Vulnerabilities > Qualcomm > Sa8775P Firmware > Medium

DATE CVE VULNERABILITY TITLE RISK
2025-01-06 CVE-2024-23366 Out-of-bounds Read vulnerability in Qualcomm products
Information Disclosure while invoking the mailbox write API when message received from user is larger than mailbox size.
local
low complexity
qualcomm CWE-125
5.5
2025-01-06 CVE-2024-43063 Out-of-bounds Read vulnerability in Qualcomm products
information disclosure while invoking the mailbox read API.
local
low complexity
qualcomm CWE-125
5.5
2025-01-06 CVE-2024-43064 Allocation of Resources Without Limits or Throttling vulnerability in Qualcomm products
Uncontrolled resource consumption when a driver, an application or a SMMU client tries to access the global registers through SMMU.
local
high complexity
qualcomm CWE-770
4.7
2025-01-06 CVE-2024-45559 Out-of-bounds Read vulnerability in Qualcomm products
Transient DOS can occur when GVM sends a specific message type to the Vdev-FastRPC backend.
local
low complexity
qualcomm CWE-125
5.5
2024-12-02 CVE-2024-33039 Untrusted Pointer Dereference vulnerability in Qualcomm products
Memory corruption when PAL client calls PAL service APIs by passing a random value as handle and the handle is not validated by the service.
local
low complexity
qualcomm CWE-822
6.7
2024-11-04 CVE-2024-33068 Use After Free vulnerability in Qualcomm products
Transient DOS while parsing fragments of MBSSID IE from beacon frame.
network
low complexity
qualcomm CWE-416
6.5
2024-11-04 CVE-2024-38403 Out-of-bounds Read vulnerability in Qualcomm products
Transient DOS while parsing BTM ML IE when per STA profile is not included.
network
low complexity
qualcomm CWE-125
6.5
2024-11-04 CVE-2024-38405 Out-of-bounds Read vulnerability in Qualcomm products
Transient DOS while processing the CU information from RNR IE.
network
low complexity
qualcomm CWE-125
6.5
2024-10-07 CVE-2024-23378 Classic Buffer Overflow vulnerability in Qualcomm products
Memory corruption while invoking IOCTL calls for MSM module from the user space during audio playback and record.
local
low complexity
qualcomm CWE-120
6.7
2024-10-07 CVE-2024-23379 Double Free vulnerability in Qualcomm products
Memory corruption while unmapping the fastrpc map when two threads can free the same map in concurrent scenario.
local
low complexity
qualcomm CWE-415
6.7