Qualcomm Sdx20 Firmware vulnerabilities

530 known vulnerabilities, 3 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Exploited Qualcomm Sdx20 Firmware vulnerabilities

CVE-2020-11261 — Qualcomm Multiple Chipsets Improper Input Validation Vulnerability
CVE-2021-1906 — Qualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerability
CVE-2021-1905 — Qualcomm Multiple Chipsets Use-After-Free Vulnerability

CVE-2018-11922 — Configurations in Android Build (CVSS 5.5)
CVE-2022-40510 — Buffer copy without checking size of input in Audio. (CVSS 9.8)
CVE-2022-40537 — Improper Validation of Array Index in Bluetooth HOST (CVSS 9.8)
CVE-2022-40531 — Incorrect type conversion in WLAN (CVSS 7.8)
CVE-2022-40515 — Double free in Video (CVSS 9.8)
CVE-2022-33213 — Memory Corruption in MODEM (CVSS 8.8)
CVE-2022-25705 — Integer Overflow to Buffer Overflow in Modem (CVSS 7.8)
CVE-2022-25694 — Use of Out-of-range Pointer Offset in MODEM (CVSS 7.8)
CVE-2022-22075 — Information Exposure in Graphics (CVSS 5.5)
CVE-2022-40512 — Buffer over-read in WLAN Firmware. (CVSS 7.5)
CVE-2022-33280 — Access of uninitialized pointer in Bluetooth HOST (CVSS 8.8)
CVE-2022-33271 — Buffer over-read in WLAN (CVSS 7.5)
CVE-2022-33248 — Integer overflow to buffer overflow in User Identity Module (CVSS 7.8)
CVE-2022-33233 — Configuration weakness in modem (CVSS 7.8)
CVE-2022-33299 — Null pointer dereference in Bluetooth HOST (CVSS 7.5)
CVE-2022-33290 — Null pointer dereference in Bluetooth HOST (CVSS 7.5)
CVE-2022-33286 — Buffer over-read in WLAN (CVSS 6.5)
CVE-2022-33285 — Buffer over-read in WLAN (CVSS 6.5)
CVE-2022-33266 — Integer overflow to buffer overflow in Audio (CVSS 7.8)
CVE-2022-22079 — Buffer Over-read in BOOT (CVSS 4.6)
CVE-2022-33238 — (CVSS 7.5)
CVE-2022-33235 — (CVSS 7.5)
CVE-2022-25695 — (CVSS 7.8)
CVE-2022-25682 — (CVSS 7.8)
CVE-2022-25743 — (CVSS 7.8)