Sd835 Firmware

DATE	CVE	VULNERABILITY TITLE	RISK
2023-03-10	CVE-2022-25705	Integer Overflow or Wraparound vulnerability in Qualcomm products Memory corruption in modem due to integer overflow to buffer overflow while handling APDU response local low complexity qualcomm CWE-190	7.8
2023-03-10	CVE-2022-25709	Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Qualcomm products Memory corruption in modem due to use of out of range pointer offset while processing qmi msg local low complexity qualcomm CWE-119	7.8
2023-03-10	CVE-2022-33213	Classic Buffer Overflow vulnerability in Qualcomm products Memory corruption in modem due to buffer overflow while processing a PPP packet network low complexity qualcomm CWE-120	8.8
2023-03-10	CVE-2022-33245	Use After Free vulnerability in Qualcomm products Memory corruption in WLAN due to use after free local low complexity qualcomm CWE-416	7.8
2023-03-10	CVE-2022-40515	Double Free vulnerability in Qualcomm products Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms. network low complexity qualcomm CWE-415 critical	9.8
2023-03-10	CVE-2022-40531	Incorrect Type Conversion or Cast vulnerability in Qualcomm products Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message. local low complexity qualcomm CWE-704	7.8
2023-03-10	CVE-2022-40537	Improper Validation of Array Index vulnerability in Qualcomm products Memory corruption in Bluetooth HOST while processing the AVRC_PDU_GET_PLAYER_APP_VALUE_TEXT AVRCP response. network low complexity qualcomm CWE-129 critical	9.8
2023-02-12	CVE-2022-33233	Out-of-bounds Write vulnerability in Qualcomm products Memory corruption due to configuration weakness in modem wile sending command to write protected files. local low complexity qualcomm CWE-787	7.8
2023-02-12	CVE-2022-33243	Unspecified vulnerability in Qualcomm products Memory corruption due to improper access control in Qualcomm IPC. local low complexity qualcomm	7.8
2023-02-12	CVE-2022-33248	Integer Overflow or Wraparound vulnerability in Qualcomm products Memory corruption in User Identity Module due to integer overflow to buffer overflow when a segement is received via qmi http. local low complexity qualcomm CWE-190	7.8