Qualcomm
Page 8 of 26 — Qualcomm CVEs from a corpus of 2538, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-28546 | High | 7.8 | 2023-12-05 | Memory Corruption in SPS Application while exporting public key in sorter TA. |
CVE-2023-22668 | Medium | 6.7 | 2023-12-05 | Memory Corruption in Audio while invoking IOCTLs calls from the user-space. |
CVE-2023-22383 | Medium | 6.7 | 2023-12-05 | Memory Corruption in camera while installing a fd for a particular DMA buffer. |
CVE-2023-21634 | Medium | 6.7 | 2023-12-05 | Memory Corruption in Radio Interface Layer while sending an SMS or writing an SMS to SIM. |
CVE-2023-33074 | High | 8.4 | 2023-11-07 | Memory corruption in Audio when SSR event is triggered after music playback is stopped. |
CVE-2023-33061 | High | 7.5 | 2023-11-07 | Transient DOS in WLAN Firmware while parsing WLAN beacon or probe-response frame. |
CVE-2023-33059 | High | 7.8 | 2023-11-07 | Memory corruption in Audio while processing the VOC packet data from ADSP. |
CVE-2023-33056 | High | 7.5 | 2023-11-07 | Transient DOS in WLAN Firmware when firmware receives beacon including T2LM IE. |
CVE-2023-33055 | High | 7.8 | 2023-11-07 | Memory Corruption in Audio while invoking callback function in driver from ADSP. |
CVE-2023-33048 | High | 7.5 | 2023-11-07 | Transient DOS in WLAN Firmware while parsing t2lm buffers. |
CVE-2023-33047 | High | 7.5 | 2023-11-07 | Transient DOS in WLAN Firmware while parsing no-inherit IES. |
CVE-2023-33045 | Critical | 9.8 | 2023-11-07 | Memory corruption in WLAN Firmware while parsing a NAN management frame carrying a S3 attribute. |
CVE-2023-33031 | High | 7.8 | 2023-11-07 | Memory corruption in Automotive Audio while copying data from ADSP shared buffer to the VOC packet data buffer. |
CVE-2023-28574 | Critical | 9.0 | 2023-11-07 | Memory corruption in core services when Diag handler receives a command to configure event listeners. |
CVE-2023-28572 | Medium | 6.6 | 2023-11-07 | Memory corruption in WLAN HOST while processing the WLAN scan descriptor list. |
CVE-2023-28570 | Medium | 6.7 | 2023-11-07 | Memory corruption while processing audio effects. |
CVE-2023-28569 | Medium | 6.1 | 2023-11-07 | Information disclosure in WLAN HAL while handling command through WMI interfaces. |
CVE-2023-28568 | Medium | 6.1 | 2023-11-07 | Information disclosure in WLAN HAL when reception status handler is called. |
CVE-2023-28566 | Medium | 6.1 | 2023-11-07 | Information disclosure in WLAN HAL while handling the WMI state info command. |
CVE-2023-28563 | Medium | 6.1 | 2023-11-07 | Information disclosure in IOE Firmware while handling WMI command. |
CVE-2023-28556 | High | 7.1 | 2023-11-07 | Cryptographic issue in HLOS during key management. |
CVE-2023-28554 | Medium | 6.1 | 2023-11-07 | Information Disclosure in Qualcomm IPC while reading values from shared memory in VM. |
CVE-2023-28553 | Medium | 6.1 | 2023-11-07 | Information Disclosure in WLAN Host when processing WMI event command. |
CVE-2023-28545 | High | 8.2 | 2023-11-07 | Memory corruption in TZ Secure OS while loading an app ELF. |
CVE-2023-24852 | High | 8.4 | 2023-11-07 | Memory Corruption in Core due to secure memory access by user while loading modem image. |
CVE-2023-22388 | Critical | 9.8 | 2023-11-07 | Memory Corruption in Multi-mode Call Processor while processing bit mask API. |
CVE-2023-21671 | Critical | 9.3 | 2023-11-07 | Memory Corruption in Core during syscall for Sectools Fuse comparison feature. |
CVE-2023-33039 | High | 8.4 | 2023-10-03 | Memory corruption in Automotive Display while destroying the image handle created using connected display driver. |
CVE-2023-33035 | High | 7.8 | 2023-10-03 | Memory corruption while invoking callback function of AFE from ADSP. |
CVE-2023-33034 | High | 7.8 | 2023-10-03 | Memory corruption while parsing the ADSP response command. |
CVE-2023-33029 | High | 8.4 | 2023-10-03 | Memory corruption in DSP Service during a remote call from HLOS to DSP. |
CVE-2023-33028 | Critical | 9.8 | 2023-10-03 | Memory corruption in WLAN Firmware while doing a memory copy of pmk cache. |
CVE-2023-33027 | High | 7.5 | 2023-10-03 | Transient DOS in WLAN Firmware while parsing rsn ies. |
CVE-2023-33026 | High | 7.5 | 2023-10-03 | Transient DOS in WLAN Firmware while parsing a NAN management frame. |
CVE-2023-28571 | Medium | 6.1 | 2023-10-03 | Information disclosure in WLAN HOST while processing the WLAN scan descriptor list during roaming scan. |
