Vulnerabilities > Qualcomm > Qca6391 Firmware > High
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-01-02 | CVE-2023-33114 | Use After Free vulnerability in Qualcomm products Memory corruption while running NPU, when NETWORK_UNLOAD and (NETWORK_UNLOAD or NETWORK_EXECUTE_V2) commands are submitted at the same time. | 7.8 |
| 2024-01-02 | CVE-2023-33116 | Out-of-bounds Read vulnerability in Qualcomm products Transient DOS while parsing ieee80211_parse_mscs_ie in WIN WLAN driver. | 7.5 |
| 2024-01-02 | CVE-2023-33117 | Use After Free vulnerability in Qualcomm products Memory corruption when HLOS allocates the response payload buffer to copy the data received from ADSP in response to AVCS_LOAD_MODULE command. | 7.8 |
| 2024-01-02 | CVE-2023-33118 | Use After Free vulnerability in Qualcomm products Memory corruption while processing Listen Sound Model client payload buffer when there is a request for Listen Sound session get parameter from ST HAL. | 7.8 |
| 2024-01-02 | CVE-2023-33120 | Use After Free vulnerability in Qualcomm products Memory corruption in Audio when memory map command is executed consecutively in ADSP. | 7.8 |
| 2024-01-02 | CVE-2023-43511 | Infinite Loop vulnerability in Qualcomm products Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header. | 7.5 |
| 2024-01-02 | CVE-2023-43514 | Use After Free vulnerability in Qualcomm products Memory corruption while invoking IOCTLs calls from user space for internal mem MAP and internal mem UNMAP. | 7.8 |
| 2023-12-05 | CVE-2023-21634 | Out-of-bounds Write vulnerability in Qualcomm products Memory Corruption in Radio Interface Layer while sending an SMS or writing an SMS to SIM. | 7.8 |
| 2023-12-05 | CVE-2023-22383 | Out-of-bounds Write vulnerability in Qualcomm products Memory Corruption in camera while installing a fd for a particular DMA buffer. | 7.8 |
| 2023-12-05 | CVE-2023-22668 | Use After Free vulnerability in Qualcomm products Memory Corruption in Audio while invoking IOCTLs calls from the user-space. | 7.8 |