Vulnerabilidades do Qualcomm Wcd9380 Firmware

CVE-2025-47331 Média · 6.1 CWE-126 07/01/2026

Buffer Over-read in Video

Information disclosure while processing a firmware event.

CVE-2025-47330 Média · 5.5 CWE-126 07/01/2026

Buffer Over-read in Video

Transient DOS while parsing video packets received from the video firmware.

CVE-2025-47387 Alta · 7.8 CWE-822 18/12/2025

Untrusted Pointer Dereference in Camera

Memory Corruption when processing IOCTLs for JPEG data without verification.

CVE-2025-47382 Alta · 7.8 CWE-863 18/12/2025

Incorrect Authorization in Boot

Memory corruption while loading an invalid firmware in boot loader.

CVE-2025-47350 Alta · 7.8 CWE-787 18/12/2025

Use After Free in DSP Service

Memory corruption while handling concurrent memory mapping and unmapping requests from a user-space application.

CVE-2025-47323 Alta · 7.8 CWE-190 18/12/2025

Integer Overflow or Wraparound in Audio

Memory corruption while routing GPR packets between user and root when handling large data packet.

CVE-2025-47322 Alta · 7.8 CWE-416 18/12/2025

Use After Free in Automotive Linux OS

Memory corruption while handling IOCTL calls to set mode.

CVE-2025-47321 Alta · 7.8 CWE-120 18/12/2025

Buffer Copy Without Checking Size of Input in Core Services

Memory corruption while copying packets received from unix clients.

CVE-2025-47320 Alta · 7.8 CWE-787 18/12/2025

Out-of-bounds Write in Audio

Memory corruption while processing MFC channel configuration during music playback.

CVE-2025-47319 Média · 6.7 CWE-497 18/12/2025

Exposure of Sensitive System Information to an Unauthorized Control Sphere in HLOS

Information disclosure while exposing internal TA-to-TA communication APIs to HLOS

CVE-2025-27063 Alta · 7.8 CWE-416 18/12/2025

Use After Free in Video

Memory corruption during video playback when video session open fails with time out error.

CVE-2025-47370 Média · 6.5 CWE-617 04/11/2025

Reachable Assertion in BT Controller

Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan.

CVE-2025-47368 Alta · 7.8 CWE-126 04/11/2025

Buffer Over-read in DSP Service

Memory corruption when dereferencing an invalid userspace address in a user buffer during MCDM IOCTL processing.

CVE-2025-47367 Alta · 7.8 CWE-787 04/11/2025

Out-of-bounds Write in WinBlast Driver

Memory corruption while accessing a buffer during IOCTL processing.

CVE-2025-27070 Alta · 7.8 CWE-787 04/11/2025

Out-of-bounds Write in Windows Compute

Memory corruption while performing encryption and decryption commands.

CVE-2025-27064 Média · 6.1 CWE-126 04/11/2025

Buffer Over-read in Core Services

Information disclosure while registering commands from clients with diag through diagHal.

CVE-2025-47355 Alta · 7.8 CWE-787 09/10/2025

Out-of-bounds Write in DSP Service

Memory corruption while invoking remote procedure IOCTL calls.

CVE-2025-47354 Alta · 7.8 CWE-416 09/10/2025

Use After Free in DSP Service

Memory corruption while allocating buffers in DSP service.

CVE-2025-47349 Alta · 7.8 CWE-823 09/10/2025

Use of Out-of-range Pointer Offset in DSP Service

Memory corruption while processing an escape call.

CVE-2025-47341 Alta · 7.8 CWE-120 09/10/2025

Buffer Copy Without Checking Size of Input in Camera

memory corruption while processing an image encoding completion event.

CVE-2025-47340 Alta · 7.8 CWE-787 09/10/2025

Out-of-bounds Write in DSP Service

Memory corruption while processing IOCTL call to get the mapping.

CVE-2025-47338 Alta · 7.8 CWE-822 09/10/2025

Untrusted Pointer Dereference in DSP Service

Memory corruption while processing escape commands from userspace.

CVE-2025-27054 Alta · 7.8 CWE-787 09/10/2025

Out-of-bounds Write in Display

Memory corruption while processing a malformed license file during reboot.

CVE-2025-27049 Média · 5.5 CWE-126 09/10/2025

Buffer Over-read in Camera

Transient DOS while processing IOCTL call for image encoding.

CVE-2025-27048 Alta · 7.8 CWE-822 09/10/2025

Untrusted Pointer Dereference in Camera

Memory corruption while processing camera platform driver IOCTL calls.