CVE-2023-28540 | Critical | 9.1 | 2023-10-03 | Cryptographic issue in Data Modem due to improper authentication during TLS handshake. |
CVE-2023-28539 | Medium | 6.6 | 2023-10-03 | Memory corruption in WLAN Host when the firmware invokes multiple WMI Service Available command. |
CVE-2023-24855 | Critical | 9.8 | 2023-10-03 | Memory corruption in Modem while processing security related configuration before AS Security Exchange. |
CVE-2023-24853 | High | 8.4 | 2023-10-03 | Memory Corruption in HLOS while registering for key provisioning notify. |
CVE-2023-24850 | High | 7.8 | 2023-10-03 | Memory Corruption in HLOS while importing a cryptographic key into KeyMaster Trusted Application. |
CVE-2023-24849 | High | 8.2 | 2023-10-03 | Information Disclosure in data Modem while parsing an FMTP line in an SDP message. |
CVE-2023-24848 | High | 8.2 | 2023-10-03 | Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value. |
CVE-2023-24847 | High | 7.5 | 2023-10-03 | Transient DOS in Modem while allocating DSM items. |
CVE-2023-24844 | High | 8.4 | 2023-10-03 | Memory Corruption in Core while invoking a call to Access Control core library with hardware protected address range. |
CVE-2023-24843 | High | 7.5 | 2023-10-03 | Transient DOS in Modem while triggering a camping on an 5G cell. |
CVE-2023-22385 | High | 8.2 | 2023-10-03 | Memory Corruption in Data Modem while making a MO call or MT VOLTE call. |
CVE-2023-22384 | Medium | 6.7 | 2023-10-03 | Memory Corruption in VR Service while sending data using Fast Message Queue (FMQ). |
CVE-2023-22382 | High | 7.4 | 2023-10-03 | Weak configuration in Automotive while VM is processing a listener request from TEE. |
CVE-2023-21673 | High | 8.7 | 2023-10-03 | Improper Access to the VM resource manager can lead to Memory Corruption. |
CVE-2023-3024 | Medium | 5.9 | 2023-09-29 | Forcing the Bluetooth LE stack to segment 'prepare write response' packets can lead to an out-of-bounds memory access. |
CVE-2023-33021 | High | 8.4 | 2023-09-05 | Memory corruption in Graphics while processing user packets for command submission. |
CVE-2023-33020 | High | 7.5 | 2023-09-05 | Transient DOS in WLAN Host when an invalid channel (like channel out of range) is received in STA during CSA IE. |
CVE-2023-33019 | High | 7.5 | 2023-09-05 | Transient DOS in WLAN Host while doing channel switch announcement (CSA), when a mobile station receives invalid channel in CSA IE. |
CVE-2023-33016 | High | 7.5 | 2023-09-05 | Transient DOS in WLAN firmware while parsing MLO (multi-link operation). |
CVE-2023-33015 | High | 7.5 | 2023-09-05 | Transient DOS in WLAN Firmware while interpreting MBSSID IE of a received beacon frame. |
CVE-2023-28584 | High | 7.5 | 2023-09-05 | Transient DOS in WLAN Host when a mobile station receives invalid channel in CSA IE while doing channel switch announcement (CSA). |
CVE-2023-28581 | Critical | 9.8 | 2023-09-05 | Memory corruption in WLAN Firmware while parsing receieved GTK Keys in GTK KDE. |
CVE-2023-28573 | High | 7.8 | 2023-09-05 | Memory corruption in WLAN HAL while parsing WMI command parameters. |
CVE-2023-28567 | High | 7.8 | 2023-09-05 | Memory corruption in WLAN HAL while handling command through WMI interfaces. |
CVE-2023-28565 | High | 7.8 | 2023-09-05 | Memory corruption in WLAN HAL while handling command streams through WMI interfaces. |
CVE-2023-28564 | High | 7.8 | 2023-09-05 | Memory corruption in WLAN HAL while passing command parameters through WMI interfaces. |
CVE-2023-28562 | Critical | 9.8 | 2023-09-05 | Memory corruption while handling payloads from remote ESL. |
CVE-2023-28560 | High | 7.8 | 2023-09-05 | Memory corruption in WLAN HAL while processing devIndex from untrusted WMI payload. |
CVE-2023-28559 | High | 7.8 | 2023-09-05 | Memory corruption in WLAN FW while processing command parameters from untrusted WMI payload. |
CVE-2023-28558 | High | 7.8 | 2023-09-05 | Memory corruption in WLAN handler while processing PhyID in Tx status handler. |
CVE-2023-28557 | High | 7.8 | 2023-09-05 | Memory corruption in WLAN HAL while processing command parameters from untrusted WMI payload. |
CVE-2023-28549 | High | 7.8 | 2023-09-05 | Memory corruption in WLAN HAL while parsing Rx buffer in processing TLV payload. |
CVE-2023-28548 | High | 7.8 | 2023-09-05 | Memory corruption in WLAN HAL while processing Tx/Rx commands from QDART. |
