Sa4155P Firmware

DATE	CVE	VULNERABILITY TITLE	RISK
2023-06-06	CVE-2023-21657	Improper Input Validation vulnerability in Qualcomm products Memoru corruption in Audio when ADSP sends input during record use case. local low complexity qualcomm CWE-20	7.8
2023-06-06	CVE-2023-21670	Incorrect Authorization vulnerability in Qualcomm products Memory Corruption in GPU Subsystem due to arbitrary command execution from GPU in privileged mode. local low complexity qualcomm CWE-863	7.8
2023-05-02	CVE-2022-25713	Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Qualcomm products Memory corruption in Automotive due to Improper Restriction of Operations within the Bounds of a Memory Buffer while exporting a shared key. local low complexity qualcomm CWE-119	7.8
2023-05-02	CVE-2023-21665	Incorrect Type Conversion or Cast vulnerability in Qualcomm products Memory corruption in Graphics while importing a file. local low complexity qualcomm CWE-704	7.8
2023-04-13	CVE-2022-33231	Double Free vulnerability in Qualcomm products Memory corruption due to double free in core while initializing the encryption key. local low complexity qualcomm CWE-415	7.8
2023-03-10	CVE-2022-22075	Unspecified vulnerability in Qualcomm products Information Disclosure in Graphics during GPU context switch. local low complexity qualcomm	5.5
2023-03-10	CVE-2022-33242	Improper Authentication vulnerability in Qualcomm products Memory corruption due to improper authentication in Qualcomm IPC while loading unsigned lib in audio PD. local low complexity qualcomm CWE-287	7.8
2023-03-10	CVE-2022-33278	Classic Buffer Overflow vulnerability in Qualcomm products Memory corruption due to buffer copy without checking the size of input in HLOS when input message size is larger than the buffer capacity. local low complexity qualcomm CWE-120	7.8
2023-02-12	CVE-2022-33277	Classic Buffer Overflow vulnerability in Qualcomm products Memory corruption in modem due to buffer copy without checking size of input while receiving WMI command. local low complexity qualcomm CWE-120	7.8
2023-02-12	CVE-2022-40512	Out-of-bounds Read vulnerability in Qualcomm products Transient DOS in WLAN Firmware due to buffer over-read while processing probe response or beacon. network low complexity qualcomm CWE-125	7.5