Qualcomm Apq8052 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Qualcomm Apq8052 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (25)

• CVE-2020-11170 — CVSS 9.8 (critical): Out of bound memory access while playing music playbacks with crafted vorbis content due to improper checks in header extraction in…
• CVE-2022-25720 — CVSS 9.8 (critical): Memory corruption in WLAN due to out of bound array access during connect/roaming in Snapdragon Auto, Snapdragon Compute, Snapdragon…
• CVE-2022-22088 — CVSS 9.8 (critical): Memory corruption in Bluetooth HOST due to buffer overflow while parsing the command response received from remote
• CVE-2022-25718 — CVSS 9.1 (critical): Cryptographic issue in WLAN due to improper check on return value while authentication handshake in Snapdragon Auto, Snapdragon…
• CVE-2021-1924 — CVSS 9.0 (critical): Information disclosure through timing and power side-channels during mod exponentiation for RSA-CRT in Snapdragon Auto, Snapdragon Compute…
• CVE-2020-11269 — CVSS 8.8 (high): Possible memory corruption while processing EAPOL frames due to lack of validation of key length before using it in Snapdragon Auto…
• CVE-2022-25682 — CVSS 8.4 (high): Memory corruption in MODEM UIM due to usage of out of range pointer offset while decoding command from card in Snapdragon Auto, Snapdragon…
• CVE-2022-25724 — CVSS 8.4 (high): Memory corruption in graphics due to buffer overflow while validating the user address in Snapdragon Auto, Snapdragon Compute, Snapdragon…
• CVE-2022-25694 — CVSS 8.4 (high): Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM
• CVE-2022-25695 — CVSS 8.4 (high): Memory corruption in MODEM due to Improper Validation of Array Index while processing GSTK Proactive commands in Snapdragon Auto…
• CVE-2023-21665 — CVSS 8.4 (high): Memory corruption in Graphics while importing a file.
• CVE-2022-25743 — CVSS 8.4 (high): Memory corruption in graphics due to use-after-free while importing graphics buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon…
• CVE-2022-25719 — CVSS 8.2 (high): Information disclosure in WLAN due to improper length check while processing authentication handshake in Snapdragon Auto, Snapdragon…
• CVE-2023-33059 — CVSS 7.8 (high): Memory corruption in Audio while processing the VOC packet data from ADSP.
• CVE-2020-11207 — CVSS 7.8 (high): Buffer overflow in LibFastCV library due to improper size checks with respect to buffer length' in Snapdragon Auto, Snapdragon Compute…
• CVE-2022-25705 — CVSS 7.8 (high): Memory corruption in modem due to integer overflow to buffer overflow while handling APDU response
• CVE-2022-33233 — CVSS 7.8 (high): Memory corruption due to configuration weakness in modem wile sending command to write protected files.
• CVE-2018-11816 — CVSS 7.8 (high): Crafted Binder Request Causes Heap UAF in MediaServer
• CVE-2022-33213 — CVSS 7.5 (high): Memory corruption in modem due to buffer overflow while processing a PPP packet
• CVE-2023-33019 — CVSS 7.5 (high): Transient DOS in WLAN Host while doing channel switch announcement (CSA), when a mobile station receives invalid channel in CSA IE.
• CVE-2023-33020 — CVSS 7.5 (high): Transient DOS in WLAN Host when an invalid channel (like channel out of range) is received in STA during CSA IE.
• CVE-2021-1909 — CVSS 7.3 (high): Buffer overflow occurs in trusted applications due to lack of length check of parameters in Snapdragon Auto, Snapdragon Compute, Snapdragon…
• CVE-2022-40515 — CVSS 7.3 (high): Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms.
• CVE-2022-25687 — CVSS 7.3 (high): memory corruption in video due to buffer overflow while parsing asf clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity…
• CVE-2022-25664 — CVSS 6.2 (medium): Information disclosure due to exposure of information while GPU reads the data in Snapdragon Auto, Snapdragon Compute, Snapdragon…