Msm8608 Firmware vulnerabilities

13 known vulnerabilities in Msm8608 Firmware from Qualcomm. 13 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Snapdragon: Improper Authentication

  CVE-2023-43551Jun 3, 2024Qualcomm

  Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command.

• 7.8 High severity

  Qualcomm Multiple Chipsets Integer Overflow Exploited

  CVE-2023-33107Dec 5, 2023QualcommEPSS 1.02%

  Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.

• 7.5 High severity

  Snapdragon Auto, Snapdragon Compute…: Reachable Assertion

  CVE-2022-25702Dec 13, 2022Qualcomm

  Denial of service in modem due to reachable assertion while processing reconfiguration message in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

• 7.8 High severity

  Snapdragon Auto, Snapdragon Compute…: Improper Validation of Array Index

  CVE-2022-25695Dec 13, 2022Qualcomm

  Memory corruption in MODEM due to Improper Validation of Array Index while processing GSTK Proactive commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile

• 7.5 High severity

  Snapdragon Auto, Snapdragon Compute…: Improper Authentication

  CVE-2022-25685Dec 13, 2022Qualcomm

  Denial of service in Modem module due to improper authorization while error handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

• 7.8 High severity

  Snapdragon Auto, Snapdragon Compute…: Improper Restriction of Operations within the Bounds of a Memory Buffer

  CVE-2022-25682Dec 13, 2022Qualcomm

  Memory corruption in MODEM UIM due to usage of out of range pointer offset while decoding command from card in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice

• 7.8 High severity

  Snapdragon Auto, Snapdragon Compute…: Use After Free

  CVE-2022-25743Nov 15, 2022Qualcomm

  Memory corruption in graphics due to use-after-free while importing graphics buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wea

• 7.8 High severity

  Snapdragon Auto, Snapdragon Compute…: Buffer Copy without Checking Size of Input

  CVE-2022-25724Nov 15, 2022Qualcomm

  Memory corruption in graphics due to buffer overflow while validating the user address in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon

• 9.8 Critical severity

  Snapdragon Auto, Snapdragon Compute…: Improper Validation of Array Index

  CVE-2022-25720Oct 19, 2022Qualcomm

  Memory corruption in WLAN due to out of bound array access during connect/roaming in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobi

• 9.1 Critical severity

  Snapdragon Auto, Snapdragon Connectivity…: Out-of-bounds Read

  CVE-2022-25719Oct 19, 2022Qualcomm

  Information disclosure in WLAN due to improper length check while processing authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT,

• 9.8 Critical severity

  Snapdragon Auto, Snapdragon Connectivity…: Unchecked Return Value

  CVE-2022-25718Oct 19, 2022Qualcomm

  Cryptographic issue in WLAN due to improper check on return value while authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snap

• 9.8 Critical severity

  Snapdragon Auto, Snapdragon Compute…: Buffer Copy without Checking Size of Input

  CVE-2022-25687Oct 19, 2022Qualcomm

  memory corruption in video due to buffer overflow while parsing asf clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

• 9.1 Critical severity

  Snapdragon Auto, Snapdragon Compute…: Out-of-bounds Read

  CVE-2022-22062Sep 2, 2022Qualcomm

  An out-of-bounds read can occur while parsing a server certificate due to improper length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, S