Vulnerabilities > Qualcomm > Snapdragon X65 5G Modem RF Firmware > High
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2025-02-03 | CVE-2024-38420 | Out-of-bounds Write vulnerability in Qualcomm products Memory corruption while configuring a Hypervisor based input virtual device. | 7.8 |
2025-02-03 | CVE-2024-45571 | Use After Free vulnerability in Qualcomm products Memory corruption may occour occur when stopping the WLAN interface after processing a WMI command from the interface. | 7.8 |
2025-02-03 | CVE-2024-49838 | Out-of-bounds Read vulnerability in Qualcomm products Information disclosure while parsing the OCI IE with invalid length. | 7.5 |
2025-01-06 | CVE-2024-45558 | Out-of-bounds Read vulnerability in Qualcomm products Transient DOS can occur when the driver parses the per STA profile IE and tries to access the EXTN element ID without checking the IE length. | 7.5 |
2024-09-02 | CVE-2024-38402 | Use After Free vulnerability in Qualcomm products Memory corruption while processing IOCTL call for getting group info. | 7.8 |
2024-06-03 | CVE-2023-43537 | Out-of-bounds Read vulnerability in Qualcomm products Information disclosure while handling T2LM Action Frame in WLAN Host. | 7.5 |
2024-06-03 | CVE-2023-43538 | Classic Buffer Overflow vulnerability in Qualcomm products Memory corruption in TZ Secure OS while Tunnel Invoke Manager initialization. | 7.8 |
2024-06-03 | CVE-2023-43551 | Improper Authentication vulnerability in Qualcomm products Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command. | 7.5 |
2024-06-03 | CVE-2023-43556 | Classic Buffer Overflow vulnerability in Qualcomm products Memory corruption in Hypervisor when platform information mentioned is not aligned. | 8.8 |
2024-05-06 | CVE-2023-33119 | Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Qualcomm products Memory corruption while loading a VM from a signed VM image that is not coherent in the processor cache. | 7.0 |