Vulnerabilities > Qualcomm > Snapdragon 8CX GEN 3 Compute Platform Firmware > High
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-11-04 | CVE-2024-38409 | Classic Buffer Overflow vulnerability in Qualcomm products Memory corruption while station LL statistic handling. | 7.8 |
| 2024-11-04 | CVE-2024-38410 | Out-of-bounds Write vulnerability in Qualcomm products Memory corruption while IOCLT is called when device is in invalid state and the WMI command buffer may be freed twice. | 7.8 |
| 2024-02-06 | CVE-2023-33072 | Classic Buffer Overflow vulnerability in Qualcomm products Memory corruption in Core while processing control functions. | 7.8 |
| 2024-02-06 | CVE-2023-33076 | Out-of-bounds Write vulnerability in Qualcomm products Memory corruption in Core when updating rollback version for TA and OTA feature is enabled. | 7.8 |
| 2024-02-06 | CVE-2023-43532 | Release of Invalid Pointer or Reference vulnerability in Qualcomm products Memory corruption while reading ACPI config through the user mode app. | 7.8 |
| 2024-02-06 | CVE-2023-43535 | Improper Validation of Array Index vulnerability in Qualcomm products Memory corruption when negative display IDs are sent as input while processing DISPLAYESCAPE event trigger. | 7.8 |
| 2024-02-06 | CVE-2023-33046 | Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Qualcomm products Memory corruption in Trusted Execution Environment while deinitializing an object used for license validation. | 7.0 |
| 2024-01-02 | CVE-2023-33030 | Out-of-bounds Write vulnerability in Qualcomm products Memory corruption in HLOS while running playready use-case. | 7.8 |
| 2024-01-02 | CVE-2023-33110 | Race Condition vulnerability in Qualcomm products The session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may lead to race condition between event callback - PCM close and reset session index causing memory corruption. | 7.0 |
| 2024-01-02 | CVE-2023-43511 | Infinite Loop vulnerability in Qualcomm products Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header. | 7.5 |