Filtered by vendor Qualcomm Subscriptions
Filtered by product Snapdragon Xr2 5g Platform Firmware Subscriptions
Total 220 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-21469 1 Qualcomm 450 9205 Lte Modem, 9205 Lte Modem Firmware, Aqt1000 and 447 more 2024-11-21 7.3 High
Memory corruption when an invoke call and a TEE call are bound for the same trusted application.
CVE-2024-21465 1 Qualcomm 518 9205 Lte Modem, 9205 Lte Modem Firmware, Aqt1000 and 515 more 2024-11-21 7.8 High
Memory corruption while processing key blob passed by the user.
CVE-2024-21462 1 Qualcomm 622 315 5g Iot Modem, 315 5g Iot Modem Firmware, 9205 Lte Modem and 619 more 2024-11-21 7.1 High
Transient DOS while loading the TA ELF file.
CVE-2024-21461 1 Qualcomm 630 215 Mobile Platform, 215 Mobile Platform Firmware, 315 5g Iot Modem and 627 more 2024-11-21 8.4 High
Memory corruption while performing finish HMAC operation when context is freed by keymaster.
CVE-2023-33081 1 Qualcomm 298 Aqt1000, Aqt1000 Firmware, Ar8035 and 295 more 2024-11-21 7.5 High
Transient DOS while converting TWT (Target Wake Time) frame parameters in the OTA broadcast.
CVE-2023-33045 1 Qualcomm 265 Ar8035, Ar8035 Firmware, Csr8811 and 262 more 2024-11-21 9.8 Critical
Memory corruption in WLAN Firmware while parsing a NAN management frame carrying a S3 attribute.
CVE-2023-33038 1 Qualcomm 288 315 5g Iot Modem, 315 5g Iot Modem Firmware, Aqt1000 and 285 more 2024-11-21 6.7 Medium
Memory corruption while receiving a message in Bus Socket Transport Server.
CVE-2023-33036 1 Qualcomm 208 Aqt1000, Aqt1000 Firmware, Ar8035 and 205 more 2024-11-21 7.1 High
Permanent DOS in Hypervisor while untrusted VM without PSCI support makes a PSCI call.
CVE-2023-33024 1 Qualcomm 142 8098, 8098 Firmware, 8998 and 139 more 2024-11-21 6.7 Medium
Memory corruption while sending SMS from AP firmware.
CVE-2023-28577 1 Qualcomm 66 Fastconnect 6800, Fastconnect 6800 Firmware, Fastconnect 6900 and 63 more 2024-11-21 6.7 Medium
In the function call related to CAM_REQ_MGR_RELEASE_BUF there is no check if the buffer is being used. So when a function called cam_mem_get_cpu_buf to get the kernel va to use, another thread can call CAM_REQ_MGR_RELEASE_BUF to unmap the kernel va which cause UAF of the kernel address.
CVE-2023-28558 1 Qualcomm 399 315 5g Iot Modem, 315 5g Iot Modem Firmware, Aqt1000 and 396 more 2024-11-21 7.8 High
Memory corruption in WLAN handler while processing PhyID in Tx status handler.
CVE-2023-28557 1 Qualcomm 556 315 5g Iot Modem, 315 5g Iot Modem Firmware, Aqt1000 and 553 more 2024-11-21 7.8 High
Memory corruption in WLAN HAL while processing command parameters from untrusted WMI payload.
CVE-2023-28555 1 Qualcomm 153 Ar8035, Ar8035 Firmware, Fastconnect 6200 Firmware and 150 more 2024-11-21 7.5 High
Transient DOS in Audio while remapping channel buffer in media codec decoding.
CVE-2023-28553 1 Qualcomm 288 Ar8035, Ar8035 Firmware, Ar9380 and 285 more 2024-11-21 6.1 Medium
Information Disclosure in WLAN Host when processing WMI event command.
CVE-2023-28537 1 Qualcomm 366 315 5g Iot Modem, 315 5g Iot Modem Firmware, 8098 and 363 more 2024-11-21 8.4 High
Memory corruption while allocating memory in COmxApeDec module in Audio.
CVE-2023-22668 1 Qualcomm 112 Aqt1000, Aqt1000 Firmware, Ar8035 and 109 more 2024-11-21 6.7 Medium
Memory Corruption in Audio while invoking IOCTLs calls from the user-space.
CVE-2023-21669 1 Qualcomm 122 Aqt1000, Aqt1000 Firmware, Flight Rb5 5g Platform and 119 more 2024-11-21 8.2 High
Information Disclosure in WLAN HOST while sending DPP action frame to peer with an invalid source address.
CVE-2023-21666 1 Qualcomm 330 8905, 8905 Firmware, 8909 and 327 more 2024-11-21 8.4 High
Memory Corruption in Graphics while accessing a buffer allocated through the graphics pool.
CVE-2023-21665 1 Qualcomm 440 315 5g Iot Modem, 315 5g Iot Modem Firmware, 8905 and 437 more 2024-11-21 8.4 High
Memory corruption in Graphics while importing a file.
CVE-2023-21661 1 Qualcomm 230 Ar8035, Ar8035 Firmware, Ar9380 and 227 more 2024-11-21 7.5 High
Transient DOS while parsing WLAN beacon or probe-response frame.