📦 Sd845 Firmware

by Qualcomm

🔍 What is Sd845 Firmware?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2023-21651

CRITICAL CVSS 9.3 Aug 8, 2023

CVE-2023-21651 is a memory corruption vulnerability in Qualcomm's Trusted Execution Environment (TEE) due to incorrect type conversion in secure_io_read/write functions. This allows attackers to poten...

CVE-2022-40510

CRITICAL CVSS 9.8 Aug 8, 2023

CVE-2022-40510 is a critical memory corruption vulnerability in Qualcomm audio components that allows attackers to execute arbitrary code or cause denial of service. The vulnerability affects devices ...

CVE-2022-40514

CRITICAL CVSS 9.8 Feb 12, 2023

This vulnerability allows remote attackers to execute arbitrary code or cause denial of service on affected devices by exploiting a buffer overflow in WLAN firmware. It affects Qualcomm chipsets used ...

CVE-2022-33232

CRITICAL CVSS 9.3 Feb 12, 2023

CVE-2022-33232 is a critical buffer overflow vulnerability in Qualcomm memory sharing tests that allows attackers to execute arbitrary code or cause denial of service. This affects devices with Qualco...

CVE-2021-30317

CRITICAL CVSS 9.3 Feb 11, 2022

This vulnerability allows attackers to bypass image verification in Qualcomm Snapdragon chipsets by exploiting improper validation of ELF metadata in program headers. This affects numerous Snapdragon ...

CVE-2021-30351

CRITICAL CVSS 9.8 Jan 3, 2022

CVE-2021-30351 is a critical buffer overflow vulnerability in Qualcomm Snapdragon chipsets, allowing attackers to execute arbitrary code or cause denial of service by exploiting improper validation du...

CVE-2021-1976

CRITICAL CVSS 9.8 Sep 17, 2021

This critical vulnerability in Qualcomm Snapdragon chipsets allows remote code execution due to a use-after-free memory corruption flaw in Wi-Fi P2P (peer-to-peer) device address validation. Attackers...

CVE-2021-1933

CRITICAL CVSS 9.8 Sep 9, 2021

This vulnerability allows remote attackers to trigger a UE (User Equipment) assertion in Qualcomm Snapdragon chipsets by sending a specially crafted SIP INVITE message with an SDP body. Affected devic...

CVE-2021-1972

CRITICAL CVSS 9.8 Sep 8, 2021

This vulnerability allows remote attackers to execute arbitrary code on affected Qualcomm Snapdragon devices due to a buffer overflow in the P2P search functionality. Attackers can exploit improper va...

CVE-2020-11264

CRITICAL CVSS 9.1 Sep 8, 2021

This vulnerability allows attackers to inject arbitrary network packets during Wi-Fi authentication handshakes by exploiting improper authentication of non-EAPOL/WAPI frames. It affects Qualcomm Snapd...

CVE-2021-1916

CRITICAL CVSS 9.8 Sep 8, 2021

This vulnerability allows attackers to execute arbitrary code or cause denial of service by exploiting a buffer underflow in Qualcomm Snapdragon chipsets. It affects numerous Qualcomm-powered devices ...

CVE-2021-1920

CRITICAL CVSS 9.8 Sep 8, 2021

CVE-2021-1920 is an integer underflow vulnerability in Qualcomm Snapdragon chipsets' RTCP packet handling that allows remote code execution. Attackers can send specially crafted RTCP packets to trigge...

CVE-2020-11176

CRITICAL CVSS 9.8 Jun 9, 2021

This vulnerability allows remote attackers to execute arbitrary code or cause denial of service via heap overflow during IPSec certificate validation in Qualcomm Snapdragon chipsets. It affects device...

CVE-2020-11291

CRITICAL CVSS 9.8 Jun 9, 2021

This vulnerability allows remote attackers to execute arbitrary code or cause denial of service via buffer overflow in IKEv2 protocol handling in Qualcomm Snapdragon chipsets. It affects devices using...

