Qualcomm, Inc.
Page 8 of 30 — Qualcomm, Inc. CVEs from a corpus of 2956, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-28563 | Medium | 6.1 | 2023-11-07 | Information disclosure in IOE Firmware while handling WMI command. |
CVE-2023-28556 | High | 7.1 | 2023-11-07 | Cryptographic issue in HLOS during key management. |
CVE-2023-28554 | Medium | 6.1 | 2023-11-07 | Information Disclosure in Qualcomm IPC while reading values from shared memory in VM. |
CVE-2023-28553 | Medium | 6.1 | 2023-11-07 | Information Disclosure in WLAN Host when processing WMI event command. |
CVE-2023-28545 | High | 8.2 | 2023-11-07 | Memory corruption in TZ Secure OS while loading an app ELF. |
CVE-2023-24852 | High | 8.4 | 2023-11-07 | Memory Corruption in Core due to secure memory access by user while loading modem image. |
CVE-2023-22388 | Critical | 9.8 | 2023-11-07 | Memory Corruption in Multi-mode Call Processor while processing bit mask API. |
CVE-2023-21671 | Critical | 9.3 | 2023-11-07 | Memory Corruption in Core during syscall for Sectools Fuse comparison feature. |
CVE-2023-33039 | High | 8.4 | 2023-10-03 | Memory corruption in Automotive Display while destroying the image handle created using connected display driver. |
CVE-2023-33035 | High | 7.8 | 2023-10-03 | Memory corruption while invoking callback function of AFE from ADSP. |
CVE-2023-33034 | High | 7.8 | 2023-10-03 | Memory corruption while parsing the ADSP response command. |
CVE-2023-33029 | High | 8.4 | 2023-10-03 | Memory corruption in DSP Service during a remote call from HLOS to DSP. |
CVE-2023-33028 | Critical | 9.8 | 2023-10-03 | Memory corruption in WLAN Firmware while doing a memory copy of pmk cache. |
CVE-2023-33027 | High | 7.5 | 2023-10-03 | Transient DOS in WLAN Firmware while parsing rsn ies. |
CVE-2023-33026 | High | 7.5 | 2023-10-03 | Transient DOS in WLAN Firmware while parsing a NAN management frame. |
CVE-2023-28571 | Medium | 6.1 | 2023-10-03 | Information disclosure in WLAN HOST while processing the WLAN scan descriptor list during roaming scan. |
CVE-2023-28540 | Critical | 9.1 | 2023-10-03 | Cryptographic issue in Data Modem due to improper authentication during TLS handshake. |
CVE-2023-28539 | Medium | 6.6 | 2023-10-03 | Memory corruption in WLAN Host when the firmware invokes multiple WMI Service Available command. |
CVE-2023-24855 | Critical | 9.8 | 2023-10-03 | Memory corruption in Modem while processing security related configuration before AS Security Exchange. |
CVE-2023-24853 | High | 8.4 | 2023-10-03 | Memory Corruption in HLOS while registering for key provisioning notify. |
CVE-2023-24850 | High | 7.8 | 2023-10-03 | Memory Corruption in HLOS while importing a cryptographic key into KeyMaster Trusted Application. |
CVE-2023-24849 | High | 8.2 | 2023-10-03 | Information Disclosure in data Modem while parsing an FMTP line in an SDP message. |
CVE-2023-24848 | High | 8.2 | 2023-10-03 | Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value. |
CVE-2023-24847 | High | 7.5 | 2023-10-03 | Transient DOS in Modem while allocating DSM items. |
CVE-2023-24844 | High | 8.4 | 2023-10-03 | Memory Corruption in Core while invoking a call to Access Control core library with hardware protected address range. |
CVE-2023-24843 | High | 7.5 | 2023-10-03 | Transient DOS in Modem while triggering a camping on an 5G cell. |
CVE-2023-22385 | High | 8.2 | 2023-10-03 | Memory Corruption in Data Modem while making a MO call or MT VOLTE call. |
CVE-2023-22384 | Medium | 6.7 | 2023-10-03 | Memory Corruption in VR Service while sending data using Fast Message Queue (FMQ). |
CVE-2023-22382 | High | 7.4 | 2023-10-03 | Weak configuration in Automotive while VM is processing a listener request from TEE. |
CVE-2023-21673 | High | 8.7 | 2023-10-03 | Improper Access to the VM resource manager can lead to Memory Corruption. |
CVE-2023-33021 | High | 8.4 | 2023-09-05 | Memory corruption in Graphics while processing user packets for command submission. |
CVE-2023-33020 | High | 7.5 | 2023-09-05 | Transient DOS in WLAN Host when an invalid channel (like channel out of range) is received in STA during CSA IE. |
CVE-2023-33019 | High | 7.5 | 2023-09-05 | Transient DOS in WLAN Host while doing channel switch announcement (CSA), when a mobile station receives invalid channel in CSA IE. |
CVE-2023-33016 | High | 7.5 | 2023-09-05 | Transient DOS in WLAN firmware while parsing MLO (multi-link operation). |
