High

DATE	CVE	VULNERABILITY TITLE	RISK
2023-06-06	CVE-2022-40507	Double Free vulnerability in Qualcomm products Memory corruption due to double free in Core while mapping HLOS address to the list. local low complexity qualcomm CWE-415	7.8
2023-06-06	CVE-2022-40529	Incorrect Authorization vulnerability in Qualcomm products Memory corruption due to improper access control in kernel while processing a mapping request from root process. local low complexity qualcomm CWE-863	7.8
2023-06-06	CVE-2023-21628	Out-of-bounds Write vulnerability in Qualcomm products Memory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command. local low complexity qualcomm CWE-787	7.8
2023-06-06	CVE-2023-21656	Improper Input Validation vulnerability in Qualcomm products Memory corruption in WLAN HOST while receiving an WMI event from firmware. local low complexity qualcomm CWE-20	7.8
2023-06-06	CVE-2023-21657	Improper Input Validation vulnerability in Qualcomm products Memoru corruption in Audio when ADSP sends input during record use case. local low complexity qualcomm CWE-20	7.8
2023-06-06	CVE-2023-21670	Incorrect Authorization vulnerability in Qualcomm products Memory Corruption in GPU Subsystem due to arbitrary command execution from GPU in privileged mode. local low complexity qualcomm CWE-863	7.8
2023-05-02	CVE-2022-25713	Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Qualcomm products Memory corruption in Automotive due to Improper Restriction of Operations within the Bounds of a Memory Buffer while exporting a shared key. local low complexity qualcomm CWE-119	7.8
2023-05-02	CVE-2023-21665	Incorrect Type Conversion or Cast vulnerability in Qualcomm products Memory corruption in Graphics while importing a file. local low complexity qualcomm CWE-704	7.8
2023-04-13	CVE-2022-33231	Double Free vulnerability in Qualcomm products Memory corruption due to double free in core while initializing the encryption key. local low complexity qualcomm CWE-415	7.8
2023-03-10	CVE-2022-33242	Improper Authentication vulnerability in Qualcomm products Memory corruption due to improper authentication in Qualcomm IPC while loading unsigned lib in audio PD. local low complexity qualcomm CWE-287	7.8