snapdragon devices by sending specially crafted DIAG commands. It affects various Snapdragon platfo...

CVE-2021-30281

HIGH CVSS 8.4 Jun 14, 2022

This vulnerability allows unauthorized access to secure memory space in Qualcomm Snapdragon chipsets due to improper access control checks during device configuration flashing. It affects multiple Sna...