Qualcomm, Inc.
Page 9 of 30 — Qualcomm, Inc. CVEs from a corpus of 2956, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-21624 | Medium | 6.2 | 2023-07-04 | Information disclosure in DSP Services while loading dynamic module. |
CVE-2023-21670 | High | 7.8 | 2023-06-06 | Memory Corruption in GPU Subsystem due to arbitrary command execution from GPU in privileged mode. |
CVE-2023-21669 | High | 8.2 | 2023-06-06 | Information Disclosure in WLAN HOST while sending DPP action frame to peer with an invalid source address. |
CVE-2023-21661 | High | 7.5 | 2023-06-06 | Transient DOS while parsing WLAN beacon or probe-response frame. |
CVE-2023-21660 | High | 7.5 | 2023-06-06 | Transient DOS in WLAN Firmware while parsing FT Information Elements. |
CVE-2023-21659 | High | 7.5 | 2023-06-06 | Transient DOS in WLAN Firmware while processing frames with missing header fields. |
CVE-2023-21658 | High | 7.5 | 2023-06-06 | Transient DOS in WLAN Firmware while processing the received beacon or probe response frame. |
CVE-2023-21657 | High | 7.8 | 2023-06-06 | Memoru corruption in Audio when ADSP sends input during record use case. |
CVE-2023-21656 | High | 7.8 | 2023-06-06 | Memory corruption in WLAN HOST while receiving an WMI event from firmware. |
CVE-2023-21632 | High | 8.4 | 2023-06-06 | Memory corruption in Automotive GPU while querying a gsl memory node. |
CVE-2023-21628 | High | 8.4 | 2023-06-06 | Memory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command. |
CVE-2022-40538 | High | 7.5 | 2023-06-06 | Transient DOS due to reachable assertion in modem while processing sib with incorrect values from network. |
CVE-2022-40536 | High | 7.5 | 2023-06-06 | Transient DOS due to improper authentication in modem while receiving plain TLB OTA request message from network. |
CVE-2022-40533 | Medium | 6.2 | 2023-06-06 | Transient DOS due to untrusted Pointer Dereference in core while sending USB QMI request. |
CVE-2022-40529 | High | 7.1 | 2023-06-06 | Memory corruption due to improper access control in kernel while processing a mapping request from root process. |
CVE-2022-40525 | High | 7.1 | 2023-06-06 | Information disclosure in Linux Networking Firmware due to unauthorized information leak during side channel analysis. |
CVE-2022-40523 | High | 7.1 | 2023-06-06 | Information disclosure in Kernel due to indirect branch misprediction. |
CVE-2022-40522 | High | 8.4 | 2023-06-06 | Memory corruption in Linux Networking due to double free while handling a hyp-assign. |
CVE-2022-40521 | High | 7.5 | 2023-06-06 | Transient DOS due to improper authorization in Modem |
CVE-2022-40507 | High | 8.4 | 2023-06-06 | Memory corruption due to double free in Core while mapping HLOS address to the list. |
CVE-2022-33307 | High | 8.4 | 2023-06-06 | Memory Corruption due to double free in automotive when a bad HLOS address for one of the lists to be mapped is passed. |
CVE-2022-33303 | Medium | 5.5 | 2023-06-06 | Transient DOS due to uncontrolled resource consumption in Linux kernel when malformed messages are sent from the Gunyah Resource Manager message queue. |
CVE-2022-33267 | Medium | 6.7 | 2023-06-06 | Memory corruption in Linux while sending DRM request. |
CVE-2022-33264 | High | 7.9 | 2023-06-06 | Memory corruption in modem due to stack based buffer overflow while parsing OTASP Key Generation Request Message. |
CVE-2022-33263 | Medium | 6.7 | 2023-06-06 | Memory corruption due to use after free in Core when multiple DCI clients register and deregister. |
CVE-2022-33251 | High | 7.5 | 2023-06-06 | Transient DOS due to reachable assertion in Modem because of invalid network configuration. |
CVE-2022-33240 | Medium | 6.7 | 2023-06-06 | Memory corruption in Audio due to incorrect type cast during audio use-cases. |
CVE-2022-33230 | Medium | 6.7 | 2023-06-06 | Memory corruption in FM Host due to buffer copy without checking the size of input in FM Host |
CVE-2022-33227 | Medium | 6.7 | 2023-06-06 | Memory corruption in Linux android due to double free while calling unregister provider after register call. |
CVE-2022-33226 | Medium | 6.7 | 2023-06-06 | Memory corruption due to buffer copy without checking the size of input in Core while processing ioctl commands from diag client applications. |
CVE-2022-33224 | Medium | 6.7 | 2023-06-06 | Memory corruption in core due to buffer copy without check9ing the size of input while processing ioctl queries. |
CVE-2022-22076 | High | 7.1 | 2023-06-06 | information disclosure due to cryptographic issue in Core during RPMB read request. |
CVE-2022-22060 | High | 7.5 | 2023-06-06 | Assertion occurs while processing Reconfiguration message due to improper validation |
CVE-2022-40504 | High | 7.5 | 2023-05-02 | Transient DOS due to reachable assertion in Modem when UE received Downlink Data Indication message from the network. |
