Qualcomm, Inc.
Page 7 of 30 — Qualcomm, Inc. CVEs from a corpus of 2956, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-43523 | High | 7.5 | 2024-02-06 | Transient DOS while processing 11AZ RTT management action frame received through OTA. |
CVE-2023-43522 | High | 7.5 | 2024-02-06 | Transient DOS while key unwrapping process, when the given encrypted key is empty or NULL. |
CVE-2023-43520 | High | 8.6 | 2024-02-06 | Memory corruption when AP includes TID to link mapping IE in the beacons and STA is parsing the beacon TID to link mapping IE. |
CVE-2023-43519 | High | 7.3 | 2024-02-06 | Memory corruption in video while parsing the Videoinfo, when the size of atom is greater than the videoinfo size. |
CVE-2023-43518 | High | 7.3 | 2024-02-06 | Memory corruption in video while parsing invalid mp2 clip. |
CVE-2023-43517 | High | 8.4 | 2024-02-06 | Memory corruption in Automotive Multimedia due to improper access control in HAB. |
CVE-2023-43516 | High | 7.8 | 2024-02-06 | Memory corruption when malformed message payload is received from firmware. |
CVE-2023-43513 | High | 7.8 | 2024-02-06 | Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to addr… |
CVE-2023-33077 | Medium | 6.7 | 2024-02-06 | Memory corruption in HLOS while converting from authorization token to HIDL vector. |
CVE-2023-33076 | Medium | 5.9 | 2024-02-06 | Memory corruption in Core when updating rollback version for TA and OTA feature is enabled. |
CVE-2023-33072 | Critical | 9.3 | 2024-02-06 | Memory corruption in Core while processing control functions. |
CVE-2023-33069 | Medium | 6.7 | 2024-02-06 | Memory corruption in Audio while processing the calibration data returned from ACDB loader. |
CVE-2023-33068 | Medium | 6.7 | 2024-02-06 | Memory corruption in Audio while processing IIR config data from AFE calibration block. |
CVE-2023-33067 | Medium | 6.7 | 2024-02-06 | Memory corruption in Audio while calling START command on host voice PCM multiple times for the same RX or TX tap points. |
CVE-2023-33065 | Medium | 6.1 | 2024-02-06 | Information disclosure in Audio while accessing AVCS services from ADSP payload. |
CVE-2023-33064 | Medium | 5.5 | 2024-02-06 | Transient DOS in Audio when invoking callback function of ASM driver. |
CVE-2023-33060 | High | 7.1 | 2024-02-06 | Transient DOS in Core when DDR memory check is called while DDR is not initialized. |
CVE-2023-33058 | High | 8.2 | 2024-02-06 | Information disclosure in Modem while processing SIB5. |
CVE-2023-33057 | High | 7.5 | 2024-02-06 | Transient DOS in Multi-Mode Call Processor while processing UE policy container. |
CVE-2023-33049 | High | 7.5 | 2024-02-06 | Transient DOS in Multi-Mode Call Processor due to UE failure because of heap leakage. |
CVE-2023-33046 | High | 7.8 | 2024-02-06 | Memory corruption in Trusted Execution Environment while deinitializing an object used for license validation. |
CVE-2023-43514 | High | 8.4 | 2024-01-02 | Memory corruption while invoking IOCTLs calls from user space for internal mem MAP and internal mem UNMAP. |
CVE-2023-43512 | High | 7.5 | 2024-01-02 | Transient DOS while parsing GATT service data when the total amount of memory that is required by the multiple services is greater than the actual size of the… |
CVE-2023-43511 | High | 7.5 | 2024-01-02 | Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header. |
CVE-2023-33120 | High | 7.8 | 2024-01-02 | Memory corruption in Audio when memory map command is executed consecutively in ADSP. |
CVE-2023-33118 | High | 7.8 | 2024-01-02 | Memory corruption while processing Listen Sound Model client payload buffer when there is a request for Listen Sound session get parameter from ST HAL. |
CVE-2023-33117 | High | 7.8 | 2024-01-02 | Memory corruption when HLOS allocates the response payload buffer to copy the data received from ADSP in response to AVCS_LOAD_MODULE command. |
CVE-2023-33116 | High | 7.5 | 2024-01-02 | Transient DOS while parsing ieee80211_parse_mscs_ie in WIN WLAN driver. |
CVE-2023-33114 | High | 8.4 | 2024-01-02 | Memory corruption while running NPU, when NETWORK_UNLOAD and (NETWORK_UNLOAD or NETWORK_EXECUTE_V2) commands are submitted at the same time. |
CVE-2023-33113 | High | 8.4 | 2024-01-02 | Memory corruption when resource manager sends the host kernel a reply message with multiple fragments. |
CVE-2023-33112 | High | 7.5 | 2024-01-02 | Transient DOS when WLAN firmware receives "reassoc response" frame including RIC_DATA element. |