CVE-2023-28544 | High | 7.8 | 2023-09-05 | Memory corruption in WLAN while sending transmit command from HLOS to UTF handlers. |
CVE-2023-28543 | High | 8.1 | 2023-09-05 | A malformed DLC can trigger Memory Corruption in SNPE library due to out of bounds read, such as by loading an untrusted model (e.g. from a remote source). |
CVE-2023-28538 | High | 8.4 | 2023-09-05 | Memory corruption in WIN Product while invoking WinAcpi update driver in the UEFI region. |
CVE-2023-21667 | Medium | 6.5 | 2023-09-05 | Transient DOS in Bluetooth HOST while passing descriptor to validate the blacklisted BT keyboard. |
CVE-2023-21664 | High | 7.8 | 2023-09-05 | Memory Corruption in Core Platform while printing the response buffer in log. |
CVE-2023-21663 | Medium | 6.7 | 2023-09-05 | Memory Corruption while accessing metadata in Display. |
CVE-2023-21662 | High | 7.8 | 2023-09-05 | Memory corruption in Core Platform while printing the response buffer in log. |
CVE-2023-21655 | Medium | 6.7 | 2023-09-05 | Memory corruption in Audio while validating and mapping metadata. |
CVE-2023-21654 | Medium | 6.7 | 2023-09-05 | Memory corruption in Audio during playback session with audio effects enabled. |
CVE-2023-21653 | High | 7.5 | 2023-09-05 | Transient DOS in Modem while processing RRC reconfiguration message. |
CVE-2023-21646 | High | 7.5 | 2023-09-05 | Transient DOS in Modem while processing invalid System Information Block 1. |
CVE-2023-21644 | Medium | 6.7 | 2023-09-05 | Memory corruption in RIL due to Integer Overflow while triggering qcril_uim_request_apdu request. |
CVE-2023-21636 | Medium | 6.7 | 2023-09-05 | Memory Corruption due to improper validation of array index in Linux while updating adn record. |
CVE-2022-40534 | High | 8.4 | 2023-09-05 | Memory corruption due to improper validation of array index in Audio. |
CVE-2022-40524 | Medium | 6.7 | 2023-09-05 | Memory corruption due to buffer over-read in Modem while processing SetNativeHandle RTP service. |
CVE-2022-33275 | High | 8.4 | 2023-09-05 | Memory corruption due to improper validation of array index in WLAN HAL when received lm_itemNum is out of range. |
CVE-2022-33220 | Medium | 5.1 | 2023-09-05 | Information disclosure in Automotive multimedia due to buffer over-read. |
CVE-2023-28577 | Medium | 6.7 | 2023-08-08 | In the function call related to CAM_REQ_MGR_RELEASE_BUF there is no check if the buffer is being used. So when a function called cam_mem_get_cpu_buf to get the… |
CVE-2023-28576 | Medium | 6.4 | 2023-08-08 | The buffer obtained from kernel APIs such as cam_mem_get_cpu_buf() may be readable/writable in userspace after kernel accesses it. In other words, user mode ma… |
CVE-2023-28575 | Medium | 6.7 | 2023-08-08 | The cam_get_device_priv function does not check the type of handle being returned (device/session/link). This would lead to invalid type usage if a wrong handl… |
CVE-2023-28561 | Critical | 9.8 | 2023-08-08 | Memory corruption in QESL while processing payload from external ESL device to firmware. |
CVE-2023-28555 | High | 7.5 | 2023-08-08 | Transient DOS in Audio while remapping channel buffer in media codec decoding. |
CVE-2023-28537 | High | 8.4 | 2023-08-08 | Memory corruption while allocating memory in COmxApeDec module in Audio. |
CVE-2023-22666 | High | 8.4 | 2023-08-08 | Memory Corruption in Audio while playing amrwbplus clips with modified content. |
CVE-2023-21652 | High | 7.7 | 2023-08-08 | Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use. |
CVE-2023-21651 | Critical | 9.3 | 2023-08-08 | Memory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE. |
CVE-2023-21650 | Medium | 6.7 | 2023-08-08 | Memory Corruption in GPS HLOS Driver when injectFdclData receives data with invalid data length. |
CVE-2023-21649 | Medium | 6.7 | 2023-08-08 | Memory corruption in WLAN while running doDriverCmd for an unspecific command. |
CVE-2023-21648 | Medium | 6.7 | 2023-08-08 | Memory corruption in RIL while trying to send apdu packet. |
CVE-2023-21647 | Medium | 6.5 | 2023-08-08 | Information disclosure in Bluetooth when an GATT packet is received due to improper input validation. |
CVE-2023-21643 | Critical | 9.1 | 2023-08-08 | Memory corruption due to untrusted pointer dereference in automotive during system call. |
CVE-2023-21627 | Medium | 6.7 | 2023-08-08 | Memory corruption in Trusted Execution Environment while calling service API with invalid address. |