CVE-2022-33273 | High | 7.3 | 2023-05-02 | Information disclosure due to buffer over-read in Trusted Execution Environment while QRKS report generation. |
CVE-2023-21666 | High | 8.4 | 2023-05-02 | Memory Corruption in Graphics while accessing a buffer allocated through the graphics pool. |
CVE-2023-21665 | High | 8.4 | 2023-05-02 | Memory corruption in Graphics while importing a file. |
CVE-2023-21642 | High | 8.4 | 2023-05-02 | Memory corruption in HAB Memory management due to broad system privileges via physical address. |
CVE-2022-40508 | High | 7.5 | 2023-05-02 | Transient DOS due to reachable assertion in Modem while processing config related to cross carrier scheduling, which is not supported. |
CVE-2022-40505 | High | 8.2 | 2023-05-02 | Information disclosure due to buffer over-read in Modem while parsing DNS hostname. |
CVE-2022-34144 | High | 7.5 | 2023-05-02 | Transient DOS due to reachable assertion in Modem during OSI decode scheduling. |
CVE-2022-33305 | High | 7.5 | 2023-05-02 | Transient DOS due to NULL pointer dereference in Modem while sending invalid messages in DCCH. |
CVE-2022-33304 | High | 7.5 | 2023-05-02 | Transient DOS due to NULL pointer dereference in Modem while performing pullup for received TCP/UDP packet. |
CVE-2022-33292 | High | 7.8 | 2023-05-02 | Memory corruption in Qualcomm IPC due to use after free while receiving the incoming packet and reposting it. |
CVE-2022-33281 | Medium | 6.7 | 2023-05-02 | Memory corruption due to improper validation of array index in computer vision while testing EVA kernel without sending any frames. |
CVE-2022-25713 | High | 7.8 | 2023-05-02 | Memory corruption in Automotive due to Improper Restriction of Operations within the Bounds of a Memory Buffer while exporting a shared key. |
CVE-2023-21630 | High | 8.4 | 2023-04-13 | Memory Corruption in Multimedia Framework due to integer overflow when synx bind is called along with synx signal. |
CVE-2022-40532 | High | 8.4 | 2023-04-13 | Memory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target. |
CVE-2022-40503 | High | 8.2 | 2023-04-13 | Information disclosure due to buffer over-read in Bluetooth Host while A2DP streaming. |
CVE-2022-33302 | Medium | 6.8 | 2023-04-13 | Memory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than command length. |
CVE-2022-33301 | Medium | 6.7 | 2023-04-13 | Memory corruption due to incorrect type conversion or cast in audio while using audio playback/capture when crafted address is sent from AGM IPC to AGM. |
CVE-2022-33298 | Medium | 6.7 | 2023-04-13 | Memory corruption due to use after free in Modem while modem initialization. |
CVE-2022-33297 | Medium | 6.8 | 2023-04-13 | Information disclosure due to buffer overread in Linux sensors |
CVE-2022-33296 | Medium | 5.9 | 2023-04-13 | Memory corruption due to integer overflow to buffer overflow in Modem while parsing Traffic Channel Neighbor List Update message. |
CVE-2022-33295 | High | 8.2 | 2023-04-13 | Information disclosure in Modem due to buffer over-read while parsing the wms message received given the buffer and its length. |
CVE-2022-33294 | High | 7.5 | 2023-04-13 | Transient DOS in Modem due to NULL pointer dereference while receiving response of lwm2m registration/update/bootstrap request message. |
CVE-2022-33291 | High | 8.2 | 2023-04-13 | Information disclosure in Modem due to buffer over-read while receiving a IP header with malformed length. |
CVE-2022-33289 | Medium | 6.8 | 2023-04-13 | Memory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card. |
CVE-2022-33288 | Critical | 9.3 | 2023-04-13 | Memory corruption due to buffer copy without checking the size of input in Core while sending SCM command to get write protection information. |
CVE-2022-33287 | High | 8.2 | 2023-04-13 | Information disclosure in Modem due to buffer over-read while getting length of Unfragmented headers in an IPv6 packet. |
CVE-2022-33282 | High | 8.4 | 2023-04-13 | Memory corruption in Automotive Multimedia due to integer overflow to buffer overflow during IOCTL calls in video playback. |
CVE-2022-33270 | High | 7.5 | 2023-04-13 | Transient DOS due to time-of-check time-of-use race condition in Modem while processing RRC Reconfiguration message. |
CVE-2022-33269 | Critical | 9.3 | 2023-04-13 | Memory corruption due to integer overflow or wraparound in Core while DDR memory assignment. |
CVE-2022-33259 | Critical | 9.8 | 2023-04-13 | Memory corruption due to buffer copy without checking the size of input in modem while decoding raw SMS received. |
CVE-2022-33258 | High | 8.2 | 2023-04-13 | Information disclosure due to buffer over-read in modem while reading configuration parameters. |
CVE-2022-33231 | Critical | 9.3 | 2023-04-13 | Memory corruption due to double free in core while initializing the encryption key. |
