Vulnerabilities > Qualcomm > Snapdragon 4 GEN 2 Mobile Platform Firmware > High

DATE CVE VULNERABILITY TITLE RISK
2023-12-05 CVE-2023-33098 Out-of-bounds Read vulnerability in Qualcomm products
Transient DOS while parsing WPA IES, when it is passed with length more than expected size.
network
low complexity
qualcomm CWE-125
7.5
2023-12-05 CVE-2023-33106 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Qualcomm products
Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.
local
low complexity
qualcomm CWE-119
7.8
2023-12-05 CVE-2023-33107 Integer Overflow or Wraparound vulnerability in Qualcomm products
Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.
local
low complexity
qualcomm CWE-190
7.8
2023-11-07 CVE-2023-24852 Out-of-bounds Write vulnerability in Qualcomm products
Memory Corruption in Core due to secure memory access by user while loading modem image.
local
low complexity
qualcomm CWE-787
7.8
2023-11-07 CVE-2023-28545 Out-of-bounds Write vulnerability in Qualcomm products
Memory corruption in TZ Secure OS while loading an app ELF.
local
low complexity
qualcomm CWE-787
7.8
2023-11-07 CVE-2023-28556 Unspecified vulnerability in Qualcomm products
Cryptographic issue in HLOS during key management.
local
low complexity
qualcomm
7.8
2023-11-07 CVE-2023-28574 Out-of-bounds Write vulnerability in Qualcomm products
Memory corruption in core services when Diag handler receives a command to configure event listeners.
local
low complexity
qualcomm CWE-787
7.8
2023-10-03 CVE-2023-21673 Unspecified vulnerability in Qualcomm products
Improper Access to the VM resource manager can lead to Memory Corruption.
local
low complexity
qualcomm
7.8
2023-10-03 CVE-2023-24844 Unspecified vulnerability in Qualcomm products
Memory Corruption in Core while invoking a call to Access Control core library with hardware protected address range.
local
low complexity
qualcomm
7.8
2023-10-03 CVE-2023-24847 NULL Pointer Dereference vulnerability in Qualcomm products
Transient DOS in Modem while allocating DSM items.
network
low complexity
qualcomm CWE-476
7.5