CVE-2020-11159

CRITICAL CVSS 9.1 Jun 9, 2021

This CVE describes a buffer over-read vulnerability in Qualcomm Snapdragon chipsets when processing WPA/RSN information elements in Wi-Fi beacon and response frames. Attackers can exploit this to read...

CVE-2020-11182

CRITICAL CVSS 9.8 Jun 9, 2021

This vulnerability allows remote code execution via heap overflow in Qualcomm Snapdragon chipsets when parsing NAL headers in video processing. It affects devices using vulnerable Snapdragon Auto, Com...

CVE-2020-11126

CRITICAL CVSS 9.1 Jun 9, 2021

This vulnerability allows attackers to read memory beyond intended boundaries while parsing WLAN frames in Qualcomm Snapdragon chipsets. It affects numerous Snapdragon product lines including Auto, Mo...

CVE-2020-11227

CRITICAL CVSS 9.8 Mar 17, 2021

This vulnerability allows attackers to write data beyond allocated memory boundaries while parsing RTT/TTY packets in Qualcomm Snapdragon chipsets. It affects numerous Snapdragon-powered devices acros...

CVE-2020-11299

CRITICAL CVSS 9.8 Mar 17, 2021

A buffer overflow vulnerability in Qualcomm Snapdragon video processing allows attackers to execute arbitrary code by playing specially crafted video files. This affects numerous Snapdragon-powered de...

CVE-2020-11188

CRITICAL CVSS 9.1 Mar 17, 2021

This vulnerability is a buffer over-read in Qualcomm Snapdragon chipsets when parsing SDP values without proper NULL termination checks. It allows attackers to read memory beyond allocated buffers, po...

CVE-2023-28538

HIGH CVSS 8.4 Sep 5, 2023

This vulnerability allows memory corruption in Qualcomm WIN Product's UEFI region when invoking the WinAcpi update driver. Attackers could exploit this to execute arbitrary code or cause system crashe...

CVE-2023-21662

HIGH CVSS 7.8 Sep 5, 2023

CVE-2023-21662 is a memory corruption vulnerability in Qualcomm's Core Platform that occurs while printing response buffers in logs. This buffer overflow vulnerability could allow attackers to execute...

CVE-2023-21664

HIGH CVSS 7.8 Sep 5, 2023

This vulnerability allows memory corruption in Qualcomm's Core Platform when printing response buffers in logs. Attackers could potentially execute arbitrary code or cause denial of service. Affects d...

CVE-2023-28537

HIGH CVSS 8.4 Aug 8, 2023

This vulnerability allows memory corruption in Qualcomm's audio processing module (COmxApeDec) due to integer overflow during memory allocation. Attackers could potentially execute arbitrary code or c...

CVE-2023-21626

HIGH CVSS 7.1 Aug 8, 2023

This cryptographic vulnerability in Qualcomm's HLOS (High-Level Operating System) allows improper authentication during key velocity checks when multiple keys are involved. It affects devices using Qu...

CVE-2023-22666

HIGH CVSS 8.4 Aug 8, 2023

CVE-2023-22666 is a memory corruption vulnerability in Qualcomm's audio processing component when playing specially crafted AMR-WB+ audio clips. This vulnerability allows attackers to execute arbitrar...

CVE-2022-40515

HIGH CVSS 7.3 Mar 10, 2023

This vulnerability allows memory corruption through a double-free error when processing specially crafted 3gp video files with invalid metadata atoms. Attackers could potentially execute arbitrary cod...

CVE-2022-33243

HIGH CVSS 8.4 Feb 12, 2023

CVE-2022-33243 is a memory corruption vulnerability in Qualcomm's Inter-Processor Communication (IPC) subsystem due to improper access control. This allows attackers to execute arbitrary code or cause...

CVE-2022-33248

HIGH CVSS 7.8 Feb 12, 2023

This vulnerability allows memory corruption in Qualcomm's User Identity Module due to an integer overflow that leads to buffer overflow when processing segments via QMI HTTP. It affects devices using ...

