This page lists publicly disclosed CVE vulnerabilities affecting qualcomm qcs405_firmware (linked via NVD CPE). Each row includes severity scores, summaries, and publication dates to help identify and analyze security issues.
| CVE | Summary | Source | Max CVSS | EPSS % | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2021-30299 | Possible out of bound access in audio module due to lack of validation of user provided input. | [email protected] | 6.7 | 0.12% | 2024-11-22 | 2026-06-16 |
| CVE-2023-28543 | A malformed DLC can trigger Memory Corruption in SNPE library due to out of bounds read, such as by loading an untrusted model (e.g. from a remote source). | [email protected] | 8.1 | 0.31% | 2023-09-05 | 2026-06-17 |
| CVE-2023-22666 | Memory Corruption in Audio while playing amrwbplus clips with modified content. | [email protected] | 8.4 | 0.05% | 2023-08-08 | 2026-06-17 |
| CVE-2023-21652 | Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use. | [email protected] | 7.7 | 0.05% | 2023-08-08 | 2026-06-17 |
| CVE-2023-21651 | Memory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE. | [email protected] | 9.3 | 0.05% | 2023-08-08 | 2026-06-17 |
| CVE-2023-21626 | Cryptographic issue in HLOS due to improper authentication while performing key velocity checks using more than one key. | [email protected] | 7.1 | 0.05% | 2023-08-08 | 2026-06-17 |
| CVE-2023-21625 | Information disclosure in Network Services due to buffer over-read while the device receives DNS response. | [email protected] | 8.2 | 0.30% | 2023-08-08 | 2026-06-17 |
| CVE-2022-40510 | Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder. | [email protected] | 9.8 | 0.36% | 2023-08-08 | 2026-06-17 |
| CVE-2022-40537 | Memory corruption in Bluetooth HOST while processing the AVRC_PDU_GET_PLAYER_APP_VALUE_TEXT AVRCP response. | [email protected] | 7.3 | 0.36% | 2023-03-10 | 2026-06-17 |
| CVE-2022-40531 | Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message. | [email protected] | 8.4 | 0.06% | 2023-03-10 | 2026-06-17 |
| CVE-2022-40530 | Memory corruption in WLAN due to integer overflow to buffer overflow in WLAN during initialization phase. | [email protected] | 8.4 | 0.05% | 2023-03-10 | 2026-06-17 |
| CVE-2022-40515 | Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms. | [email protected] | 7.3 | 0.31% | 2023-03-10 | 2026-06-17 |
| CVE-2022-33278 | Memory corruption due to buffer copy without checking the size of input in HLOS when input message size is larger than the buffer capacity. | [email protected] | 7.8 | 0.05% | 2023-03-10 | 2026-06-17 |
| CVE-2022-33257 | Memory corruption in Core due to time-of-check time-of-use race condition during dump collection in trust zone. | [email protected] | 9.3 | 0.05% | 2023-03-10 | 2026-06-17 |
| CVE-2022-33245 | Memory corruption in WLAN due to use after free | [email protected] | 6.7 | 0.12% | 2023-03-10 | 2026-06-17 |
| CVE-2022-33242 | Memory corruption due to improper authentication in Qualcomm IPC while loading unsigned lib in audio PD. | [email protected] | 7.8 | 0.14% | 2023-03-10 | 2026-06-17 |
| CVE-2022-33213 | Memory corruption in modem due to buffer overflow while processing a PPP packet | [email protected] | 7.5 | 0.41% | 2023-03-10 | 2026-06-17 |
| CVE-2022-25705 | Memory corruption in modem due to integer overflow to buffer overflow while handling APDU response | [email protected] | 7.8 | 0.06% | 2023-03-10 | 2026-06-17 |
| CVE-2022-25694 | Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM | [email protected] | 8.4 | 0.05% | 2023-03-10 | 2026-06-17 |
| CVE-2022-25655 | Memory corruption in WLAN HAL while arbitrary value is passed in WMI UTF command payload. | [email protected] | 8.4 | 0.05% | 2023-03-10 | 2026-06-17 |