Vulnerabilities > Qualcomm > Snapdragon X55 5G Modem RF System Firmware

DATE CVE VULNERABILITY TITLE RISK
2024-08-05 CVE-2024-21467 Out-of-bounds Read vulnerability in Qualcomm products
Information disclosure while handling beacon probe frame during scan entry generation in client side.
network
low complexity
qualcomm CWE-125
7.5
2024-08-05 CVE-2024-23355 Out-of-bounds Write vulnerability in Qualcomm products
Memory corruption when keymaster operation imports a shared key.
local
low complexity
qualcomm CWE-787
7.8
2024-08-05 CVE-2024-23357 NULL Pointer Dereference vulnerability in Qualcomm products
Transient DOS while importing a PKCS#8-encoded RSA key with zero bytes modulus.
local
low complexity
qualcomm CWE-476
5.5
2024-08-05 CVE-2024-33027 Unspecified vulnerability in Qualcomm products
Memory corruption can occur when arbitrary user-space app gains kernel level privilege to modify DDR memory by corrupting the GPU page table.
local
low complexity
qualcomm
7.8
2024-07-01 CVE-2024-21461 Double Free vulnerability in Qualcomm products
Memory corruption while performing finish HMAC operation when context is freed by keymaster.
local
low complexity
qualcomm CWE-415
7.8
2024-07-01 CVE-2024-21462 Out-of-bounds Read vulnerability in Qualcomm products
Transient DOS while loading the TA ELF file.
local
low complexity
qualcomm CWE-125
5.5
2024-07-01 CVE-2024-21465 Out-of-bounds Read vulnerability in Qualcomm products
Memory corruption while processing key blob passed by the user.
local
low complexity
qualcomm CWE-125
7.8
2024-07-01 CVE-2024-21469 Out-of-bounds Write vulnerability in Qualcomm products
Memory corruption when an invoke call and a TEE call are bound for the same trusted application.
local
low complexity
qualcomm CWE-787
7.8
2024-07-01 CVE-2024-23373 Use After Free vulnerability in Qualcomm products
Memory corruption when IOMMU unmap operation fails, the DMA and anon buffers are getting released.
local
low complexity
qualcomm CWE-416
7.8
2024-03-04 CVE-2023-28578 Out-of-bounds Write vulnerability in Qualcomm products
Memory corruption in Core Services while executing the command for removing a single event listener.
local
low complexity
qualcomm CWE-787
7.8