Vulnerabilidades do Qualcomm Wsa8840 Firmware

CVE-2025-47336 Média · 6.7 CWE-416 07/01/2026

Use After Free in Camera Driver

Memory corruption while performing sensor register read operations.

CVE-2025-47335 Média · 6.7 CWE-120 07/01/2026

Buffer Copy Without Checking Size of Input in Camera Driver

Memory corruption while parsing clock configuration data for a specific hardware type.

CVE-2025-47334 Média · 6.7 CWE-120 07/01/2026

Buffer Copy Without Checking Size of Input in Camera Driver

Memory corruption while processing shared command buffer packet between camera userspace and kernel.

CVE-2025-47333 Média · 6.6 CWE-416 07/01/2026

Use After Free in HLOS

Memory corruption while handling buffer mapping operations in the cryptographic driver.

CVE-2025-47332 Média · 6.4 CWE-367 07/01/2026

Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver

Memory corruption while processing a config call from userspace.

CVE-2025-47331 Média · 6.1 CWE-126 07/01/2026

Buffer Over-read in Video

Information disclosure while processing a firmware event.

CVE-2025-47330 Média · 5.5 CWE-126 07/01/2026

Buffer Over-read in Video

Transient DOS while parsing video packets received from the video firmware.

CVE-2025-47387 Alta · 7.8 CWE-822 18/12/2025

Untrusted Pointer Dereference in Camera

Memory Corruption when processing IOCTLs for JPEG data without verification.

CVE-2025-47382 Alta · 7.8 CWE-863 18/12/2025

Incorrect Authorization in Boot

Memory corruption while loading an invalid firmware in boot loader.

CVE-2025-47350 Alta · 7.8 CWE-787 18/12/2025

Use After Free in DSP Service

Memory corruption while handling concurrent memory mapping and unmapping requests from a user-space application.

CVE-2025-47323 Alta · 7.8 CWE-190 18/12/2025

Integer Overflow or Wraparound in Audio

Memory corruption while routing GPR packets between user and root when handling large data packet.

CVE-2025-47322 Alta · 7.8 CWE-416 18/12/2025

Use After Free in Automotive Linux OS

Memory corruption while handling IOCTL calls to set mode.

CVE-2025-47321 Alta · 7.8 CWE-120 18/12/2025

Buffer Copy Without Checking Size of Input in Core Services

Memory corruption while copying packets received from unix clients.

CVE-2025-47320 Alta · 7.8 CWE-787 18/12/2025

Out-of-bounds Write in Audio

Memory corruption while processing MFC channel configuration during music playback.

CVE-2025-47319 Média · 6.7 CWE-497 18/12/2025

Exposure of Sensitive System Information to an Unauthorized Control Sphere in HLOS

Information disclosure while exposing internal TA-to-TA communication APIs to HLOS

CVE-2025-47370 Média · 6.5 CWE-617 04/11/2025

Reachable Assertion in BT Controller

Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan.

CVE-2025-47368 Alta · 7.8 CWE-126 04/11/2025

Buffer Over-read in DSP Service

Memory corruption when dereferencing an invalid userspace address in a user buffer during MCDM IOCTL processing.

CVE-2025-47367 Alta · 7.8 CWE-787 04/11/2025

Out-of-bounds Write in WinBlast Driver

Memory corruption while accessing a buffer during IOCTL processing.

CVE-2025-47352 Alta · 7.8 CWE-129 04/11/2025

Improper Validation of Array Index in Audio

Memory corruption while processing audio streaming operations.

CVE-2025-27070 Alta · 7.8 CWE-787 04/11/2025

Out-of-bounds Write in Windows Compute

Memory corruption while performing encryption and decryption commands.

CVE-2025-47355 Alta · 7.8 CWE-787 09/10/2025

Out-of-bounds Write in DSP Service

Memory corruption while invoking remote procedure IOCTL calls.

CVE-2025-47354 Alta · 7.8 CWE-416 09/10/2025

Use After Free in DSP Service

Memory corruption while allocating buffers in DSP service.

CVE-2025-47351 Alta · 7.8 CWE-190 09/10/2025

Integer Overflow or Wraparound in DSP Service

Memory corruption while processing user buffers.

CVE-2025-47349 Alta · 7.8 CWE-823 09/10/2025

Use of Out-of-range Pointer Offset in DSP Service

Memory corruption while processing an escape call.

CVE-2025-47341 Alta · 7.8 CWE-120 09/10/2025

Buffer Copy Without Checking Size of Input in Camera

memory corruption while processing an image encoding completion event.