Qualcomm, Inc.
Page 6 of 30 — Qualcomm, Inc. CVEs from a corpus of 2956, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-23382 | High | 8.4 | 2024-08-05 | Memory corruption while processing graphics kernel driver request to create DMA fence. |
CVE-2024-23381 | High | 8.4 | 2024-08-05 | Memory corruption when memory mapped in a VBO is not unmapped by the GPU SMMU. |
CVE-2024-23357 | Medium | 6.2 | 2024-08-05 | Transient DOS while importing a PKCS#8-encoded RSA key with zero bytes modulus. |
CVE-2024-23356 | High | 7.8 | 2024-08-05 | Memory corruption during session sign renewal request calls in HLOS. |
CVE-2024-23355 | High | 7.8 | 2024-08-05 | Memory corruption when keymaster operation imports a shared key. |
CVE-2024-23353 | High | 7.5 | 2024-08-05 | Transient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI. |
CVE-2024-23352 | High | 7.5 | 2024-08-05 | Transient DOS when NAS receives ODAC criteria of length 1 and type 1 in registration accept OTA. |
CVE-2024-23350 | Medium | 6.5 | 2024-08-05 | Permanent DOS when DL NAS transport receives multiple payloads such that one payload contains SOR container whose integrity check has failed, and the other is… |
CVE-2024-21481 | High | 8.4 | 2024-08-05 | Memory corruption when preparing a shared memory notification for a memparcel in Resource Manager. |
CVE-2024-21479 | High | 7.5 | 2024-08-05 | Transient DOS during music playback of ALAC content. |
CVE-2024-21467 | Medium | 6.5 | 2024-08-05 | Information disclosure while handling beacon probe frame during scan entry generation in client side. |
CVE-2024-21459 | Medium | 6.5 | 2024-08-05 | Information disclosure while handling beacon or probe response frame in STA. |
CVE-2024-23380 | High | 8.4 | 2024-07-01 | Memory corruption while handling user packets during VBO bind operation. |
CVE-2024-23373 | High | 8.4 | 2024-07-01 | Memory corruption when IOMMU unmap operation fails, the DMA and anon buffers are getting released. |
CVE-2024-23372 | High | 8.4 | 2024-07-01 | Memory corruption while invoking IOCTL call for GPU memory allocation and size param is greater than expected size. |
CVE-2024-23368 | High | 7.8 | 2024-07-01 | Memory corruption when allocating and accessing an entry in an SMEM partition. |
CVE-2024-21482 | Medium | 6.8 | 2024-07-01 | Memory corruption during the secure boot process, when the `bootm` command is used, it bypasses the authentication of the kernel/rootfs image. |
CVE-2024-21469 | High | 7.3 | 2024-07-01 | Memory corruption when an invoke call and a TEE call are bound for the same trusted application. |
CVE-2024-21466 | Medium | 6.5 | 2024-07-01 | Information disclosure while parsing sub-IE length during new IE generation. |
CVE-2024-21465 | High | 7.8 | 2024-07-01 | Memory corruption while processing key blob passed by the user. |
CVE-2024-21462 | High | 7.1 | 2024-07-01 | Transient DOS while loading the TA ELF file. |
CVE-2024-21461 | High | 8.4 | 2024-07-01 | Memory corruption while performing finish HMAC operation when context is freed by keymaster. |
CVE-2024-21460 | High | 7.1 | 2024-07-01 | Information disclosure when ASLR relocates the IMEM and Secure DDR portions as one chunk in virtual address space. |
CVE-2024-21458 | Medium | 6.5 | 2024-07-01 | Information disclosure while handling SA query action frame. |
CVE-2024-21457 | Medium | 6.5 | 2024-07-01 | INformation disclosure while handling Multi-link IE in beacon frame. |
CVE-2024-21456 | Medium | 6.5 | 2024-07-01 | Information Disclosure while parsing beacon frame in STA. |
CVE-2023-43554 | High | 8.4 | 2024-07-01 | Memory corruption while processing IOCTL handler in FastRPC. |
CVE-2024-23363 | High | 7.5 | 2024-06-03 | Transient DOS while processing an improperly formatted Fine Time Measurement (FTM) management frame. |
CVE-2024-23360 | High | 8.4 | 2024-06-03 | Memory corruption while creating a LPAC client as LPAC engine was allowed to access GPU registers. |
CVE-2024-21478 | Medium | 6.2 | 2024-06-03 | transient DOS when setting up a fence callback to free a KGSL memory entry object during DMA. |
CVE-2023-43556 | Critical | 9.3 | 2024-06-03 | Memory corruption in Hypervisor when platform information mentioned is not aligned. |
CVE-2023-43555 | High | 8.2 | 2024-06-03 | Information disclosure in Video while parsing mp2 clip with invalid section length. |
CVE-2023-43551 | Critical | 9.1 | 2024-06-03 | Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode C… |
CVE-2023-43545 | Medium | 6.7 | 2024-06-03 | Memory corruption when more scan frequency list or channels are sent from the user space. |
