CPE Details
Qualcomm Smart Audio 200 Platform Firmware
-
2023-04-20
11h25 +00:00
11h25 +00:00
2023-08-29
09h33 +00:00
09h33 +00:00
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
CPE Name: cpe:2.3:o:qualcomm:smart_audio_200_platform_firmware:-:*:*:*:*:*:*:*
Informations
Vendor
qualcommProduct
smart_audio_200_platform_firmwareVersion
-Related CVE
| CVE ID | Publié | Description | Score | Gravité |
|---|---|---|---|---|
| Memory corruption while processing API calls to NPU with invalid input. | 7.8 |
Haute |
||
| Memory corruption when allocating and accessing an entry in an SMEM partition continuously. | 8.4 |
Haute |
||
| Memory corruption while processing GPU page table switch. | 7.8 |
Haute |
||
| Memory corruption while processing voice packet with arbitrary data received from ADSP. | 7.8 |
Haute |
||
| Transient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at UE. | 7.5 |
Haute |
||
| Transient DOS while handling PS event when Program Service name length offset value is set to 255. | 5.5 |
Moyen |
||
| Transient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI. | 7.5 |
Haute |
||
| Memory corruption in Audio while processing the calibration data returned from ACDB loader. | 7.8 |
Haute |
||
| Memory corruption in Audio while processing IIR config data from AFE calibration block. | 7.8 |
Haute |
||
| Memory corruption in Audio while calling START command on host voice PCM multiple times for the same RX or TX tap points. | 7.8 |
Haute |
||
| Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header. | 7.5 |
Haute |
||
| Memory corruption in Audio when memory map command is executed consecutively in ADSP. | 7.8 |
Haute |
||
| Memory corruption in Audio during playback with speaker protection. | 8.4 |
Haute |
||
| Memory corruption in HLOS while running playready use-case. | 9.3 |
Critique |
||
| Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call. | 8.4 |
Haute |
||
| Transient DOS in Bluetooth Host while rfc slot allocation. | 7.5 |
Haute |
||
| Information disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE. | 6.5 |
Moyen |
||
| Memory corruption in UTILS when modem processes memory specific Diag commands having arbitrary address values as input arguments. | 7.8 |
Haute |
||
| Memory corruption in MPP performance while accessing DSM watermark using external memory address. | 7.8 |
Haute |
||
| Memory Corruption in Multi-mode Call Processor while processing bit mask API. | 9.8 |
Critique |
||
| Information Disclosure in data Modem while parsing an FMTP line in an SDP message. | 8.2 |
Haute |
||
| Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value. | 8.2 |
Haute |
||
| Memory Corruption in Data Modem while making a MO call or MT VOLTE call. | 9.8 |
Critique |
||
| Memory corruption in WIN Product while invoking WinAcpi update driver in the UEFI region. | 8.4 |
Haute |
||
| Memory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command. | 8.4 |
Haute |
||
| Transient DOS due to improper authorization in Modem | 7.5 |
Haute |
||
| Memory corruption due to double free in Core while mapping HLOS address to the list. | 8.4 |
Haute |
||
| Memory corruption in modem due to stack based buffer overflow while parsing OTASP Key Generation Request Message. | 7.9 |
Haute |
||
| information disclosure due to cryptographic issue in Core during RPMB read request. | 7.1 |
Haute |
||
| Memory corruption due to double free in core while initializing the encryption key. | 9.3 |
Critique |
