Vulnerabilities > Qualcomm > Sm6250 Firmware

DATE CVE VULNERABILITY TITLE RISK
2024-07-01 CVE-2024-23373 Use After Free vulnerability in Qualcomm products
Memory corruption when IOMMU unmap operation fails, the DMA and anon buffers are getting released.
local
low complexity
qualcomm CWE-416
7.8
2024-06-03 CVE-2023-43551 Improper Authentication vulnerability in Qualcomm products
Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command.
network
low complexity
qualcomm CWE-287
7.5
2024-06-03 CVE-2023-43555 Out-of-bounds Read vulnerability in Qualcomm products
Information disclosure in Video while parsing mp2 clip with invalid section length.
network
low complexity
qualcomm CWE-125
7.5
2024-04-01 CVE-2023-28547 Out-of-bounds Write vulnerability in Qualcomm products
Memory corruption in SPS Application while requesting for public key in sorter TA.
local
low complexity
qualcomm CWE-787
7.8
2024-04-01 CVE-2023-33023 Classic Buffer Overflow vulnerability in Qualcomm products
Memory corruption while processing finish_sign command to pass a rsp buffer.
local
low complexity
qualcomm CWE-120
7.8
2024-04-01 CVE-2024-21468 Use After Free vulnerability in Qualcomm products
Memory corruption when there is failed unmap operation in GPU.
local
low complexity
qualcomm CWE-416
7.8
2024-04-01 CVE-2024-21470 Integer Overflow or Wraparound vulnerability in Qualcomm products
Memory corruption while allocating memory for graphics.
local
low complexity
qualcomm CWE-190
7.8
2024-03-04 CVE-2023-28578 Out-of-bounds Write vulnerability in Qualcomm products
Memory corruption in Core Services while executing the command for removing a single event listener.
local
low complexity
qualcomm CWE-787
7.8
2024-03-04 CVE-2023-33066 Out-of-bounds Write vulnerability in Qualcomm products
Memory corruption in Audio while processing RT proxy port register driver.
local
low complexity
qualcomm CWE-787
7.8
2024-03-04 CVE-2023-43540 Out-of-bounds Write vulnerability in Qualcomm products
Memory corruption while processing the IOCTL FM HCI WRITE request.
local
low complexity
qualcomm CWE-787
7.8