High

DATE	CVE	VULNERABILITY TITLE	RISK
2023-12-05	CVE-2023-28550	Out-of-bounds Write vulnerability in Qualcomm products Memory corruption in MPP performance while accessing DSM watermark using external memory address. local low complexity qualcomm CWE-787	7.8
2023-12-05	CVE-2023-28551	Out-of-bounds Write vulnerability in Qualcomm products Memory corruption in UTILS when modem processes memory specific Diag commands having arbitrary address values as input arguments. local low complexity qualcomm CWE-787	7.8
2023-12-05	CVE-2023-33018	Integer Overflow or Wraparound vulnerability in Qualcomm products Memory corruption while using the UIM diag command to get the operators name. local low complexity qualcomm CWE-190	7.8
2023-10-03	CVE-2023-24848	Unspecified vulnerability in Qualcomm products Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value. network low complexity qualcomm	7.5
2023-10-03	CVE-2023-24849	Unspecified vulnerability in Qualcomm products Information Disclosure in data Modem while parsing an FMTP line in an SDP message. network low complexity qualcomm	7.5
2023-10-03	CVE-2023-24850	Improper Validation of Array Index vulnerability in Qualcomm products Memory Corruption in HLOS while importing a cryptographic key into KeyMaster Trusted Application. local low complexity qualcomm CWE-129	7.8
2023-08-08	CVE-2023-21625	Out-of-bounds Read vulnerability in Qualcomm products Information disclosure in Network Services due to buffer over-read while the device receives DNS response. network low complexity qualcomm CWE-125	7.5
2023-08-08	CVE-2023-21626	Improper Authentication vulnerability in Qualcomm products Cryptographic issue in HLOS due to improper authentication while performing key velocity checks using more than one key. local low complexity qualcomm CWE-287	7.1
2023-06-06	CVE-2022-33264	Out-of-bounds Write vulnerability in Qualcomm products Memory corruption in modem due to stack based buffer overflow while parsing OTASP Key Generation Request Message. local low complexity qualcomm CWE-787	7.8
2023-06-06	CVE-2022-40521	Improper Authentication vulnerability in Qualcomm products Transient DOS due to improper authorization in Modem network low complexity qualcomm CWE-287	7.5