CVE-2023-33110 | High | 7.8 | 2024-01-02 | The session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may… |
CVE-2023-33109 | High | 7.5 | 2024-01-02 | Transient DOS while processing a WMI P2P listen start command (0xD00A) sent from host. |
CVE-2023-33108 | High | 8.4 | 2024-01-02 | Memory corruption in Graphics Driver when destroying a context with KGSL_GPU_AUX_COMMAND_TIMELINE objects queued. |
CVE-2023-33094 | High | 8.4 | 2024-01-02 | Memory corruption while running VK synchronization with KASAN enabled. |
CVE-2023-33085 | High | 7.8 | 2024-01-02 | Memory corruption in wearables while processing data from AON. |
CVE-2023-33062 | High | 7.5 | 2024-01-02 | Transient DOS in WLAN Firmware while parsing a BTM request. |
CVE-2023-33040 | High | 7.5 | 2024-01-02 | Transient DOS in Data Modem during DTLS handshake. |
CVE-2023-33038 | Medium | 6.7 | 2024-01-02 | Memory corruption while receiving a message in Bus Socket Transport Server. |
CVE-2023-33037 | High | 7.1 | 2024-01-02 | Cryptographic issue in Automotive while unwrapping the key secs2d and verifying with RPMB data. |
CVE-2023-33036 | High | 7.1 | 2024-01-02 | Permanent DOS in Hypervisor while untrusted VM without PSCI support makes a PSCI call. |
CVE-2023-33033 | High | 8.4 | 2024-01-02 | Memory corruption in Audio during playback with speaker protection. |
CVE-2023-33032 | Critical | 9.3 | 2024-01-02 | Memory corruption in TZ Secure OS while requesting a memory allocation from TA region. |
CVE-2023-33030 | Critical | 9.3 | 2024-01-02 | Memory corruption in HLOS while running playready use-case. |
CVE-2023-33025 | Critical | 9.8 | 2024-01-02 | Memory corruption in Data Modem when a non-standard SDP body, during a VOLTE call. |
CVE-2023-33014 | High | 7.6 | 2024-01-02 | Information disclosure in Core services while processing a Diag command. |
CVE-2023-28583 | Medium | 6.7 | 2024-01-02 | Memory corruption when IPv6 prefix timer object`s lifetime expires which are created while Netmgr daemon gets an IPv6 address. |
CVE-2023-33107 | High | 8.4 | 2023-12-05 | Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call. |
CVE-2023-33106 | High | 8.4 | 2023-12-05 | Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND. |
CVE-2023-33098 | High | 7.5 | 2023-12-05 | Transient DOS while parsing WPA IES, when it is passed with length more than expected size. |
CVE-2023-33097 | High | 7.5 | 2023-12-05 | Transient DOS in WLAN Firmware while processing a FTMR frame. |
CVE-2023-33092 | High | 8.4 | 2023-12-05 | Memory corruption while processing pin reply in Bluetooth, when pin code received from APP layer is greater than expected size. |
CVE-2023-33089 | High | 7.5 | 2023-12-05 | Transient DOS when processing a NULL buffer while parsing WLAN vdev. |
CVE-2023-33088 | High | 8.4 | 2023-12-05 | Memory corruption when processing cmd parameters while parsing vdev. |
CVE-2023-33087 | High | 7.8 | 2023-12-05 | Memory corruption in Core while processing RX intent request. |
CVE-2023-33083 | Critical | 9.8 | 2023-12-05 | Memory corruption in WLAN Host while processing RRM beacon on the AP. |
CVE-2023-33082 | Critical | 9.8 | 2023-12-05 | Memory corruption while sending an Assoc Request having BTM Query or BTM Response containing MBO IE. |
CVE-2023-33081 | High | 7.5 | 2023-12-05 | Transient DOS while converting TWT (Target Wake Time) frame parameters in the OTA broadcast. |
CVE-2023-33080 | High | 7.5 | 2023-12-05 | Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame. |
CVE-2023-33079 | High | 7.8 | 2023-12-05 | Memory corruption in Audio while running invalid audio recording from ADSP. |
CVE-2023-33071 | High | 8.4 | 2023-12-05 | Memory corruption in Automotive OS whenever untrusted apps try to access HAb for graphics functionalities. |
CVE-2023-33070 | High | 7.1 | 2023-12-05 | Transient DOS in Automotive OS due to improper authentication to the secure IO calls. |
CVE-2023-33063 | High | 7.8 | 2023-12-05 | Memory corruption in DSP Services during a remote call from HLOS to DSP. |
CVE-2023-33054 | Critical | 9.1 | 2023-12-05 | Cryptographic issue in GPS HLOS Driver while downloading Qualcomm GNSS assistance data. |
CVE-2023-33053 | High | 8.4 | 2023-12-05 | Memory corruption in Kernel while parsing metadata. |
CVE-2023-33044 | High | 7.5 | 2023-12-05 | Transient DOS in Data modem while handling TLB control messages from the Network. |
