Vulnerabilities > Qualcomm > Qca4004 Firmware
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-12-05 | CVE-2023-28551 | Out-of-bounds Write vulnerability in Qualcomm products Memory corruption in UTILS when modem processes memory specific Diag commands having arbitrary address values as input arguments. | 7.8 |
| 2023-12-05 | CVE-2023-28585 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Qualcomm products Memory corruption while loading an ELF segment in TEE Kernel. | 8.8 |
| 2023-12-05 | CVE-2023-28586 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Qualcomm products Information disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE. | 6.5 |
| 2023-12-05 | CVE-2023-33017 | Classic Buffer Overflow vulnerability in Qualcomm products Memory corruption in Boot while running a ListVars test in UEFI Menu during boot. | 7.8 |
| 2023-12-05 | CVE-2023-33018 | Integer Overflow or Wraparound vulnerability in Qualcomm products Memory corruption while using the UIM diag command to get the operators name. | 7.8 |
| 2023-11-07 | CVE-2023-22388 | Out-of-bounds Write vulnerability in Qualcomm products Memory Corruption in Multi-mode Call Processor while processing bit mask API. | 9.8 |
| 2023-11-07 | CVE-2023-24852 | Out-of-bounds Write vulnerability in Qualcomm products Memory Corruption in Core due to secure memory access by user while loading modem image. | 7.8 |
| 2023-11-07 | CVE-2023-28545 | Out-of-bounds Write vulnerability in Qualcomm products Memory corruption in TZ Secure OS while loading an app ELF. | 7.8 |
| 2023-11-07 | CVE-2023-28556 | Unspecified vulnerability in Qualcomm products Cryptographic issue in HLOS during key management. | 7.8 |
| 2023-11-07 | CVE-2023-28563 | Unspecified vulnerability in Qualcomm products Information disclosure in IOE Firmware while handling WMI command. | 5.5 |