CVE-2023-43544 | Medium | 6.7 | 2024-06-03 | Memory corruption when IPC callback handle is used after it has been released during register callback by another thread. |
CVE-2023-43543 | Medium | 6.7 | 2024-06-03 | Memory corruption in Audio during a playback or a recording due to race condition between allocation and deallocation of graph object. |
CVE-2023-43542 | High | 7.8 | 2024-06-03 | Memory corruption while copying a keyblob`s material when the key material`s size is not accurately checked. |
CVE-2023-43538 | Critical | 9.3 | 2024-06-03 | Memory corruption in TZ Secure OS while Tunnel Invoke Manager initialization. |
CVE-2023-43537 | Medium | 6.5 | 2024-06-03 | Information disclosure while handling T2LM Action Frame in WLAN Host. |
CVE-2024-23354 | High | 8.4 | 2024-05-06 | Memory corruption when the IOCTL call is interrupted by a signal. |
CVE-2024-23351 | High | 8.4 | 2024-05-06 | Memory corruption as GPU registers beyond the last protected range can be accessed through LPAC submissions. |
CVE-2024-21480 | High | 7.3 | 2024-05-06 | Memory corruption while playing audio file having large-sized input buffer. |
CVE-2024-21477 | High | 7.5 | 2024-05-06 | Transient DOS while parsing a protected 802.11az Fine Time Measurement (FTM) frame. |
CVE-2024-21476 | High | 7.8 | 2024-05-06 | Memory corruption when the channel ID passed by user is not validated and further used. |
CVE-2024-21475 | High | 7.8 | 2024-05-06 | Memory corruption when the payload received from firmware is not as per the expected protocol size. |
CVE-2024-21474 | High | 8.4 | 2024-05-06 | Memory corruption when size of buffer from previous call is used without validation or re-initialization. |
CVE-2024-21471 | High | 8.4 | 2024-05-06 | Memory corruption when IOMMU unmap of a GPU buffer fails in Linux. |
CVE-2023-43531 | High | 8.4 | 2024-05-06 | Memory corruption while verifying the serialized header when the key pairs are generated. |
CVE-2023-43530 | Medium | 5.9 | 2024-05-06 | Memory corruption in HLOS while checking for the storage type. |
CVE-2023-43529 | High | 7.5 | 2024-05-06 | Transient DOS while processing IKEv2 Informational request messages, when a malformed fragment packet is received. |
CVE-2023-43528 | Medium | 6.1 | 2024-05-06 | Information disclosure when the ADSP payload size received in HLOS in response to Audio Stream Manager matrix session is less than this expected size. |
CVE-2023-43527 | Medium | 6.8 | 2024-05-06 | Information disclosure while parsing dts header atom in Video. |
CVE-2023-43526 | Medium | 6.7 | 2024-05-06 | Memory corruption while querying module parameters from Listen Sound model client in kernel from user space. |
CVE-2023-43525 | Medium | 6.7 | 2024-05-06 | Memory corruption while copying the sound model data from user to kernel buffer during sound model register. |
CVE-2023-43524 | Medium | 6.7 | 2024-05-06 | Memory corruption when the bandpass filter order received from AHAL is not within the expected range. |
CVE-2023-43521 | Medium | 6.7 | 2024-05-06 | Memory corruption when multiple listeners are being registered with the same file descriptor. |
CVE-2023-33119 | High | 8.4 | 2024-05-06 | Memory corruption while loading a VM from a signed VM image that is not coherent in the processor cache. |
CVE-2024-21473 | Critical | 9.8 | 2024-04-01 | Memory corruption while redirecting log file to any file location with any file name. |
CVE-2024-21472 | High | 8.4 | 2024-04-01 | Memory corruption in Kernel while handling GPU operations. |
CVE-2024-21470 | High | 8.4 | 2024-04-01 | Memory corruption while allocating memory for graphics. |
CVE-2024-21468 | High | 8.4 | 2024-04-01 | Memory corruption when there is failed unmap operation in GPU. |
CVE-2024-21463 | High | 7.3 | 2024-04-01 | Memory corruption while processing Codec2 during v13k decoder pitch synthesis. |
CVE-2024-21454 | High | 7.5 | 2024-04-01 | Transient DOS while decoding the ToBeSignedMessage in Automotive Telematics. |
CVE-2024-21453 | High | 7.5 | 2024-04-01 | Transient DOS while decoding message of size that exceeds the available system memory. |
CVE-2024-21452 | High | 7.3 | 2024-04-01 | Transient DOS while decoding an ASN.1 OER message containing a SEQUENCE of unknown extensions. |
CVE-2023-43515 | Medium | 6.6 | 2024-04-01 | Memory corruption in HLOS while running kernel address sanitizers (syzkaller) on tmecom with DEBUG_FS enabled. |
CVE-2023-33115 | High | 7.8 | 2024-04-01 | Memory corruption while processing buffer initialization, when trusted report for certain report types are generated. |
