Vulnerabilities > Qualcomm > Qca6391 Firmware > Medium

DATE CVE VULNERABILITY TITLE RISK
2023-10-03 CVE-2023-28571 Out-of-bounds Read vulnerability in Qualcomm products
Information disclosure in WLAN HOST while processing the WLAN scan descriptor list during roaming scan.
local
low complexity
qualcomm CWE-125
5.5
2023-09-05 CVE-2022-33220 Out-of-bounds Read vulnerability in Qualcomm products
Information disclosure in Automotive multimedia due to buffer over-read.
local
low complexity
qualcomm CWE-125
5.5
2023-09-05 CVE-2023-21667 Out-of-bounds Read vulnerability in Qualcomm products
Transient DOS in Bluetooth HOST while passing descriptor to validate the blacklisted BT keyboard.
low complexity
qualcomm CWE-125
6.5
2023-08-08 CVE-2023-21647 Improper Input Validation vulnerability in Qualcomm products
Information disclosure in Bluetooth when an GATT packet is received due to improper input validation.
network
low complexity
qualcomm CWE-20
6.5
2023-07-04 CVE-2023-21624 Unspecified vulnerability in Qualcomm products
Information disclosure in DSP Services while loading dynamic module.
local
low complexity
qualcomm
5.5
2023-07-04 CVE-2023-21629 Double Free vulnerability in Qualcomm products
Memory Corruption in Modem due to double free while parsing the PKCS15 sim files.
low complexity
qualcomm CWE-415
6.8
2023-06-06 CVE-2022-22076 Unspecified vulnerability in Qualcomm products
information disclosure due to cryptographic issue in Core during RPMB read request.
local
low complexity
qualcomm
5.5
2023-06-06 CVE-2022-40523 Exposure of Resource to Wrong Sphere vulnerability in Qualcomm products
Information disclosure in Kernel due to indirect branch misprediction.
local
low complexity
qualcomm CWE-668
5.5
2023-06-06 CVE-2022-40533 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Qualcomm products
Transient DOS due to untrusted Pointer Dereference in core while sending USB QMI request.
local
low complexity
qualcomm CWE-119
5.5
2023-05-02 CVE-2022-33273 Out-of-bounds Read vulnerability in Qualcomm products
Information disclosure due to buffer over-read in Trusted Execution Environment while QRKS report generation.
local
low complexity
qualcomm CWE-125
5.5