SF
Product
Sd855 Firmware
On CISA KEVExploited in the wild
184
CVEs
3
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 16High 135Medium 33Low 0
Watch
Add Sd855 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-33095 | 7.5 | Mar 4 | Reachable Assertion in Multi-Mode Call Processor Affected: 0 |
| CVE-2023-33086 | 7.5 | Mar 4 | Improper Release of Memory Before Removing Last Reference in Data Modem Affected: 0 |
| CVE-2023-33057 | 7.5 | Feb 6 | Improper Input Validation in Multi-Mode Call Processor Affected: All versions, or not specified |
| CVE-2023-33049 | 7.5 | Feb 6 | Improper Release of Memory Before Removing Last Reference in Multi-Mode Call Processor Affected: All versions, or not specified |
| CVE-2023-33040 | 7.5 | Jan 2 | Buffer Over-read in Data Modem Affected: All versions, or not specified |
| CVE-2023-33044 | 7.5 | Dec 5 | Reachable Assertion in Data Modem Affected: All versions, or not specified |
| CVE-2023-33042 | 7.5 | Dec 5 | Improper Input Validation in Modem Affected: All versions, or not specified |
| CVE-2023-28540 | 7.5 | Oct 3 | Improper Authentication in Data Modem Affected: All versions, or not specified |
| CVE-2023-24843 | 7.5 | Oct 3 | Reachable Assertion in Modem Affected: All versions, or not specified |
| CVE-2023-28584 | 7.5 | Sep 5 | Transient DOS in WLAN Host when a mobile station receives invalid channel in CSA IE while doing channel switch announcement (CSA) Affected: All versions, or not specified |
| CVE-2023-21669 | 7.5 | Jun 6 | Information Disclosure in WLAN HOST while sending DPP action frame to peer with an invalid source address Affected: All versions, or not specified |
| CVE-2022-40536 | 7.5 | Jun 6 | Transient DOS due to improper authentication in modem while receiving plain TLB OTA request message from network Affected: All versions, or not specified |
| CVE-2022-33251 | 7.5 | Jun 6 | Transient DOS due to reachable assertion in Modem because of invalid network configuration Affected: All versions, or not specified |
| CVE-2022-22060 | 7.5 | Jun 6 | Assertion occurs while processing Reconfiguration message due to improper validation Affected: All versions, or not specified |
| CVE-2022-40508 | 7.5 | May 2 | Transient DOS due to reachable assertion in Modem while processing config related to cross carrier scheduling, which is not supported Affected: All versions, or not specified |
| CVE-2022-33254 | 7.5 | Mar 10 | Transient DOS due to reachable assertion in Modem while processing SIB1 Message Affected: All versions, or not specified |
| CVE-2022-33250 | 7.5 | Mar 10 | Transient DOS due to reachable assertion in modem when network repeatedly sent invalid message container for NR to LTE handover Affected: All versions, or not specified |
| CVE-2022-25702 | 7.5 | Dec 13 | Denial of service in modem due to reachable assertion while processing reconfiguration message in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-35096 | 7.5 | Jun 14 | Improper memory allocation during counter check DLM handling can lead to denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial… Affected: All versions, or not specified |
| CVE-2021-35086 | 7.5 | Jun 14 | Possible buffer over read due to improper validation of SIB type when processing a NR system Information message in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2021-35076 | 7.5 | Jun 14 | Possible null pointer dereference due to improper validation of RRC connection reconfiguration message in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-35073 | 7.5 | Jun 14 | Possible assertion due to improper validation of rank restriction field in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1982 | 7.5 | Nov 12 | Possible denial of service scenario due to improper input validation of received NAS OTA message in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1907 | 7.5 | Jul 13 | Possible buffer overflow due to lack of length check in BA request in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial… Affected: All versions, or not specified |
| CVE-2023-33065 | 7.1 | Feb 6 | Buffer Over-read in Audio Affected: 0 |
| CVE-2022-25665 | 7.1 | Oct 12 | Information disclosure due to buffer over read in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile Affected: All versions, or not specified |
| CVE-2021-35085 | 7.1 | Jun 14 | Possible buffer overflow due to lack of buffer length check during management frame Rx handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-35084 | 7.1 | Jun 14 | Possible out of bound read due to lack of length check of data length for a DIAG event in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2021-30297 | 7.1 | Oct 20 | Possible out of bound read due to improper validation of packet length while handling data transfer in VR service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2021-1985 | 7.1 | Oct 20 | Possible buffer over read due to lack of data length check in QVR Service configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2021-1930 | 7.1 | Sep 8 | Possible out of bounds read due to incorrect validation of incoming buffer length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2022-33214 | 7.0 | Oct 17 | Memory corruption in display due to time-of-check time-of-use of metadata reserved size in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT,… Affected: All versions, or not specified |
| CVE-2022-25696 | 7.0 | Sep 16 | Memory corruption in display due to time-of-check time-of-use race condition during map or unmap in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1921 | 7.0 | Nov 12 | Possible memory corruption due to Improper handling of hypervisor unmap operations for concurrent memory operations in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1900 | 7.0 | Jun 9 | Possible use after free in Display due to race condition while creating an external display in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |