CPE Details
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
CPE Name: cpe:2.3:h:qualcomm:sm4250-aa:-:*:*:*:*:*:*:*
Informations
Vendor
qualcommProduct
sm4250-aaVersion
-Related CVE
| CVE ID | Publié | Description | Score | Gravité |
|---|---|---|---|---|
| Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame. | 7.5 |
Haute |
||
| Memory corruption in Audio while running invalid audio recording from ADSP. | 7.8 |
Haute |
||
| Memory corruption in DSP Services during a remote call from HLOS to DSP. | 7.8 |
Haute |
||
| Memory corruption in HLOS while invoking IOCTL calls from user-space. | 8.4 |
Haute |
||
| Memory corruption while using the UIM diag command to get the operators name. | 7.8 |
Haute |
||
| Memory corruption in Boot while running a ListVars test in UEFI Menu during boot. | 7.8 |
Haute |
||
| Memory corruption in Audio while processing the VOC packet data from ADSP. | 7.8 |
Haute |
||
| Memory Corruption in Audio while invoking callback function in driver from ADSP. | 7.8 |
Haute |
||
| Memory corruption while invoking callback function of AFE from ADSP. | 7.8 |
Haute |
||
| Transient DOS in WLAN Firmware while parsing rsn ies. | 7.5 |
Haute |
||
| Cryptographic issue in Data Modem due to improper authentication during TLS handshake. | 9.1 |
Critique |
||
| Memory corruption in WLAN HAL while processing devIndex from untrusted WMI payload. | 7.8 |
Haute |
||
| Memory corruption due to improper validation of array index in WLAN HAL when received lm_itemNum is out of range. | 8.4 |
Haute |
||
| Memory Corruption in GPU Subsystem due to arbitrary command execution from GPU in privileged mode. | 7.8 |
Haute |
||
| Transient DOS in WLAN Firmware while processing frames with missing header fields. | 7.5 |
Haute |
||
| Memoru corruption in Audio when ADSP sends input during record use case. | 7.8 |
Haute |
||
| Memory corruption in WLAN HOST while receiving an WMI event from firmware. | 7.8 |
Haute |
||
| Memory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command. | 8.4 |
Haute |
||
| Transient DOS due to untrusted Pointer Dereference in core while sending USB QMI request. | 6.2 |
Moyen |
||
| Memory corruption due to improper access control in kernel while processing a mapping request from root process. | 7.8 |
Haute |
||
| Information disclosure in Kernel due to indirect branch misprediction. | 7.1 |
Haute |
||
| Transient DOS due to improper authorization in Modem | 7.5 |
Haute |
||
| Memory corruption due to double free in Core while mapping HLOS address to the list. | 8.4 |
Haute |
||
| Memory corruption in modem due to stack based buffer overflow while parsing OTASP Key Generation Request Message. | 7.9 |
Haute |
||
| information disclosure due to cryptographic issue in Core during RPMB read request. | 7.1 |
Haute |
||
| Transient DOS due to reachable assertion in Modem when UE received Downlink Data Indication message from the network. | 7.5 |
Haute |
||
| Memory Corruption in Graphics while accessing a buffer allocated through the graphics pool. | 8.4 |
Haute |
||
| Memory corruption in Graphics while importing a file. | 8.4 |
Haute |
||
| Transient DOS due to NULL pointer dereference in Modem while sending invalid messages in DCCH. | 7.5 |
Haute |
||
| Information disclosure due to buffer over-read in Bluetooth Host while A2DP streaming. | 8.2 |
Haute |
||
| Memory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than command length. | 7.8 |
Haute |
||
| Memory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card. | 6.8 |
Moyen |
||
| Memory corruption due to double free in core while initializing the encryption key. | 9.3 |
Critique |
2025©
tesweb SA
