Qcm6490 Firmware

DATE	CVE	VULNERABILITY TITLE	RISK
2023-09-05	CVE-2023-33021	Use After Free vulnerability in Qualcomm products Memory corruption in Graphics while processing user packets for command submission. local low complexity qualcomm CWE-416	7.8
2023-08-08	CVE-2022-40510	Out-of-bounds Write vulnerability in Qualcomm products Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder. network low complexity qualcomm CWE-787 critical	9.8
2023-08-08	CVE-2023-21626	Improper Authentication vulnerability in Qualcomm products Cryptographic issue in HLOS due to improper authentication while performing key velocity checks using more than one key. local low complexity qualcomm CWE-287	7.1
2023-08-08	CVE-2023-21651	Incorrect Type Conversion or Cast vulnerability in Qualcomm products Memory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE. local low complexity qualcomm CWE-704	7.8
2023-08-08	CVE-2023-21652	Use of Hard-coded Credentials vulnerability in Qualcomm products Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use. local low complexity qualcomm CWE-798	7.1
2023-08-08	CVE-2023-22666	Out-of-bounds Write vulnerability in Qualcomm products Memory Corruption in Audio while playing amrwbplus clips with modified content. local low complexity qualcomm CWE-787	7.8
2023-08-08	CVE-2023-28537	Out-of-bounds Write vulnerability in Qualcomm products Memory corruption while allocating memory in COmxApeDec module in Audio. local low complexity qualcomm CWE-787	7.8
2023-07-04	CVE-2023-21629	Double Free vulnerability in Qualcomm products Memory Corruption in Modem due to double free while parsing the PKCS15 sim files. low complexity qualcomm CWE-415	6.8
2023-07-04	CVE-2023-21631	Unspecified vulnerability in Qualcomm products Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network. network low complexity qualcomm critical	9.8
2023-07-04	CVE-2023-22386	Out-of-bounds Write vulnerability in Qualcomm products Memory Corruption in WLAN HOST while processing WLAN FW request to allocate memory. local low complexity qualcomm CWE-787	7.8