Vulnerabilities > Qualcomm > Sm4250 AA Firmware > High
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-12-05 | CVE-2023-33017 | Classic Buffer Overflow vulnerability in Qualcomm products Memory corruption in Boot while running a ListVars test in UEFI Menu during boot. | 7.8 |
| 2023-12-05 | CVE-2023-33018 | Integer Overflow or Wraparound vulnerability in Qualcomm products Memory corruption while using the UIM diag command to get the operators name. | 7.8 |
| 2023-12-05 | CVE-2023-33022 | Integer Overflow or Wraparound vulnerability in Qualcomm products Memory corruption in HLOS while invoking IOCTL calls from user-space. | 7.8 |
| 2023-12-05 | CVE-2023-33063 | Use After Free vulnerability in Qualcomm products Memory corruption in DSP Services during a remote call from HLOS to DSP. | 7.8 |
| 2023-12-05 | CVE-2023-33079 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Qualcomm products Memory corruption in Audio while running invalid audio recording from ADSP. | 7.8 |
| 2023-12-05 | CVE-2023-33080 | Out-of-bounds Read vulnerability in Qualcomm products Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame. | 7.5 |
| 2023-11-07 | CVE-2023-33055 | Out-of-bounds Write vulnerability in Qualcomm products Memory Corruption in Audio while invoking callback function in driver from ADSP. | 7.8 |
| 2023-11-07 | CVE-2023-33059 | Out-of-bounds Write vulnerability in Qualcomm products Memory corruption in Audio while processing the VOC packet data from ADSP. | 7.8 |
| 2023-10-03 | CVE-2023-28540 | Improper Authentication vulnerability in Qualcomm products Cryptographic issue in Data Modem due to improper authentication during TLS handshake. | 7.5 |
| 2023-10-03 | CVE-2023-33027 | Out-of-bounds Read vulnerability in Qualcomm products Transient DOS in WLAN Firmware while parsing rsn ies. | 7.5 |