IF
Product
Ipq8064 Firmware
On CISA KEVExploited in the wild
184
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 25High 131Medium 28Low 0
Watch
Add Ipq8064 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-33063 In wildKEV | 7.8 | Dec 5 | Use After Free in DSP Services Affected: 0 |
| CVE-2020-11269 | 8.8 | Feb 22 | Possible memory corruption while processing EAPOL frames due to lack of validation of key length before using it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2026-24088 | 8.2 | Jun 1 | Missing Authentication for Critical Function in Boot Affected: All versions, or not specified |
| CVE-2025-47339 | 7.8 | Jan 6 | Use After Free in HLOS Affected: All versions, or not specified |
| CVE-2024-33056 | 7.8 | Dec 2 | Buffer Over-read in MProc Affected: 0 |
| CVE-2024-23368 | 7.8 | Jul 1 | Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Qualcomm IPC Affected: 0 |
| CVE-2023-28578 | 7.8 | Mar 4 | Improper Input Validation in Services Affected: 0 |
| CVE-2023-33088 | 7.8 | Dec 5 | NULL pointer dereference in WLAN Firmware Affected: All versions, or not specified |
| CVE-2023-28539 | 7.8 | Oct 3 | Buffer Copy Without Checking Size of Input in WLAN Host Affected: All versions, or not specified |
| CVE-2023-28573 | 7.8 | Sep 5 | Improper Validation of Array Index in WLAN HAL Affected: All versions, or not specified |
| CVE-2023-28567 | 7.8 | Sep 5 | Improper Validation of Array Index in WLAN HAL Affected: All versions, or not specified |
| CVE-2023-28565 | 7.8 | Sep 5 | Improper Validation of Array Index in WLAN HAL Affected: All versions, or not specified |
| CVE-2023-28564 | 7.8 | Sep 5 | Use of Out-of-range Pointer Offset in WLAN HAL Affected: All versions, or not specified |
| CVE-2023-28560 | 7.8 | Sep 5 | Buffer Copy Without Checking Size of Input in WLAN HAL Affected: All versions, or not specified |
| CVE-2023-28559 | 7.8 | Sep 5 | Buffer Copy Without Checking Size of Input in WLAN HAL Affected: All versions, or not specified |
| CVE-2023-28558 | 7.8 | Sep 5 | Improper Validation of Array Index in WLAN HAL Affected: All versions, or not specified |
| CVE-2023-28557 | 7.8 | Sep 5 | Improper Validation of Array Index in WLAN HAL Affected: 0 |
| CVE-2023-28549 | 7.8 | Sep 5 | Improper Restriction of Operations within the Bounds of a Memory Buffer in WLAN HAL Affected: All versions, or not specified |
| CVE-2023-28548 | 7.8 | Sep 5 | Improper Validation of Array Index in WLAN HAL Affected: All versions, or not specified |
| CVE-2023-28544 | 7.8 | Sep 5 | Buffer Copy without Checking the Size of Input in WLAN Firmware Affected: All versions, or not specified |
| CVE-2022-33275 | 7.8 | Sep 5 | Improper validation of array index in WLAN HAL Affected: All versions, or not specified |
| CVE-2023-28541 | 7.8 | Jul 4 | Buffer Over-read in WLAN Host Affected: 0 |
| CVE-2023-22387 | 7.8 | Jul 4 | Use of Out-of-range Pointer Offset in Qualcomm IPC Affected: All versions, or not specified |
| CVE-2023-21628 | 7.8 | Jun 6 | Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN HAL Affected: All versions, or not specified |
| CVE-2022-40532 | 7.8 | Apr 4 | Integer overflow or wraparound in WLAN Affected: All versions, or not specified |
| CVE-2022-40531 | 7.8 | Mar 7 | Incorrect type conversion in WLAN Affected: All versions, or not specified |
| CVE-2022-25655 | 7.8 | Mar 7 | Buffer copy without checking the size of input in WLAN HAL. Affected: All versions, or not specified |
| CVE-2022-33277 | 7.8 | Feb 9 | Buffer copy without checking size of input in modem Affected: All versions, or not specified |
| CVE-2022-33243 | 7.8 | Feb 9 | Improper access control in Qualcomm IPC Affected: All versions, or not specified |
| CVE-2022-33276 | 7.8 | Jan 6 | Buffer copy without checking size of input in Modem Affected: All versions, or not specified |
| CVE-2022-25677 | 7.8 | Dec 13 | Memory corruption in diag due to use after free while processing dci packet in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-35103 | 7.8 | Apr 1 | Possible out of bound write due to improper validation of number of timer values received from firmware while syncing timers in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-35069 | 7.8 | Feb 11 | Improper validation of data length received from DMA buffer can lead to memory corruption Affected: All versions, or not specified |
| CVE-2021-30337 | 7.8 | Jan 3 | Possible use after free when process shell memory is freed using IOCTL call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30335 | 7.8 | Jan 3 | Possible assertion in QOS request due to improper validation when multiple add or update request are received simultaneously in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30303 | 7.8 | Jan 3 | Possible buffer overflow due to lack of buffer length check when segmented WMI command is received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30260 | 7.8 | Sep 17 | Possible Integer overflow to buffer overflow issue can occur due to improper validation of input parameters when extscan hostlist configuration command is received in Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1947 | 7.8 | Sep 17 | Use-after-free vulnerability in kernel graphics driver because of storing an invalid pointer in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1909 | 7.8 | Sep 9 | Buffer overflow occurs in trusted applications due to lack of length check of parameters in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2020-11267 | 7.8 | Jun 9 | Stack out-of-bounds write occurs while setting up a cipher device if the provided IV length exceeds the max limit value in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2020-11235 | 7.8 | Jun 9 | Buffer overflow might occur while parsing unified command due to lack of check of input data received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1927 | 7.8 | May 7 | Possible use after free due to lack of null check while memory is being freed in FastRPC driver in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1915 | 7.8 | May 7 | Buffer overflow can occur due to improper validation of NDP application information length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2021-1895 | 7.8 | May 7 | Possible integer overflow due to improper length check while flashing an image in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music Affected: All versions, or not specified |
| CVE-2021-1891 | 7.8 | May 7 | A possible use-after-free occurrence in audio driver can happen when pointers are not properly handled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2020-11271 | 7.8 | Feb 22 | Possible out of bounds while accessing global control elements due to race condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2020-3696 | 7.8 | Nov 2 | u'Use after free while installing new security rule in ipcrtr as old one is deleted and this rule could still be in use for checking security permission for particular process' in… Affected: All versions, or not specified |
| CVE-2020-11174 | 7.8 | Nov 2 | u'Array index underflow issue in adsp driver due to improper check of channel id before used as array index.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2020-11162 | 7.8 | Nov 2 | u'Possible buffer overflow in MHI driver due to lack of input parameter validation of EOT events received from MHI device side' in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2020-11125 | 7.8 | Nov 2 | u'Out of bound access can happen in MHI command process due to lack of check of channel id value received from MHI devices' in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