CVE-2022-33228 | High | 8.2 | 2023-04-13 | Information disclosure sue to buffer over-read in modem while processing ipv6 packet with hop-by-hop or destination option in header. |
CVE-2022-33223 | High | 7.5 | 2023-04-13 | Transient DOS in Modem due to null pointer dereference while processing the incoming packet with http chunked encoding. |
CVE-2022-33222 | High | 8.2 | 2023-04-13 | Information disclosure due to buffer over-read while parsing DNS response packets in Modem. |
CVE-2022-33211 | Critical | 9.8 | 2023-04-13 | memory corruption in modem due to improper check while calculating size of serialized CoAP message |
CVE-2022-25747 | High | 8.2 | 2023-04-13 | Information disclosure in modem due to improper input validation during parsing of upcoming CoAP message |
CVE-2022-25745 | Critical | 9.8 | 2023-04-13 | Memory corruption in modem due to improper input validation while handling the incoming CoAP message |
CVE-2022-25740 | Critical | 9.8 | 2023-04-13 | Memory corruption in modem due to buffer overwrite while building an IPv6 multicast address based on the MAC address of the iface |
CVE-2022-25739 | High | 7.5 | 2023-04-13 | Denial of service in modem due to missing null check while processing the ipv6 packet received during ECM call |
CVE-2022-25737 | High | 7.5 | 2023-04-13 | Information disclosure in modem due to missing NULL check while reading packets received from local network |
CVE-2022-25731 | High | 7.5 | 2023-04-13 | Information disclosure in modem due to buffer over-read while processing packets from DNS server |
CVE-2022-25730 | High | 8.2 | 2023-04-13 | Information disclosure in modem due to improper check of IP type while processing DNS server query |
CVE-2022-25726 | High | 8.2 | 2023-04-13 | Information disclosure in modem data due to array out of bound access while handling the incoming DNS response packet |
CVE-2022-25678 | Critical | 9.8 | 2023-04-13 | Memory correction in modem due to buffer overwrite during coap connection |
CVE-2022-40540 | High | 8.4 | 2023-03-10 | Memory corruption due to buffer copy without checking the size of input while loading firmware in Linux Kernel. |
CVE-2022-40539 | High | 8.4 | 2023-03-10 | Memory corruption in Automotive Android OS due to improper validation of array index. |
CVE-2022-40537 | High | 7.3 | 2023-03-10 | Memory corruption in Bluetooth HOST while processing the AVRC_PDU_GET_PLAYER_APP_VALUE_TEXT AVRCP response. |
CVE-2022-40535 | High | 7.5 | 2023-03-10 | Transient DOS due to buffer over-read in WLAN while sending a packet to device. |
CVE-2022-40531 | High | 8.4 | 2023-03-10 | Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message. |
CVE-2022-40530 | High | 8.4 | 2023-03-10 | Memory corruption in WLAN due to integer overflow to buffer overflow in WLAN during initialization phase. |
CVE-2022-40527 | High | 7.5 | 2023-03-10 | Transient DOS due to reachable assertion in WLAN while processing PEER ID populated by TQM. |
CVE-2022-40515 | High | 7.3 | 2023-03-10 | Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms. |
CVE-2022-33309 | High | 7.5 | 2023-03-10 | Transient DOS due to buffer over-read in WLAN Firmware while parsing secure FTMR frame with size lesser than 39 Bytes. |
CVE-2022-33278 | High | 7.8 | 2023-03-10 | Memory corruption due to buffer copy without checking the size of input in HLOS when input message size is larger than the buffer capacity. |
CVE-2022-33272 | High | 7.5 | 2023-03-10 | Transient DOS in modem due to reachable assertion. |
CVE-2022-33260 | Medium | 5.9 | 2023-03-10 | Memory corruption due to stack based buffer overflow in core while sending command from USB of large size. |
CVE-2022-33257 | Critical | 9.3 | 2023-03-10 | Memory corruption in Core due to time-of-check time-of-use race condition during dump collection in trust zone. |
CVE-2022-33256 | Critical | 9.8 | 2023-03-10 | Memory corruption due to improper validation of array index in Multi-mode call processor. |
CVE-2022-33254 | High | 7.5 | 2023-03-10 | Transient DOS due to reachable assertion in Modem while processing SIB1 Message. |
CVE-2022-33250 | High | 7.5 | 2023-03-10 | Transient DOS due to reachable assertion in modem when network repeatedly sent invalid message container for NR to LTE handover. |
CVE-2022-33245 | Medium | 6.7 | 2023-03-10 | Memory corruption in WLAN due to use after free |
CVE-2022-33244 | High | 7.5 | 2023-03-10 | Transient DOS due to reachable assertion in modem during MIB reception and SIB timeout |
CVE-2022-33242 | High | 7.8 | 2023-03-10 | Memory corruption due to improper authentication in Qualcomm IPC while loading unsigned lib in audio PD. |
CVE-2022-33213 | High | 7.5 | 2023-03-10 | Memory corruption in modem due to buffer overflow while processing a PPP packet |
CVE-2022-25709 | High | 8.4 | 2023-03-10 | Memory corruption in modem due to use of out of range pointer offset while processing qmi msg |