Vulnerabilities > Qualcomm > Qca6420 Firmware
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-08-08 | CVE-2023-21627 | Incorrect Type Conversion or Cast vulnerability in Qualcomm products Memory corruption in Trusted Execution Environment while calling service API with invalid address. | 7.8 |
| 2023-08-08 | CVE-2023-21648 | Out-of-bounds Write vulnerability in Qualcomm products Memory corruption in RIL while trying to send apdu packet. | 7.8 |
| 2023-08-08 | CVE-2023-21649 | Out-of-bounds Write vulnerability in Qualcomm products Memory corruption in WLAN while running doDriverCmd for an unspecific command. | 7.8 |
| 2023-08-08 | CVE-2023-21650 | Out-of-bounds Write vulnerability in Qualcomm products Memory Corruption in GPS HLOS Driver when injectFdclData receives data with invalid data length. | 7.8 |
| 2023-08-08 | CVE-2023-21651 | Incorrect Type Conversion or Cast vulnerability in Qualcomm products Memory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE. | 7.8 |
| 2023-08-08 | CVE-2023-21652 | Use of Hard-coded Credentials vulnerability in Qualcomm products Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use. | 7.1 |
| 2023-08-08 | CVE-2023-22666 | Out-of-bounds Write vulnerability in Qualcomm products Memory Corruption in Audio while playing amrwbplus clips with modified content. | 7.8 |
| 2023-08-08 | CVE-2023-28537 | Out-of-bounds Write vulnerability in Qualcomm products Memory corruption while allocating memory in COmxApeDec module in Audio. | 7.8 |
| 2023-08-08 | CVE-2023-28575 | Type Confusion vulnerability in Qualcomm products The cam_get_device_priv function does not check the type of handle being returned (device/session/link). | 7.8 |
| 2023-07-04 | CVE-2023-21629 | Double Free vulnerability in Qualcomm products Memory Corruption in Modem due to double free while parsing the PKCS15 sim files. | 6.8 |