Vulnerabilities > Qualcomm > Snapdragon Auto 5G Modem RF GEN 2 Firmware > High

DATE CVE VULNERABILITY TITLE RISK
2024-07-01 CVE-2024-21465 Out-of-bounds Read vulnerability in Qualcomm products
Memory corruption while processing key blob passed by the user.
local
low complexity
qualcomm CWE-125
7.8
2024-07-01 CVE-2024-21469 Out-of-bounds Write vulnerability in Qualcomm products
Memory corruption when an invoke call and a TEE call are bound for the same trusted application.
local
low complexity
qualcomm CWE-787
7.8
2024-05-06 CVE-2023-33119 Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Qualcomm products
Memory corruption while loading a VM from a signed VM image that is not coherent in the processor cache.
local
high complexity
qualcomm CWE-367
7.0
2024-05-06 CVE-2023-43521 Use After Free vulnerability in Qualcomm products
Memory corruption when multiple listeners are being registered with the same file descriptor.
local
low complexity
qualcomm CWE-416
7.8
2024-05-06 CVE-2023-43524 Classic Buffer Overflow vulnerability in Qualcomm products
Memory corruption when the bandpass filter order received from AHAL is not within the expected range.
local
low complexity
qualcomm CWE-120
7.8
2024-05-06 CVE-2023-43525 Classic Buffer Overflow vulnerability in Qualcomm products
Memory corruption while copying the sound model data from user to kernel buffer during sound model register.
local
low complexity
qualcomm CWE-120
7.8
2024-05-06 CVE-2023-43530 Integer Overflow or Wraparound vulnerability in Qualcomm products
Memory corruption in HLOS while checking for the storage type.
local
low complexity
qualcomm CWE-190
7.8
2024-05-06 CVE-2023-43531 Access of Uninitialized Pointer vulnerability in Qualcomm products
Memory corruption while verifying the serialized header when the key pairs are generated.
local
low complexity
qualcomm CWE-824
7.8
2024-04-01 CVE-2023-28547 Out-of-bounds Write vulnerability in Qualcomm products
Memory corruption in SPS Application while requesting for public key in sorter TA.
local
low complexity
qualcomm CWE-787
7.8
2024-04-01 CVE-2023-33023 Classic Buffer Overflow vulnerability in Qualcomm products
Memory corruption while processing finish_sign command to pass a rsp buffer.
local
low complexity
qualcomm CWE-120
7.8