Vulnerabilities > Qualcomm > Sdx57M Firmware

DATE CVE VULNERABILITY TITLE RISK
2024-01-02 CVE-2023-33038 Out-of-bounds Write vulnerability in Qualcomm products
Memory corruption while receiving a message in Bus Socket Transport Server.
local
low complexity
qualcomm CWE-787
7.8
2024-01-02 CVE-2023-33040 Unspecified vulnerability in Qualcomm products
Transient DOS in Data Modem during DTLS handshake.
network
low complexity
qualcomm
7.5
2023-12-05 CVE-2023-28550 Out-of-bounds Write vulnerability in Qualcomm products
Memory corruption in MPP performance while accessing DSM watermark using external memory address.
local
low complexity
qualcomm CWE-787
7.8
2023-12-05 CVE-2023-28551 Out-of-bounds Write vulnerability in Qualcomm products
Memory corruption in UTILS when modem processes memory specific Diag commands having arbitrary address values as input arguments.
local
low complexity
qualcomm CWE-787
7.8
2023-12-05 CVE-2023-28585 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Qualcomm products
Memory corruption while loading an ELF segment in TEE Kernel.
local
low complexity
qualcomm CWE-119
8.8
2023-12-05 CVE-2023-28586 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Qualcomm products
Information disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE.
local
low complexity
qualcomm CWE-119
6.5
2023-12-05 CVE-2023-33018 Integer Overflow or Wraparound vulnerability in Qualcomm products
Memory corruption while using the UIM diag command to get the operators name.
local
low complexity
qualcomm CWE-190
7.8
2023-12-05 CVE-2023-33042 Improper Input Validation vulnerability in Qualcomm products
Transient DOS in Modem after RRC Setup message is received.
network
low complexity
qualcomm CWE-20
7.5
2023-12-05 CVE-2023-33043 Reachable Assertion vulnerability in Qualcomm products
Transient DOS in Modem when a Beam switch request is made with a non-configured BWP.
network
low complexity
qualcomm CWE-617
7.5
2023-12-05 CVE-2023-33044 Reachable Assertion vulnerability in Qualcomm products
Transient DOS in Data modem while handling TLB control messages from the Network.
network
low complexity
qualcomm CWE-617
7.5