Vulnerabilities > Qualcomm > Fastconnect 6900 Firmware > High
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-08-08 | CVE-2023-28575 | Type Confusion vulnerability in Qualcomm products The cam_get_device_priv function does not check the type of handle being returned (device/session/link). | 7.8 |
| 2023-08-08 | CVE-2023-28576 | Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Qualcomm products The buffer obtained from kernel APIs such as cam_mem_get_cpu_buf() may be readable/writable in userspace after kernel accesses it. | 7.0 |
| 2023-08-08 | CVE-2023-28577 | Use After Free vulnerability in Qualcomm products In the function call related to CAM_REQ_MGR_RELEASE_BUF there is no check if the buffer is being used. | 7.8 |
| 2023-07-04 | CVE-2023-21633 | Out-of-bounds Write vulnerability in Qualcomm products Memory Corruption in Linux while processing QcRilRequestImsRegisterMultiIdentityMessage request. | 7.8 |
| 2023-07-04 | CVE-2023-21635 | Out-of-bounds Write vulnerability in Qualcomm products Memory Corruption in Data Network Stack & Connectivity when sim gets detected on telephony. | 7.8 |
| 2023-07-04 | CVE-2023-21637 | Out-of-bounds Write vulnerability in Qualcomm products Memory corruption in Linux while calling system configuration APIs. | 7.8 |
| 2023-07-04 | CVE-2023-21638 | Incorrect Type Conversion or Cast vulnerability in Qualcomm products Memory corruption in Video while calling APIs with different instance ID than the one received in initialization. | 7.8 |
| 2023-07-04 | CVE-2023-21640 | Out-of-bounds Write vulnerability in Qualcomm products Memory corruption in Linux when the file upload API is called with parameters having large buffer. | 7.8 |
| 2023-07-04 | CVE-2023-21641 | Unspecified vulnerability in Qualcomm products An app with non-privileged access can change global system brightness and cause undesired system behavior. | 7.8 |
| 2023-07-04 | CVE-2023-21672 | Use After Free vulnerability in Qualcomm products Memory corruption in Audio while running concurrent tunnel playback or during concurrent audio tunnel recording sessions. | 7.8 |