High

DATE	CVE	VULNERABILITY TITLE	RISK
2023-10-03	CVE-2023-33035	Classic Buffer Overflow vulnerability in Qualcomm products Memory corruption while invoking callback function of AFE from ADSP. local low complexity qualcomm CWE-120	7.8
2023-09-05	CVE-2022-33275	Improper Validation of Array Index vulnerability in Qualcomm products Memory corruption due to improper validation of array index in WLAN HAL when received lm_itemNum is out of range. local low complexity qualcomm CWE-129	7.8
2023-08-08	CVE-2023-28537	Out-of-bounds Write vulnerability in Qualcomm products Memory corruption while allocating memory in COmxApeDec module in Audio. local low complexity qualcomm CWE-787	7.8
2023-08-08	CVE-2023-28555	Out-of-bounds Read vulnerability in Qualcomm products Transient DOS in Audio while remapping channel buffer in media codec decoding. network low complexity qualcomm CWE-125	7.5
2023-06-06	CVE-2022-22060	Reachable Assertion vulnerability in Qualcomm products Assertion occurs while processing Reconfiguration message due to improper validation network low complexity qualcomm CWE-617	7.5
2023-06-06	CVE-2022-33224	Classic Buffer Overflow vulnerability in Qualcomm products Memory corruption in core due to buffer copy without check9ing the size of input while processing ioctl queries. local low complexity qualcomm CWE-120	7.8
2023-06-06	CVE-2022-33226	Classic Buffer Overflow vulnerability in Qualcomm products Memory corruption due to buffer copy without checking the size of input in Core while processing ioctl commands from diag client applications. local low complexity qualcomm CWE-120	7.8
2023-06-06	CVE-2022-33251	Reachable Assertion vulnerability in Qualcomm products Transient DOS due to reachable assertion in Modem because of invalid network configuration. network low complexity qualcomm CWE-617	7.5
2023-06-06	CVE-2022-33263	Use After Free vulnerability in Qualcomm products Memory corruption due to use after free in Core when multiple DCI clients register and deregister. local low complexity qualcomm CWE-416	7.8
2023-06-06	CVE-2022-33264	Out-of-bounds Write vulnerability in Qualcomm products Memory corruption in modem due to stack based buffer overflow while parsing OTASP Key Generation Request Message. local low complexity qualcomm CWE-787	7.8