CVE-2023-33015 | High | 7.5 | 2023-09-05 | Transient DOS in WLAN Firmware while interpreting MBSSID IE of a received beacon frame. |
CVE-2023-28584 | High | 7.5 | 2023-09-05 | Transient DOS in WLAN Host when a mobile station receives invalid channel in CSA IE while doing channel switch announcement (CSA). |
CVE-2023-28581 | Critical | 9.8 | 2023-09-05 | Memory corruption in WLAN Firmware while parsing receieved GTK Keys in GTK KDE. |
CVE-2023-28573 | High | 7.8 | 2023-09-05 | Memory corruption in WLAN HAL while parsing WMI command parameters. |
CVE-2023-28567 | High | 7.8 | 2023-09-05 | Memory corruption in WLAN HAL while handling command through WMI interfaces. |
CVE-2023-28565 | High | 7.8 | 2023-09-05 | Memory corruption in WLAN HAL while handling command streams through WMI interfaces. |
CVE-2023-28564 | High | 7.8 | 2023-09-05 | Memory corruption in WLAN HAL while passing command parameters through WMI interfaces. |
CVE-2023-28562 | Critical | 9.8 | 2023-09-05 | Memory corruption while handling payloads from remote ESL. |
CVE-2023-28560 | High | 7.8 | 2023-09-05 | Memory corruption in WLAN HAL while processing devIndex from untrusted WMI payload. |
CVE-2023-28559 | High | 7.8 | 2023-09-05 | Memory corruption in WLAN FW while processing command parameters from untrusted WMI payload. |
CVE-2023-28558 | High | 7.8 | 2023-09-05 | Memory corruption in WLAN handler while processing PhyID in Tx status handler. |
CVE-2023-28557 | High | 7.8 | 2023-09-05 | Memory corruption in WLAN HAL while processing command parameters from untrusted WMI payload. |
CVE-2023-28549 | High | 7.8 | 2023-09-05 | Memory corruption in WLAN HAL while parsing Rx buffer in processing TLV payload. |
CVE-2023-28548 | High | 7.8 | 2023-09-05 | Memory corruption in WLAN HAL while processing Tx/Rx commands from QDART. |
CVE-2023-28544 | High | 7.8 | 2023-09-05 | Memory corruption in WLAN while sending transmit command from HLOS to UTF handlers. |
CVE-2023-28543 | High | 8.1 | 2023-09-05 | A malformed DLC can trigger Memory Corruption in SNPE library due to out of bounds read, such as by loading an untrusted model (e.g. from a remote source). |
CVE-2023-28538 | High | 8.4 | 2023-09-05 | Memory corruption in WIN Product while invoking WinAcpi update driver in the UEFI region. |
CVE-2023-21667 | Medium | 6.5 | 2023-09-05 | Transient DOS in Bluetooth HOST while passing descriptor to validate the blacklisted BT keyboard. |
CVE-2023-21664 | High | 7.8 | 2023-09-05 | Memory Corruption in Core Platform while printing the response buffer in log. |
CVE-2023-21663 | Medium | 6.7 | 2023-09-05 | Memory Corruption while accessing metadata in Display. |
CVE-2023-21662 | High | 7.8 | 2023-09-05 | Memory corruption in Core Platform while printing the response buffer in log. |
CVE-2023-21655 | Medium | 6.7 | 2023-09-05 | Memory corruption in Audio while validating and mapping metadata. |
CVE-2023-21654 | Medium | 6.7 | 2023-09-05 | Memory corruption in Audio during playback session with audio effects enabled. |
CVE-2023-21653 | High | 7.5 | 2023-09-05 | Transient DOS in Modem while processing RRC reconfiguration message. |
CVE-2023-21646 | High | 7.5 | 2023-09-05 | Transient DOS in Modem while processing invalid System Information Block 1. |
CVE-2023-21644 | Medium | 6.7 | 2023-09-05 | Memory corruption in RIL due to Integer Overflow while triggering qcril_uim_request_apdu request. |
CVE-2023-21636 | Medium | 6.7 | 2023-09-05 | Memory Corruption due to improper validation of array index in Linux while updating adn record. |
CVE-2022-40534 | High | 8.4 | 2023-09-05 | Memory corruption due to improper validation of array index in Audio. |
CVE-2022-40524 | Medium | 6.7 | 2023-09-05 | Memory corruption due to buffer over-read in Modem while processing SetNativeHandle RTP service. |
CVE-2022-33275 | High | 8.4 | 2023-09-05 | Memory corruption due to improper validation of array index in WLAN HAL when received lm_itemNum is out of range. |
CVE-2022-33220 | Medium | 5.1 | 2023-09-05 | Information disclosure in Automotive multimedia due to buffer over-read. |
CVE-2023-28577 | Medium | 6.7 | 2023-08-08 | In the function call related to CAM_REQ_MGR_RELEASE_BUF there is no check if the buffer is being used. So when a function called cam_mem_get_cpu_buf to get the… |
CVE-2023-28576 | Medium | 6.4 | 2023-08-08 | The buffer obtained from kernel APIs such as cam_mem_get_cpu_buf() may be readable/writable in userspace after kernel accesses it. In other words, user mode ma… |
