Vulnerabilities > Qualcomm > Ar6003 Firmware > High

DATE CVE VULNERABILITY TITLE RISK
2024-11-26 CVE-2017-18153 Use After Free vulnerability in Qualcomm products
A race condition exists in a driver potentially leading to a use-after-free condition.
local
high complexity
qualcomm CWE-416
7.0
2024-06-03 CVE-2023-43551 Improper Authentication vulnerability in Qualcomm products
Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command.
network
low complexity
qualcomm CWE-287
7.5
2024-03-04 CVE-2023-33066 Out-of-bounds Write vulnerability in Qualcomm products
Memory corruption in Audio while processing RT proxy port register driver.
local
low complexity
qualcomm CWE-787
7.8
2023-12-05 CVE-2023-33018 Integer Overflow or Wraparound vulnerability in Qualcomm products
Memory corruption while using the UIM diag command to get the operators name.
local
low complexity
qualcomm CWE-190
7.8
2023-10-03 CVE-2023-24848 Unspecified vulnerability in Qualcomm products
Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value.
network
low complexity
qualcomm
7.5
2023-10-03 CVE-2023-24849 Unspecified vulnerability in Qualcomm products
Information Disclosure in data Modem while parsing an FMTP line in an SDP message.
network
low complexity
qualcomm
7.5
2023-06-06 CVE-2022-33264 Out-of-bounds Write vulnerability in Qualcomm products
Memory corruption in modem due to stack based buffer overflow while parsing OTASP Key Generation Request Message.
local
low complexity
qualcomm CWE-787
7.8
2023-06-06 CVE-2022-40521 Improper Authentication vulnerability in Qualcomm products
Transient DOS due to improper authorization in Modem
network
low complexity
qualcomm CWE-287
7.5
2023-04-13 CVE-2022-33302 Improper Validation of Array Index vulnerability in Qualcomm products
Memory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than command length.
local
low complexity
qualcomm CWE-129
7.8
2023-03-10 CVE-2022-25694 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Qualcomm products
Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM
local
low complexity
qualcomm CWE-119
7.8