Sm4125 Firmware

DATE	CVE	VULNERABILITY TITLE	RISK
2023-12-05	CVE-2023-33018	Integer Overflow or Wraparound vulnerability in Qualcomm products Memory corruption while using the UIM diag command to get the operators name. local low complexity qualcomm CWE-190	7.8
2023-12-05	CVE-2023-33022	Integer Overflow or Wraparound vulnerability in Qualcomm products Memory corruption in HLOS while invoking IOCTL calls from user-space. local low complexity qualcomm CWE-190	7.8
2023-12-05	CVE-2023-33063	Use After Free vulnerability in Qualcomm products Memory corruption in DSP Services during a remote call from HLOS to DSP. local low complexity qualcomm CWE-416	7.8
2023-12-05	CVE-2023-33079	Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Qualcomm products Memory corruption in Audio while running invalid audio recording from ADSP. local low complexity qualcomm CWE-119	7.8
2023-12-05	CVE-2023-33080	Out-of-bounds Read vulnerability in Qualcomm products Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame. network low complexity qualcomm CWE-125	7.5
2023-12-05	CVE-2023-33088	NULL Pointer Dereference vulnerability in Qualcomm products Memory corruption when processing cmd parameters while parsing vdev. local low complexity qualcomm CWE-476	7.8
2023-12-05	CVE-2023-33106	Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Qualcomm products Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND. local low complexity qualcomm CWE-119	7.8
2023-12-05	CVE-2023-33107	Integer Overflow or Wraparound vulnerability in Qualcomm products Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call. local low complexity qualcomm CWE-190	7.8
2023-11-07	CVE-2023-22388	Out-of-bounds Write vulnerability in Qualcomm products Memory Corruption in Multi-mode Call Processor while processing bit mask API. network low complexity qualcomm CWE-787 critical	9.8
2023-11-07	CVE-2023-24852	Out-of-bounds Write vulnerability in Qualcomm products Memory Corruption in Core due to secure memory access by user while loading modem image. local low complexity qualcomm CWE-787	7.8