CVE-2022-33277

HIGH CVSS 8.4 Feb 12, 2023

This CVE describes a buffer overflow vulnerability in Qualcomm modem firmware that allows memory corruption when processing WMI commands. Attackers could potentially execute arbitrary code on affected...

CVE-2022-22082

HIGH CVSS 8.4 Jun 14, 2022

This vulnerability allows memory corruption via buffer overflow when parsing DSF audio file headers with corrupted channel counts in Qualcomm Snapdragon chipsets. Attackers could potentially execute a...

CVE-2022-22084

HIGH CVSS 8.4 Jun 14, 2022

This vulnerability allows memory corruption when processing QCP audio files due to insufficient length validation in Qualcomm Snapdragon chipsets. Attackers could exploit this to execute arbitrary cod...

CVE-2022-22086

HIGH CVSS 7.3 Jun 14, 2022

This vulnerability allows memory corruption through a double free error when parsing malformed 3gp video files with invalid metadata atoms. It affects devices using Qualcomm Snapdragon chipsets across...

CVE-2022-22065

HIGH CVSS 7.5 Jun 14, 2022

This vulnerability is an out-of-bounds read in the WLAN HOST component of Qualcomm Snapdragon chipsets due to improper length checking. It affects multiple Qualcomm Snapdragon product lines including ...

CVE-2021-35083

HIGH CVSS 8.2 Jun 14, 2022

This vulnerability allows attackers to read memory beyond intended boundaries due to improper certificate chain validation in Qualcomm Snapdragon chipsets. It affects devices using vulnerable Snapdrag...

CVE-2021-30322

HIGH CVSS 7.8 Feb 11, 2022

This vulnerability allows an attacker to write data beyond the intended memory boundaries in Qualcomm Snapdragon chipsets due to improper validation of GPIO configurations. It affects devices using Sn...

CVE-2021-30319

HIGH CVSS 7.8 Jan 13, 2022

This vulnerability allows integer overflow in Qualcomm Snapdragon chipsets when processing WMI commands due to improper validation of command length parameters. Attackers could potentially execute arb...

CVE-2021-30289

HIGH CVSS 7.8 Jan 3, 2022

This vulnerability allows attackers to execute arbitrary code or cause denial of service via buffer overflow in Qualcomm Snapdragon chipsets. It affects devices using Snapdragon Auto, Compute, Consume...

CVE-2021-30303

HIGH CVSS 7.8 Jan 3, 2022

This vulnerability allows attackers to execute arbitrary code or cause denial of service on affected Qualcomm Snapdragon devices by sending specially crafted segmented WMI commands that trigger a buff...

CVE-2021-30262

HIGH CVSS 8.4 Jan 3, 2022

This vulnerability allows improper memory access due to improper socket state validation in Qualcomm Snapdragon chipsets. Attackers could potentially execute arbitrary code or cause denial of service ...

CVE-2021-30268

HIGH CVSS 7.8 Jan 3, 2022

This vulnerability allows heap memory corruption due to insufficient input validation when processing HWTC IQ Capture commands in Qualcomm Snapdragon chipsets. Attackers could potentially execute arbi...

CVE-2021-1981

HIGH CVSS 7.5 Nov 12, 2021

This vulnerability is a buffer over-read in Qualcomm Snapdragon chipsets due to improper size checking of Bearer capability information elements in MT setup requests from networks. It affects multiple...

CVE-2021-30254

HIGH CVSS 7.8 Nov 12, 2021

This vulnerability allows attackers to execute arbitrary code or cause denial of service through a buffer overflow in Qualcomm's factory calibration and test DIAG command. It affects numerous Snapdrag...

CVE-2021-30259

HIGH CVSS 7.8 Nov 12, 2021

This vulnerability allows out-of-bounds memory access due to improper validation of function table entries in Qualcomm Snapdragon chipsets. Attackers could potentially execute arbitrary code or cause ...

CVE-2021-30310

HIGH CVSS 7.5 Oct 20, 2021

This vulnerability allows attackers to cause buffer overflow by sending specially crafted CF-ACK and CF-Poll data frames to affected Qualcomm Snapdragon chipsets. It affects a wide range of Snapdragon...

