Apq8037 Firmware

DATE	CVE	VULNERABILITY TITLE	RISK
2023-10-03	CVE-2023-24848	Unspecified vulnerability in Qualcomm products Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value. network low complexity qualcomm	7.5
2023-10-03	CVE-2023-24849	Unspecified vulnerability in Qualcomm products Information Disclosure in data Modem while parsing an FMTP line in an SDP message. network low complexity qualcomm	7.5
2023-10-03	CVE-2023-24850	Improper Validation of Array Index vulnerability in Qualcomm products Memory Corruption in HLOS while importing a cryptographic key into KeyMaster Trusted Application. local low complexity qualcomm CWE-129	7.8
2023-08-08	CVE-2022-40510	Out-of-bounds Write vulnerability in Qualcomm products Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder. network low complexity qualcomm CWE-787 critical	9.8
2023-08-08	CVE-2023-21625	Out-of-bounds Read vulnerability in Qualcomm products Information disclosure in Network Services due to buffer over-read while the device receives DNS response. network low complexity qualcomm CWE-125	7.5
2023-08-08	CVE-2023-21626	Improper Authentication vulnerability in Qualcomm products Cryptographic issue in HLOS due to improper authentication while performing key velocity checks using more than one key. local low complexity qualcomm CWE-287	7.1
2023-07-04	CVE-2023-21629	Double Free vulnerability in Qualcomm products Memory Corruption in Modem due to double free while parsing the PKCS15 sim files. low complexity qualcomm CWE-415	6.8
2023-07-04	CVE-2023-21631	Unspecified vulnerability in Qualcomm products Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network. network low complexity qualcomm critical	9.8
2023-06-06	CVE-2022-22076	Unspecified vulnerability in Qualcomm products information disclosure due to cryptographic issue in Core during RPMB read request. local low complexity qualcomm	5.5
2023-06-06	CVE-2022-33264	Out-of-bounds Write vulnerability in Qualcomm products Memory corruption in modem due to stack based buffer overflow while parsing OTASP Key Generation Request Message. local low complexity qualcomm CWE-787	7.8