Vulnerabilities > Qualcomm > Snapdragon 660 Mobile Firmware

DATE CVE VULNERABILITY TITLE RISK
2024-10-07 CVE-2024-43047 Use After Free vulnerability in Qualcomm products
Memory corruption while maintaining memory maps of HLOS memory.
local
low complexity
qualcomm CWE-416
7.8
2024-09-02 CVE-2024-33052 Out-of-bounds Write vulnerability in Qualcomm products
Memory corruption when user provides data for FM HCI command control operations.
local
low complexity
qualcomm CWE-787
7.8
2024-09-02 CVE-2024-33060 Use After Free vulnerability in Qualcomm products
Memory corruption when two threads try to map and unmap a single node simultaneously.
local
low complexity
qualcomm CWE-416
7.8
2024-06-03 CVE-2023-43545 Integer Overflow or Wraparound vulnerability in Qualcomm products
Memory corruption when more scan frequency list or channels are sent from the user space.
local
low complexity
qualcomm CWE-190
7.8
2024-06-03 CVE-2023-43551 Improper Authentication vulnerability in Qualcomm products
Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command.
network
low complexity
qualcomm CWE-287
7.5
2024-05-06 CVE-2023-43527 Out-of-bounds Read vulnerability in Qualcomm products
Information disclosure while parsing dts header atom in Video.
local
low complexity
qualcomm CWE-125
5.5
2024-05-06 CVE-2023-43528 Out-of-bounds Read vulnerability in Qualcomm products
Information disclosure when the ADSP payload size received in HLOS in response to Audio Stream Manager matrix session is less than this expected size.
local
low complexity
qualcomm CWE-125
5.5
2024-05-06 CVE-2024-21471 Use After Free vulnerability in Qualcomm products
Memory corruption when IOMMU unmap of a GPU buffer fails in Linux.
local
low complexity
qualcomm CWE-416
7.8
2024-04-01 CVE-2023-28547 Out-of-bounds Write vulnerability in Qualcomm products
Memory corruption in SPS Application while requesting for public key in sorter TA.
local
low complexity
qualcomm CWE-787
7.8
2024-04-01 CVE-2023-33023 Classic Buffer Overflow vulnerability in Qualcomm products
Memory corruption while processing finish_sign command to pass a rsp buffer.
local
low complexity
qualcomm CWE-120
7.8