CVE-2023-33043 | High | 7.5 | 2023-12-05 | Transient DOS in Modem when a Beam switch request is made with a non-configured BWP. |
CVE-2023-33042 | High | 7.5 | 2023-12-05 | Transient DOS in Modem after RRC Setup message is received. |
CVE-2023-33041 | High | 7.5 | 2023-12-05 | Under certain scenarios the WLAN Firmware will reach an assertion due to state confusion while looking up peer ids. |
CVE-2023-33024 | Medium | 6.7 | 2023-12-05 | Memory corruption while sending SMS from AP firmware. |
CVE-2023-33022 | High | 8.4 | 2023-12-05 | Memory corruption in HLOS while invoking IOCTL calls from user-space. |
CVE-2023-33018 | High | 7.8 | 2023-12-05 | Memory corruption while using the UIM diag command to get the operators name. |
CVE-2023-33017 | High | 7.8 | 2023-12-05 | Memory corruption in Boot while running a ListVars test in UEFI Menu during boot. |
CVE-2023-28588 | High | 7.5 | 2023-12-05 | Transient DOS in Bluetooth Host while rfc slot allocation. |
CVE-2023-28587 | High | 7.8 | 2023-12-05 | Memory corruption in BT controller while parsing debug commands with specific sub-opcodes at HCI interface level. |
CVE-2023-28586 | Medium | 6.0 | 2023-12-05 | Information disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE. |
CVE-2023-28585 | High | 8.2 | 2023-12-05 | Memory corruption while loading an ELF segment in TEE Kernel. |
CVE-2023-28580 | Medium | 6.7 | 2023-12-05 | Memory corruption in WLAN Host while setting the PMK length in PMK length in internal cache. |
CVE-2023-28579 | Medium | 6.7 | 2023-12-05 | Memory Corruption in WLAN Host while deserializing the input PMK bytes without checking the input PMK length. |
CVE-2023-28551 | High | 7.8 | 2023-12-05 | Memory corruption in UTILS when modem processes memory specific Diag commands having arbitrary address values as input arguments. |
CVE-2023-28550 | High | 7.8 | 2023-12-05 | Memory corruption in MPP performance while accessing DSM watermark using external memory address. |
CVE-2023-28546 | High | 7.8 | 2023-12-05 | Memory Corruption in SPS Application while exporting public key in sorter TA. |
CVE-2023-22668 | Medium | 6.7 | 2023-12-05 | Memory Corruption in Audio while invoking IOCTLs calls from the user-space. |
CVE-2023-22383 | Medium | 6.7 | 2023-12-05 | Memory Corruption in camera while installing a fd for a particular DMA buffer. |
CVE-2023-21634 | Medium | 6.7 | 2023-12-05 | Memory Corruption in Radio Interface Layer while sending an SMS or writing an SMS to SIM. |
CVE-2023-33074 | High | 8.4 | 2023-11-07 | Memory corruption in Audio when SSR event is triggered after music playback is stopped. |
CVE-2023-33061 | High | 7.5 | 2023-11-07 | Transient DOS in WLAN Firmware while parsing WLAN beacon or probe-response frame. |
CVE-2023-33059 | High | 7.8 | 2023-11-07 | Memory corruption in Audio while processing the VOC packet data from ADSP. |
CVE-2023-33056 | High | 7.5 | 2023-11-07 | Transient DOS in WLAN Firmware when firmware receives beacon including T2LM IE. |
CVE-2023-33055 | High | 7.8 | 2023-11-07 | Memory Corruption in Audio while invoking callback function in driver from ADSP. |
CVE-2023-33048 | High | 7.5 | 2023-11-07 | Transient DOS in WLAN Firmware while parsing t2lm buffers. |
CVE-2023-33047 | High | 7.5 | 2023-11-07 | Transient DOS in WLAN Firmware while parsing no-inherit IES. |
CVE-2023-33045 | Critical | 9.8 | 2023-11-07 | Memory corruption in WLAN Firmware while parsing a NAN management frame carrying a S3 attribute. |
CVE-2023-33031 | High | 7.8 | 2023-11-07 | Memory corruption in Automotive Audio while copying data from ADSP shared buffer to the VOC packet data buffer. |
CVE-2023-28574 | Critical | 9.0 | 2023-11-07 | Memory corruption in core services when Diag handler receives a command to configure event listeners. |
CVE-2023-28572 | Medium | 6.6 | 2023-11-07 | Memory corruption in WLAN HOST while processing the WLAN scan descriptor list. |
CVE-2023-28570 | Medium | 6.7 | 2023-11-07 | Memory corruption while processing audio effects. |
CVE-2023-28569 | Medium | 6.1 | 2023-11-07 | Information disclosure in WLAN HAL while handling command through WMI interfaces. |
CVE-2023-28568 | Medium | 6.1 | 2023-11-07 | Information disclosure in WLAN HAL when reception status handler is called. |
CVE-2023-28566 | Medium | 6.1 | 2023-11-07 | Information disclosure in WLAN HAL while handling the WMI state info command. |