Vulnerabilities > Qualcomm > Snapdragon 4 GEN 2 Firmware
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-09-02 | CVE-2024-33038 | Out-of-bounds Write vulnerability in Qualcomm products Memory corruption while passing untrusted/corrupted pointers from DSP to EVA. | 7.8 |
| 2024-09-02 | CVE-2024-33042 | Out-of-bounds Write vulnerability in Qualcomm products Memory corruption when Alternative Frequency offset value is set to 255. | 7.8 |
| 2024-09-02 | CVE-2024-33045 | Out-of-bounds Write vulnerability in Qualcomm products Memory corruption when BTFM client sends new messages over Slimbus to ADSP. | 7.8 |
| 2024-09-02 | CVE-2024-33050 | Out-of-bounds Read vulnerability in Qualcomm products Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper. | 7.5 |
| 2024-09-02 | CVE-2024-33051 | Out-of-bounds Read vulnerability in Qualcomm products Transient DOS while processing TIM IE from beacon frame as there is no check for IE length. | 7.5 |
| 2023-07-04 | CVE-2023-21629 | Double Free vulnerability in Qualcomm products Memory Corruption in Modem due to double free while parsing the PKCS15 sim files. | 6.8 |
| 2023-07-04 | CVE-2023-21631 | Unspecified vulnerability in Qualcomm products Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network. | 9.8 |
| 2023-07-04 | CVE-2023-21672 | Use After Free vulnerability in Qualcomm products Memory corruption in Audio while running concurrent tunnel playback or during concurrent audio tunnel recording sessions. | 7.8 |
| 2023-07-04 | CVE-2023-22386 | Out-of-bounds Write vulnerability in Qualcomm products Memory Corruption in WLAN HOST while processing WLAN FW request to allocate memory. | 7.8 |
| 2023-07-04 | CVE-2023-22387 | Unspecified vulnerability in Qualcomm products Arbitrary memory overwrite when VM gets compromised in TX write leading to Memory Corruption. | 7.8 |