Vulnerabilities > Qualcomm > Snapdragon W5 GEN 1 Firmware
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2025-03-03 | CVE-2024-38426 | Improper Authentication vulnerability in Qualcomm products While processing the authentication message in UE, improper authentication may lead to information disclosure. | 5.3 |
| 2025-03-03 | CVE-2024-43051 | Improper Authorization vulnerability in Qualcomm products Information disclosure while deriving keys for a session for any Widevine use case. | 5.5 |
| 2024-09-02 | CVE-2024-33045 | Out-of-bounds Write vulnerability in Qualcomm products Memory corruption when BTFM client sends new messages over Slimbus to ADSP. | 7.8 |
| 2023-09-05 | CVE-2023-28564 | Out-of-bounds Write vulnerability in Qualcomm products Memory corruption in WLAN HAL while passing command parameters through WMI interfaces. | 7.8 |
| 2023-09-05 | CVE-2023-28565 | Out-of-bounds Write vulnerability in Qualcomm products Memory corruption in WLAN HAL while handling command streams through WMI interfaces. | 7.8 |
| 2023-09-05 | CVE-2023-28567 | Out-of-bounds Write vulnerability in Qualcomm products Memory corruption in WLAN HAL while handling command through WMI interfaces. | 7.8 |
| 2023-09-05 | CVE-2023-33021 | Use After Free vulnerability in Qualcomm products Memory corruption in Graphics while processing user packets for command submission. | 7.8 |
| 2023-08-08 | CVE-2023-28575 | Type Confusion vulnerability in Qualcomm products The cam_get_device_priv function does not check the type of handle being returned (device/session/link). | 7.8 |
| 2023-07-04 | CVE-2023-21624 | Unspecified vulnerability in Qualcomm products Information disclosure in DSP Services while loading dynamic module. | 5.5 |
| 2023-07-04 | CVE-2023-21629 | Double Free vulnerability in Qualcomm products Memory Corruption in Modem due to double free while parsing the PKCS15 sim files. | 6.8 |