CVE-2023-28575 | Medium | 6.7 | 2023-08-08 | The cam_get_device_priv function does not check the type of handle being returned (device/session/link). This would lead to invalid type usage if a wrong handl… |
CVE-2023-28561 | Critical | 9.8 | 2023-08-08 | Memory corruption in QESL while processing payload from external ESL device to firmware. |
CVE-2023-28555 | High | 7.5 | 2023-08-08 | Transient DOS in Audio while remapping channel buffer in media codec decoding. |
CVE-2023-28537 | High | 8.4 | 2023-08-08 | Memory corruption while allocating memory in COmxApeDec module in Audio. |
CVE-2023-22666 | High | 8.4 | 2023-08-08 | Memory Corruption in Audio while playing amrwbplus clips with modified content. |
CVE-2023-21652 | High | 7.7 | 2023-08-08 | Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use. |
CVE-2023-21651 | Critical | 9.3 | 2023-08-08 | Memory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE. |
CVE-2023-21650 | Medium | 6.7 | 2023-08-08 | Memory Corruption in GPS HLOS Driver when injectFdclData receives data with invalid data length. |
CVE-2023-21649 | Medium | 6.7 | 2023-08-08 | Memory corruption in WLAN while running doDriverCmd for an unspecific command. |
CVE-2023-21648 | Medium | 6.7 | 2023-08-08 | Memory corruption in RIL while trying to send apdu packet. |
CVE-2023-21647 | Medium | 6.5 | 2023-08-08 | Information disclosure in Bluetooth when an GATT packet is received due to improper input validation. |
CVE-2023-21643 | Critical | 9.1 | 2023-08-08 | Memory corruption due to untrusted pointer dereference in automotive during system call. |
CVE-2023-21627 | Medium | 6.7 | 2023-08-08 | Memory corruption in Trusted Execution Environment while calling service API with invalid address. |
CVE-2023-21626 | High | 7.1 | 2023-08-08 | Cryptographic issue in HLOS due to improper authentication while performing key velocity checks using more than one key. |
CVE-2023-21625 | High | 8.2 | 2023-08-08 | Information disclosure in Network Services due to buffer over-read while the device receives DNS response. |
CVE-2022-40510 | Critical | 9.8 | 2023-08-08 | Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder. |
CVE-2023-28542 | High | 7.8 | 2023-07-04 | Memory Corruption in WLAN HOST while fetching TX status information. |
CVE-2023-28541 | High | 7.8 | 2023-07-04 | Memory Corruption in Data Modem while processing DMA buffer release event about CFR data. |
CVE-2023-24854 | High | 7.8 | 2023-07-04 | Memory Corruption in WLAN HOST while parsing QMI WLAN Firmware response message. |
CVE-2023-24851 | High | 7.8 | 2023-07-04 | Memory Corruption in WLAN HOST while parsing QMI response message from firmware. |
CVE-2023-22667 | High | 8.4 | 2023-07-04 | Memory Corruption in Audio while allocating the ion buffer during the music playback. |
CVE-2023-22387 | High | 7.8 | 2023-07-04 | Arbitrary memory overwrite when VM gets compromised in TX write leading to Memory Corruption. |
CVE-2023-22386 | High | 7.8 | 2023-07-04 | Memory Corruption in WLAN HOST while processing WLAN FW request to allocate memory. |
CVE-2023-21672 | High | 8.4 | 2023-07-04 | Memory corruption in Audio while running concurrent tunnel playback or during concurrent audio tunnel recording sessions. |
CVE-2023-21641 | Medium | 6.6 | 2023-07-04 | An app with non-privileged access can change global system brightness and cause undesired system behavior. |
CVE-2023-21640 | Medium | 6.7 | 2023-07-04 | Memory corruption in Linux when the file upload API is called with parameters having large buffer. |
CVE-2023-21639 | Medium | 6.7 | 2023-07-04 | Memory corruption in Audio while processing sva_model_serializer using memory size passed by HIDL client. |
CVE-2023-21638 | Medium | 6.7 | 2023-07-04 | Memory corruption in Video while calling APIs with different instance ID than the one received in initialization. |
CVE-2023-21637 | Medium | 6.7 | 2023-07-04 | Memory corruption in Linux while calling system configuration APIs. |
CVE-2023-21635 | Medium | 6.7 | 2023-07-04 | Memory Corruption in Data Network Stack & Connectivity when sim gets detected on telephony. |
CVE-2023-21633 | Medium | 6.7 | 2023-07-04 | Memory Corruption in Linux while processing QcRilRequestImsRegisterMultiIdentityMessage request. |
CVE-2023-21631 | High | 7.5 | 2023-07-04 | Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network. |
CVE-2023-21629 | Medium | 6.8 | 2023-07-04 | Memory Corruption in Modem due to double free while parsing the PKCS15 sim files. |