CVE-2023-33111 | Medium | 5.5 | 2024-04-01 | Information disclosure when VI calibration state set by ADSP is greater than MAX_FBSP_STATE in the response payload to AFE calibration command. |
CVE-2023-33101 | High | 7.5 | 2024-04-01 | Transient DOS while processing DL NAS TRANSPORT message with payload length 0. |
CVE-2023-33100 | High | 7.5 | 2024-04-01 | Transient DOS while processing DL NAS Transport message when message ID is not defined in the 3GPP specification. |
CVE-2023-33099 | High | 7.5 | 2024-04-01 | Transient DOS while processing SMS container of non-standard size received in DL NAS transport in NR. |
CVE-2023-33023 | High | 8.4 | 2024-04-01 | Memory corruption while processing finish_sign command to pass a rsp buffer. |
CVE-2023-28547 | High | 8.4 | 2024-04-01 | Memory corruption in SPS Application while requesting for public key in sorter TA. |
CVE-2023-43553 | Critical | 9.8 | 2024-03-04 | Memory corruption while parsing beacon/probe response frame when AP sends more supported links in MLIE. |
CVE-2023-43552 | Critical | 9.8 | 2024-03-04 | Memory corruption while processing MBSSID beacon containing several subelement IE. |
CVE-2023-43550 | High | 7.8 | 2024-03-04 | Memory corruption while processing a QMI request for allocating memory from a DHMS supported subsystem. |
CVE-2023-43549 | High | 8.4 | 2024-03-04 | Memory corruption while processing TPC target power table in FTM TPC. |
CVE-2023-43548 | High | 7.3 | 2024-03-04 | Memory corruption while parsing qcp clip with invalid chunk data size. |
CVE-2023-43547 | High | 8.4 | 2024-03-04 | Memory corruption while invoking IOCTLs calls in Automotive Multimedia. |
CVE-2023-43546 | High | 8.4 | 2024-03-04 | Memory corruption while invoking HGSL IOCTL context create. |
CVE-2023-43541 | High | 8.4 | 2024-03-04 | Memory corruption while invoking the SubmitCommands call on Gfx engine during the graphics render. |
CVE-2023-43540 | High | 8.4 | 2024-03-04 | Memory corruption while processing the IOCTL FM HCI WRITE request. |
CVE-2023-43539 | High | 7.5 | 2024-03-04 | Transient DOS while processing an improperly formatted 802.11az Fine Time Measurement protocol frame. |
CVE-2023-33105 | High | 7.5 | 2024-03-04 | Transient DOS in WLAN Host and Firmware when large number of open authentication frames are sent with an invalid transaction sequence number. |
CVE-2023-33104 | High | 7.5 | 2024-03-04 | Transient DOS while processing PDU Release command with a parameter PDU ID out of range. |
CVE-2023-33103 | High | 7.5 | 2024-03-04 | Transient DOS while processing CAG info IE received from NW. |
CVE-2023-33096 | High | 7.5 | 2024-03-04 | Transient DOS while processing DL NAS Transport message, as specified in 3GPP 24.501 v16. |
CVE-2023-33095 | High | 7.5 | 2024-03-04 | Transient DOS while processing multiple payload container type with incorrect container length received in DL NAS transport OTA in NR. |
CVE-2023-33090 | Medium | 5.5 | 2024-03-04 | Transient DOS while processing channel information for speaker protection v2 module in ADSP. |
CVE-2023-33086 | High | 7.5 | 2024-03-04 | Transient DOS while processing multiple IKEV2 Informational Request to device from IPSEC server with different identifiers. |
CVE-2023-33084 | High | 7.5 | 2024-03-04 | Transient DOS while processing IE fragments from server during DTLS handshake. |
CVE-2023-33078 | Medium | 5.1 | 2024-03-04 | Information Disclosure while processing IOCTL request in FastRPC. |
CVE-2023-33066 | High | 8.4 | 2024-03-04 | Memory corruption in Audio while processing RT proxy port register driver. |
CVE-2023-28582 | Critical | 9.8 | 2024-03-04 | Memory corruption in Data Modem while verifying hello-verify message during the DTLS handshake. |
CVE-2023-28578 | Critical | 9.3 | 2024-03-04 | Memory corruption in Core Services while executing the command for removing a single event listener. |
CVE-2023-43536 | High | 7.5 | 2024-02-06 | Transient DOS while parse fils IE with length equal to 1. |
CVE-2023-43535 | High | 8.4 | 2024-02-06 | Memory corruption when negative display IDs are sent as input while processing DISPLAYESCAPE event trigger. |
CVE-2023-43534 | High | 8.6 | 2024-02-06 | Memory corruption while validating the TID to Link Mapping action request frame, when a station connects to an access point. |
CVE-2023-43533 | High | 7.5 | 2024-02-06 | Transient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame. |
CVE-2023-43532 | High | 8.4 | 2024-02-06 | Memory corruption while reading ACPI config through the user mode app. |