High

DATE	CVE	VULNERABILITY TITLE	RISK
2023-06-06	CVE-2022-40529	Incorrect Authorization vulnerability in Qualcomm products Memory corruption due to improper access control in kernel while processing a mapping request from root process. local low complexity qualcomm CWE-863	7.8
2023-06-06	CVE-2023-21628	Out-of-bounds Write vulnerability in Qualcomm products Memory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command. local low complexity qualcomm CWE-787	7.8
2023-06-06	CVE-2023-21659	Out-of-bounds Read vulnerability in Qualcomm products Transient DOS in WLAN Firmware while processing frames with missing header fields. network low complexity qualcomm CWE-125	7.5
2023-06-06	CVE-2023-21669	Out-of-bounds Read vulnerability in Qualcomm products Information Disclosure in WLAN HOST while sending DPP action frame to peer with an invalid source address. network low complexity qualcomm CWE-125	7.5
2023-06-06	CVE-2023-21670	Incorrect Authorization vulnerability in Qualcomm products Memory Corruption in GPU Subsystem due to arbitrary command execution from GPU in privileged mode. local low complexity qualcomm CWE-863	7.8
2023-05-02	CVE-2022-40504	Reachable Assertion vulnerability in Qualcomm products Transient DOS due to reachable assertion in Modem when UE received Downlink Data Indication message from the network. network low complexity qualcomm CWE-617	7.5
2023-05-02	CVE-2022-40508	Reachable Assertion vulnerability in Qualcomm products Transient DOS due to reachable assertion in Modem while processing config related to cross carrier scheduling, which is not supported. network low complexity qualcomm CWE-617	7.5
2023-05-02	CVE-2023-21665	Incorrect Type Conversion or Cast vulnerability in Qualcomm products Memory corruption in Graphics while importing a file. local low complexity qualcomm CWE-704	7.8
2023-04-13	CVE-2022-33231	Double Free vulnerability in Qualcomm products Memory corruption due to double free in core while initializing the encryption key. local low complexity qualcomm CWE-415	7.8
2023-04-13	CVE-2022-33269	Integer Overflow or Wraparound vulnerability in Qualcomm products Memory corruption due to integer overflow or wraparound in Core while DDR memory assignment. local low complexity qualcomm CWE-190	7.8