High

DATE	CVE	VULNERABILITY TITLE	RISK
2023-08-08	CVE-2023-28537	Out-of-bounds Write vulnerability in Qualcomm products Memory corruption while allocating memory in COmxApeDec module in Audio. local low complexity qualcomm CWE-787	7.8
2023-08-08	CVE-2023-28575	Type Confusion vulnerability in Qualcomm products The cam_get_device_priv function does not check the type of handle being returned (device/session/link). local low complexity qualcomm CWE-843	7.8
2023-08-08	CVE-2023-28576	Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Qualcomm products The buffer obtained from kernel APIs such as cam_mem_get_cpu_buf() may be readable/writable in userspace after kernel accesses it. local high complexity qualcomm CWE-367	7.0
2023-08-08	CVE-2023-28577	Use After Free vulnerability in Qualcomm products In the function call related to CAM_REQ_MGR_RELEASE_BUF there is no check if the buffer is being used. local low complexity qualcomm CWE-416	7.8
2023-07-04	CVE-2023-21633	Out-of-bounds Write vulnerability in Qualcomm products Memory Corruption in Linux while processing QcRilRequestImsRegisterMultiIdentityMessage request. local low complexity qualcomm CWE-787	7.8
2023-07-04	CVE-2023-21635	Out-of-bounds Write vulnerability in Qualcomm products Memory Corruption in Data Network Stack & Connectivity when sim gets detected on telephony. local low complexity qualcomm CWE-787	7.8
2023-07-04	CVE-2023-21637	Out-of-bounds Write vulnerability in Qualcomm products Memory corruption in Linux while calling system configuration APIs. local low complexity qualcomm CWE-787	7.8
2023-07-04	CVE-2023-21638	Incorrect Type Conversion or Cast vulnerability in Qualcomm products Memory corruption in Video while calling APIs with different instance ID than the one received in initialization. local low complexity qualcomm CWE-704	7.8
2023-07-04	CVE-2023-22386	Out-of-bounds Write vulnerability in Qualcomm products Memory Corruption in WLAN HOST while processing WLAN FW request to allocate memory. local low complexity qualcomm CWE-787	7.8
2023-07-04	CVE-2023-22387	Unspecified vulnerability in Qualcomm products Arbitrary memory overwrite when VM gets compromised in TX write leading to Memory Corruption. local low complexity qualcomm	7.8