Msm8909W Firmware

DATE	CVE	VULNERABILITY TITLE	RISK
2023-08-08	CVE-2022-40510	Out-of-bounds Write vulnerability in Qualcomm products Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder. network low complexity qualcomm CWE-787 critical	9.8
2023-07-04	CVE-2023-21629	Double Free vulnerability in Qualcomm products Memory Corruption in Modem due to double free while parsing the PKCS15 sim files. low complexity qualcomm CWE-415	6.8
2023-07-04	CVE-2023-21631	Unspecified vulnerability in Qualcomm products Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network. network low complexity qualcomm critical	9.8
2023-07-04	CVE-2023-28541	Out-of-bounds Read vulnerability in Qualcomm products Memory Corruption in Data Modem while processing DMA buffer release event about CFR data. local low complexity qualcomm CWE-125	7.8
2023-06-06	CVE-2022-33264	Out-of-bounds Write vulnerability in Qualcomm products Memory corruption in modem due to stack based buffer overflow while parsing OTASP Key Generation Request Message. local low complexity qualcomm CWE-787	7.8
2023-06-06	CVE-2022-40521	Improper Authentication vulnerability in Qualcomm products Transient DOS due to improper authorization in Modem network low complexity qualcomm CWE-287	7.5
2023-05-02	CVE-2023-21666	Memory Leak vulnerability in Qualcomm products Memory Corruption in Graphics while accessing a buffer allocated through the graphics pool. local low complexity qualcomm CWE-401	7.8
2023-04-13	CVE-2022-33289	Improper Validation of Array Index vulnerability in Qualcomm products Memory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card. low complexity qualcomm CWE-129	6.8
2023-04-13	CVE-2022-33302	Improper Validation of Array Index vulnerability in Qualcomm products Memory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than command length. local low complexity qualcomm CWE-129	7.8
2023-04-13	CVE-2022-40503	Out-of-bounds Read vulnerability in Qualcomm products Information disclosure due to buffer over-read in Bluetooth Host while A2DP streaming. network low complexity qualcomm CWE-125	7.5