Sm8250 Security Vulnerabilities

CVE-2023-33079

Memory corruption in Audio while running invalid audio recording from...

CVE-2023-33080

Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management...

CVE-2023-33081

Transient DOS while converting TWT (Target Wake Time) frame parameters in the OTA...

CVE-2023-33063

Memory corruption in DSP Services during a remote call from HLOS to...

CVE-2023-33044

Transient DOS in Data modem while handling TLB control messages from the...

CVE-2023-33042

Transient DOS in Modem after RRC Setup message is...

CVE-2023-33054

Cryptographic issue in GPS HLOS Driver while downloading Qualcomm GNSS assistance...

CVE-2023-33018

Memory corruption while using the UIM diag command to get the operators...

CVE-2023-33022

Memory corruption in HLOS while invoking IOCTL calls from...

CVE-2023-33017

Memory corruption in Boot while running a ListVars test in UEFI Menu during...

CVE-2023-33024

Memory corruption while sending SMS from AP...

CVE-2023-33055

Memory Corruption in Audio while invoking callback function in driver from...

CVE-2023-33059

Memory corruption in Audio while processing the VOC packet data from...

CVE-2023-33031

Memory corruption in Automotive Audio while copying data from ADSP shared buffer to the VOC packet data...

CVE-2023-33047

Transient DOS in WLAN Firmware while parsing no-inherit...

CVE-2023-33045

Memory corruption in WLAN Firmware while parsing a NAN management frame carrying a S3...

CVE-2023-33035

Memory corruption while invoking callback function of AFE from...

CVE-2023-33028

Memory corruption in WLAN Firmware while doing a memory copy of pmk...

CVE-2023-33027

Transient DOS in WLAN Firmware while parsing rsn...

CVE-2023-33026

Transient DOS in WLAN Firmware while parsing a NAN management...

CVE-2023-28539

Memory corruption in WLAN Host when the firmware invokes multiple WMI Service Available...

CVE-2023-28540

Cryptographic issue in Data Modem due to improper authentication during TLS...

CVE-2023-28571

Information disclosure in WLAN HOST while processing the WLAN scan descriptor list during roaming...

CVE-2023-24849

Information Disclosure in data Modem while parsing an FMTP line in an SDP...

CVE-2023-24850

Memory Corruption in HLOS while importing a cryptographic key into KeyMaster Trusted...

CVE-2023-24853

Memory Corruption in HLOS while registering for key provisioning...

CVE-2023-24848

Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line...

CVE-2023-24847

Transient DOS in Modem while allocating DSM...

CVE-2023-24843

Transient DOS in Modem while triggering a camping on an 5G...

CVE-2023-22385

Memory Corruption in Data Modem while making a MO call or MT VOLTE...

CVE-2023-21673

Improper Access to the VM resource manager can lead to Memory...

CVE-2022-33275

Memory corruption due to improper validation of array index in WLAN HAL when received lm_itemNum is out of...

CVE-2023-21657

Memoru corruption in Audio when ADSP sends input during record use...

CVE-2023-21659

Transient DOS in WLAN Firmware while processing frames with missing header...

CVE-2023-21658

Transient DOS in WLAN Firmware while processing the received beacon or probe response...

CVE-2023-21669

Information Disclosure in WLAN HOST while sending DPP action frame to peer with an invalid source...

CVE-2023-21670

Memory Corruption in GPU Subsystem due to arbitrary command execution from GPU in privileged...

CVE-2023-21656

Memory corruption in WLAN HOST while receiving an WMI event from...

CVE-2023-21661

Transient DOS while parsing WLAN beacon or probe-response...

CVE-2022-40523

Information disclosure in Kernel due to indirect branch...

CVE-2022-40529

Memory corruption due to improper access control in kernel while processing a mapping request from root...

CVE-2022-40536

Transient DOS due to improper authentication in modem while receiving plain TLB OTA request message from...

CVE-2022-40507

Memory corruption due to double free in Core while mapping HLOS address to the...

CVE-2022-40533

Transient DOS due to untrusted Pointer Dereference in core while sending USB QMI...

CVE-2022-40521

Transient DOS due to improper authorization in...

CVE-2022-33227

Memory corruption in Linux android due to double free while calling unregister provider after register...

CVE-2022-33267

Memory corruption in Linux while sending DRM...

CVE-2022-33307

Memory Corruption due to double free in automotive when a bad HLOS address for one of the lists to be mapped is...

CVE-2022-33251

Transient DOS due to reachable assertion in Modem because of invalid network...

CVE-2022-33264

Memory corruption in modem due to stack based buffer overflow while parsing OTASP Key Generation Request...