Total
447 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2023-33035 | 1 Qualcomm | 288 Apq5053-aa, Apq5053-aa Firmware, Ar8035 and 285 more | 2024-11-21 | N/A | 7.8 HIGH |
Memory corruption while invoking callback function of AFE from ADSP. | |||||
CVE-2023-33034 | 1 Qualcomm | 128 Apq5053-aa, Apq5053-aa Firmware, Csra6620 and 125 more | 2024-11-21 | N/A | 7.8 HIGH |
Memory corruption while parsing the ADSP response command. | |||||
CVE-2023-33033 | 1 Qualcomm | 528 315 5g Iot Modem, 315 5g Iot Modem Firmware, 9205 Lte Modem and 525 more | 2024-11-21 | N/A | 8.4 HIGH |
Memory corruption in Audio during playback with speaker protection. | |||||
CVE-2023-33032 | 1 Qualcomm | 234 9205 Lte Modem, 9205 Lte Modem Firmware, Aqt1000 and 231 more | 2024-11-21 | N/A | 9.3 CRITICAL |
Memory corruption in TZ Secure OS while requesting a memory allocation from TA region. | |||||
CVE-2023-33031 | 1 Qualcomm | 330 Apq5053-aa, Apq5053-aa Firmware, Apq8009 and 327 more | 2024-11-21 | N/A | 7.8 HIGH |
Memory corruption in Automotive Audio while copying data from ADSP shared buffer to the VOC packet data buffer. | |||||
CVE-2023-33030 | 1 Qualcomm | 596 315 5g Iot Modem, 315 5g Iot Modem Firmware, 9205 Lte Modem and 593 more | 2024-11-21 | N/A | 9.3 CRITICAL |
Memory corruption in HLOS while running playready use-case. | |||||
CVE-2023-33029 | 1 Qualcomm | 264 Apq8009, Apq8009 Firmware, Ar8035 and 261 more | 2024-11-21 | N/A | 8.4 HIGH |
Memory corruption in DSP Service during a remote call from HLOS to DSP. | |||||
CVE-2023-33027 | 1 Qualcomm | 656 315 5g Iot Modem, 315 5g Iot Modem Firmware, 8098 and 653 more | 2024-11-21 | N/A | 7.5 HIGH |
Transient DOS in WLAN Firmware while parsing rsn ies. | |||||
CVE-2023-33022 | 1 Qualcomm | 424 315 5g Iot Modem, 315 5g Iot Modem Firmware, Apq5053-aa and 421 more | 2024-11-21 | N/A | 8.4 HIGH |
Memory corruption in HLOS while invoking IOCTL calls from user-space. | |||||
CVE-2023-33021 | 1 Qualcomm | 336 Apq8064au, Apq8064au Firmware, Aqt1000 and 333 more | 2024-11-21 | N/A | 8.4 HIGH |
Memory corruption in Graphics while processing user packets for command submission. | |||||
CVE-2023-33018 | 1 Qualcomm | 526 315 5g Iot Modem, 315 5g Iot Modem Firmware, 8098 and 523 more | 2024-11-21 | N/A | 7.8 HIGH |
Memory corruption while using the UIM diag command to get the operators name. | |||||
CVE-2023-33017 | 1 Qualcomm | 554 315 5g Iot Modem, 315 5g Iot Modem Firmware, 9205 Lte Modem and 551 more | 2024-11-21 | N/A | 7.8 HIGH |
Memory corruption in Boot while running a ListVars test in UEFI Menu during boot. | |||||
CVE-2023-28588 | 1 Qualcomm | 428 Apq8017, Apq8017 Firmware, Apq8064au and 425 more | 2024-11-21 | N/A | 7.5 HIGH |
Transient DOS in Bluetooth Host while rfc slot allocation. | |||||
CVE-2023-28587 | 1 Qualcomm | 380 315 5g Iot Modem, 315 5g Iot Modem Firmware, Aqt1000 and 377 more | 2024-11-21 | N/A | 7.8 HIGH |
Memory corruption in BT controller while parsing debug commands with specific sub-opcodes at HCI interface level. | |||||
CVE-2023-28586 | 1 Qualcomm | 626 315 5g Iot Modem, 315 5g Iot Modem Firmware, 9205 Lte Modem and 623 more | 2024-11-21 | N/A | 6.0 MEDIUM |
Information disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE. | |||||
CVE-2023-28585 | 1 Qualcomm | 562 315 5g Iot Modem, 315 5g Iot Modem Firmware, 9205 Lte Modem and 559 more | 2024-11-21 | N/A | 8.2 HIGH |
Memory corruption while loading an ELF segment in TEE Kernel. | |||||
CVE-2023-28584 | 1 Qualcomm | 144 Aqt1000, Aqt1000 Firmware, Csrb31024 and 141 more | 2024-11-21 | N/A | 7.5 HIGH |
Transient DOS in WLAN Host when a mobile station receives invalid channel in CSA IE while doing channel switch announcement (CSA). | |||||
CVE-2023-28580 | 1 Qualcomm | 88 Ar8035, Ar8035 Firmware, Fastconnect 6900 and 85 more | 2024-11-21 | N/A | 6.7 MEDIUM |
Memory corruption in WLAN Host while setting the PMK length in PMK length in internal cache. | |||||
CVE-2023-28579 | 1 Qualcomm | 68 Fastconnect 6900, Fastconnect 6900 Firmware, Fastconnect 7800 and 65 more | 2024-11-21 | N/A | 6.7 MEDIUM |
Memory Corruption in WLAN Host while deserializing the input PMK bytes without checking the input PMK length. | |||||
CVE-2023-28577 | 1 Qualcomm | 62 Fastconnect 6800, Fastconnect 6800 Firmware, Fastconnect 6900 and 59 more | 2024-11-21 | N/A | 6.7 MEDIUM |
In the function call related to CAM_REQ_MGR_RELEASE_BUF there is no check if the buffer is being used. So when a function called cam_mem_get_cpu_buf to get the kernel va to use, another thread can call CAM_REQ_MGR_RELEASE_BUF to unmap the kernel va which cause UAF of the kernel address. |