CVE-2021-30288

HIGH CVSS 8.4 Oct 20, 2021

This vulnerability allows attackers to trigger a stack overflow by exploiting improper length validation of TLV (Type-Length-Value) data structures in Qualcomm Snapdragon chipsets. Successful exploita...

CVE-2020-11303

HIGH CVSS 8.6 Oct 20, 2021

This vulnerability in Qualcomm Snapdragon chipsets allows information disclosure when devices accept AMSDU frames with mismatched destination and source addresses. Attackers can potentially intercept ...

CVE-2021-1936

HIGH CVSS 7.5 Oct 20, 2021

This vulnerability is a null pointer dereference in Qualcomm Snapdragon chipsets that can cause denial of service or potential code execution. It affects automotive, compute, connectivity, consumer Io...

CVE-2021-1959

HIGH CVSS 7.8 Oct 20, 2021

This vulnerability in Qualcomm Snapdragon chipsets allows memory corruption due to improper input validation when handling index values. Attackers could exploit this to execute arbitrary code or cause...

CVE-2021-1977

HIGH CVSS 7.5 Oct 20, 2021

This vulnerability allows attackers to read beyond allocated memory boundaries during AEAD decryption in Qualcomm Snapdragon chipsets. It affects devices using Snapdragon Auto, Compute, Connectivity, ...

CVE-2021-30261

HIGH CVSS 8.4 Sep 17, 2021

This vulnerability allows attackers to trigger integer and heap overflows by sending specially crafted beacon template update commands to affected Qualcomm Snapdragon chipsets. Successful exploitation...

CVE-2021-30295

HIGH CVSS 8.4 Sep 9, 2021

This vulnerability allows attackers to execute arbitrary code or cause denial of service via heap overflow in Qualcomm Snapdragon chipsets. It affects multiple Qualcomm Snapdragon platforms including ...

CVE-2021-1935

HIGH CVSS 7.1 Sep 9, 2021

This vulnerability in Qualcomm Snapdragon chipsets allows potential denial of service or arbitrary code execution due to a null pointer dereference during key import operations. It affects multiple Sn...

CVE-2021-1909

HIGH CVSS 7.3 Sep 9, 2021

CVE-2021-1909 is a buffer overflow vulnerability in Qualcomm Snapdragon trusted applications due to insufficient parameter length validation. This allows attackers to execute arbitrary code in trusted...

CVE-2021-1914

HIGH CVSS 7.5 Sep 8, 2021

CVE-2021-1914 is an infinite loop vulnerability in Qualcomm Snapdragon chipsets where improper handling of unsupported input can cause a denial of service condition. This affects various Snapdragon pl...

CVE-2021-1953

HIGH CVSS 7.5 Jul 13, 2021

This vulnerability in Qualcomm Snapdragon chipsets allows remote attackers to trigger a reachable assertion by sending malformed Fine Timing Measurement Request (FTMR) frames. Exploitation could lead ...

CVE-2021-1955

HIGH CVSS 7.5 Jul 13, 2021

This vulnerability in Qualcomm Snapdragon chipsets allows denial of service attacks when connections are improperly handled during association rejection in SAP (Service Access Point) cases. It affects...

CVE-2021-1907

HIGH CVSS 7.5 Jul 13, 2021

A buffer overflow vulnerability in Qualcomm Snapdragon chipsets due to insufficient length validation in BA requests. This allows attackers to execute arbitrary code or cause denial of service on affe...

CVE-2021-1938

HIGH CVSS 7.5 Jul 13, 2021

This vulnerability in Qualcomm Snapdragon chipsets allows assertion failures due to improper verification during peer creation/deletion operations. It affects multiple Snapdragon product lines includi...

CVE-2021-1943

HIGH CVSS 7.5 Jul 13, 2021

This vulnerability allows attackers to read memory beyond allocated buffer boundaries in Qualcomm Snapdragon chipsets when parsing beacon responses. It affects devices using vulnerable Snapdragon comp...