Vulnerabilities > Qualcomm > Qsm8350 Firmware > High

DATE CVE VULNERABILITY TITLE RISK
2023-08-08 CVE-2023-21652 Use of Hard-coded Credentials vulnerability in Qualcomm products
Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use.
local
low complexity
qualcomm CWE-798
7.1
2023-07-04 CVE-2023-24851 Out-of-bounds Write vulnerability in Qualcomm products
Memory Corruption in WLAN HOST while parsing QMI response message from firmware.
local
low complexity
qualcomm CWE-787
7.8
2023-07-04 CVE-2023-24854 Out-of-bounds Write vulnerability in Qualcomm products
Memory Corruption in WLAN HOST while parsing QMI WLAN Firmware response message.
local
low complexity
qualcomm CWE-787
7.8
2023-06-06 CVE-2022-33307 Double Free vulnerability in Qualcomm products
Memory Corruption due to double free in automotive when a bad HLOS address for one of the lists to be mapped is passed.
local
low complexity
qualcomm CWE-415
7.8
2023-06-06 CVE-2022-40507 Double Free vulnerability in Qualcomm products
Memory corruption due to double free in Core while mapping HLOS address to the list.
local
low complexity
qualcomm CWE-415
7.8
2023-06-06 CVE-2022-40529 Incorrect Authorization vulnerability in Qualcomm products
Memory corruption due to improper access control in kernel while processing a mapping request from root process.
local
low complexity
qualcomm CWE-863
7.8
2023-06-06 CVE-2023-21658 Out-of-bounds Read vulnerability in Qualcomm products
Transient DOS in WLAN Firmware while processing the received beacon or probe response frame.
network
low complexity
qualcomm CWE-125
7.5
2023-06-06 CVE-2023-21659 Out-of-bounds Read vulnerability in Qualcomm products
Transient DOS in WLAN Firmware while processing frames with missing header fields.
network
low complexity
qualcomm CWE-125
7.5
2023-06-06 CVE-2023-21670 Incorrect Authorization vulnerability in Qualcomm products
Memory Corruption in GPU Subsystem due to arbitrary command execution from GPU in privileged mode.
local
low complexity
qualcomm CWE-863
7.8
2023-05-02 CVE-2022-25713 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Qualcomm products
Memory corruption in Automotive due to Improper Restriction of Operations within the Bounds of a Memory Buffer while exporting a shared key.
local
low complexity
qualcomm CWE-119
7.8