Vulnerabilities > Qualcomm > Snapdragon 8C Compute Platform Firmware

DATE CVE VULNERABILITY TITLE RISK
2024-01-02 CVE-2023-33110 Race Condition vulnerability in Qualcomm products
The session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may lead to race condition between event callback - PCM close and reset session index causing memory corruption.
local
high complexity
qualcomm CWE-362
7.0
2024-01-02 CVE-2023-43511 Infinite Loop vulnerability in Qualcomm products
Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header.
network
low complexity
qualcomm CWE-835
7.5
2023-11-07 CVE-2023-22388 Out-of-bounds Write vulnerability in Qualcomm products
Memory Corruption in Multi-mode Call Processor while processing bit mask API.
network
low complexity
qualcomm CWE-787
critical
9.8
2023-11-07 CVE-2023-24852 Out-of-bounds Write vulnerability in Qualcomm products
Memory Corruption in Core due to secure memory access by user while loading modem image.
local
low complexity
qualcomm CWE-787
7.8
2023-11-07 CVE-2023-28545 Out-of-bounds Write vulnerability in Qualcomm products
Memory corruption in TZ Secure OS while loading an app ELF.
local
low complexity
qualcomm CWE-787
7.8
2023-11-07 CVE-2023-28556 Unspecified vulnerability in Qualcomm products
Cryptographic issue in HLOS during key management.
local
low complexity
qualcomm
7.8
2023-11-07 CVE-2023-28563 Unspecified vulnerability in Qualcomm products
Information disclosure in IOE Firmware while handling WMI command.
local
low complexity
qualcomm
5.5
2023-11-07 CVE-2023-28566 Unspecified vulnerability in Qualcomm products
Information disclosure in WLAN HAL while handling the WMI state info command.
local
low complexity
qualcomm
5.5
2023-11-07 CVE-2023-28568 Unspecified vulnerability in Qualcomm products
Information disclosure in WLAN HAL when reception status handler is called.
local
low complexity
qualcomm
5.5
2023-11-07 CVE-2023-28569 Unspecified vulnerability in Qualcomm products
Information disclosure in WLAN HAL while handling command through WMI interfaces.
local
low complexity
qualcomm
5.5