Vulnerabilities > Qualcomm > Medium

DATE CVE VULNERABILITY TITLE RISK
2023-06-06 CVE-2022-40523 Exposure of Resource to Wrong Sphere vulnerability in Qualcomm products
Information disclosure in Kernel due to indirect branch misprediction.
local
low complexity
qualcomm CWE-668
5.5
2023-06-06 CVE-2022-40525 Exposure of Resource to Wrong Sphere vulnerability in Qualcomm products
Information disclosure in Linux Networking Firmware due to unauthorized information leak during side channel analysis.
local
low complexity
qualcomm CWE-668
5.5
2023-06-06 CVE-2022-40533 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Qualcomm products
Transient DOS due to untrusted Pointer Dereference in core while sending USB QMI request.
local
low complexity
qualcomm CWE-119
5.5
2023-05-02 CVE-2022-33273 Out-of-bounds Read vulnerability in Qualcomm products
Information disclosure due to buffer over-read in Trusted Execution Environment while QRKS report generation.
local
low complexity
qualcomm CWE-125
5.5
2023-04-13 CVE-2022-33270 Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Qualcomm products
Transient DOS due to time-of-check time-of-use race condition in Modem while processing RRC Reconfiguration message.
network
high complexity
qualcomm CWE-367
5.9
2023-04-13 CVE-2022-33289 Improper Validation of Array Index vulnerability in Qualcomm products
Memory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card.
low complexity
qualcomm CWE-129
6.8
2023-04-13 CVE-2022-33297 Out-of-bounds Read vulnerability in Qualcomm products
Information disclosure due to buffer overread in Linux sensors
local
low complexity
qualcomm CWE-125
5.5
2023-03-10 CVE-2022-22075 Unspecified vulnerability in Qualcomm products
Information Disclosure in Graphics during GPU context switch.
local
low complexity
qualcomm
5.5
2023-02-12 CVE-2022-33216 Improper Input Validation vulnerability in Qualcomm products
Transient Denial-of-service in Automotive due to improper input validation while parsing ELF file.
local
low complexity
qualcomm CWE-20
5.5
2023-02-12 CVE-2022-33221 Out-of-bounds Read vulnerability in Qualcomm products
Information disclosure in Trusted Execution Environment due to buffer over-read while processing metadata verification requests.
local
low complexity
qualcomm CWE-125
5.5