Vulnerabilities > Qualcomm > Qcm4290 Firmware
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2024-01-02 | CVE-2023-33040 | Unspecified vulnerability in Qualcomm products Transient DOS in Data Modem during DTLS handshake. | 7.5 |
2024-01-02 | CVE-2023-33062 | Unspecified vulnerability in Qualcomm products Transient DOS in WLAN Firmware while parsing a BTM request. | 7.5 |
2024-01-02 | CVE-2023-33109 | NULL Pointer Dereference vulnerability in Qualcomm products Transient DOS while processing a WMI P2P listen start command (0xD00A) sent from host. | 7.5 |
2024-01-02 | CVE-2023-33117 | Use After Free vulnerability in Qualcomm products Memory corruption when HLOS allocates the response payload buffer to copy the data received from ADSP in response to AVCS_LOAD_MODULE command. | 7.8 |
2024-01-02 | CVE-2023-33118 | Use After Free vulnerability in Qualcomm products Memory corruption while processing Listen Sound Model client payload buffer when there is a request for Listen Sound session get parameter from ST HAL. | 7.8 |
2024-01-02 | CVE-2023-33120 | Use After Free vulnerability in Qualcomm products Memory corruption in Audio when memory map command is executed consecutively in ADSP. | 7.8 |
2024-01-02 | CVE-2023-43511 | Infinite Loop vulnerability in Qualcomm products Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header. | 7.5 |
2023-12-05 | CVE-2023-28546 | Classic Buffer Overflow vulnerability in Qualcomm products Memory Corruption in SPS Application while exporting public key in sorter TA. | 7.8 |
2023-12-05 | CVE-2023-28550 | Out-of-bounds Write vulnerability in Qualcomm products Memory corruption in MPP performance while accessing DSM watermark using external memory address. | 7.8 |
2023-12-05 | CVE-2023-28551 | Out-of-bounds Write vulnerability in Qualcomm products Memory corruption in UTILS when modem processes memory specific Diag commands having arbitrary address values as input arguments. | 7.8 |