Vulnerabilities > Qualcomm > Qfw7114 Firmware > High
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-12-05 | CVE-2023-33018 | Integer Overflow or Wraparound vulnerability in Qualcomm products Memory corruption while using the UIM diag command to get the operators name. | 7.8 |
| 2023-12-05 | CVE-2023-33022 | Integer Overflow or Wraparound vulnerability in Qualcomm products Memory corruption in HLOS while invoking IOCTL calls from user-space. | 7.8 |
| 2023-12-05 | CVE-2023-33024 | Classic Buffer Overflow vulnerability in Qualcomm products Memory corruption while sending SMS from AP firmware. | 7.8 |
| 2023-12-05 | CVE-2023-33041 | Reachable Assertion vulnerability in Qualcomm products Under certain scenarios the WLAN Firmware will reach an assertion due to state confusion while looking up peer ids. | 7.5 |
| 2023-12-05 | CVE-2023-33079 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Qualcomm products Memory corruption in Audio while running invalid audio recording from ADSP. | 7.8 |
| 2023-12-05 | CVE-2023-33080 | Out-of-bounds Read vulnerability in Qualcomm products Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame. | 7.5 |
| 2023-12-05 | CVE-2023-33081 | Out-of-bounds Read vulnerability in Qualcomm products Transient DOS while converting TWT (Target Wake Time) frame parameters in the OTA broadcast. | 7.5 |
| 2023-12-05 | CVE-2023-33087 | Classic Buffer Overflow vulnerability in Qualcomm products Memory corruption in Core while processing RX intent request. | 7.8 |
| 2023-12-05 | CVE-2023-33088 | NULL Pointer Dereference vulnerability in Qualcomm products Memory corruption when processing cmd parameters while parsing vdev. | 7.8 |
| 2023-12-05 | CVE-2023-33089 | NULL Pointer Dereference vulnerability in Qualcomm products Transient DOS when processing a NULL buffer while parsing WLAN vdev. | 7.5 |