Msm8108 Firmware

DATE	CVE	VULNERABILITY TITLE	RISK
2023-10-03	CVE-2023-24849	Unspecified vulnerability in Qualcomm products Information Disclosure in data Modem while parsing an FMTP line in an SDP message. network low complexity qualcomm	7.5
2023-09-05	CVE-2023-33019	Unspecified vulnerability in Qualcomm products Transient DOS in WLAN Host while doing channel switch announcement (CSA), when a mobile station receives invalid channel in CSA IE. network low complexity qualcomm	7.5
2023-09-05	CVE-2023-33020	Unspecified vulnerability in Qualcomm products Transient DOS in WLAN Host when an invalid channel (like channel out of range) is received in STA during CSA IE. network low complexity qualcomm	7.5
2023-08-08	CVE-2022-40510	Out-of-bounds Write vulnerability in Qualcomm products Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder. network low complexity qualcomm CWE-787 critical	9.8
2023-08-08	CVE-2023-21625	Out-of-bounds Read vulnerability in Qualcomm products Information disclosure in Network Services due to buffer over-read while the device receives DNS response. network low complexity qualcomm CWE-125	7.5
2023-08-08	CVE-2023-21626	Improper Authentication vulnerability in Qualcomm products Cryptographic issue in HLOS due to improper authentication while performing key velocity checks using more than one key. local low complexity qualcomm CWE-287	7.1
2023-08-08	CVE-2023-22666	Out-of-bounds Write vulnerability in Qualcomm products Memory Corruption in Audio while playing amrwbplus clips with modified content. local low complexity qualcomm CWE-787	7.8
2023-08-08	CVE-2023-28537	Out-of-bounds Write vulnerability in Qualcomm products Memory corruption while allocating memory in COmxApeDec module in Audio. local low complexity qualcomm CWE-787	7.8
2023-07-04	CVE-2023-21629	Double Free vulnerability in Qualcomm products Memory Corruption in Modem due to double free while parsing the PKCS15 sim files. low complexity qualcomm CWE-415	6.8
2023-07-04	CVE-2023-21631	Unspecified vulnerability in Qualcomm products Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network. network low complexity qualcomm critical	9.8