Vulnerabilities > Qualcomm > Snapdragon X65 5G Modem RF System Firmware > High
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-06-06 | CVE-2022-40536 | Improper Authentication vulnerability in Qualcomm products Transient DOS due to improper authentication in modem while receiving plain TLB OTA request message from network. | 7.5 |
| 2023-06-06 | CVE-2022-40538 | Reachable Assertion vulnerability in Qualcomm products Transient DOS due to reachable assertion in modem while processing sib with incorrect values from network. | 7.5 |
| 2023-06-06 | CVE-2023-21656 | Improper Input Validation vulnerability in Qualcomm products Memory corruption in WLAN HOST while receiving an WMI event from firmware. | 7.8 |
| 2023-06-06 | CVE-2023-21658 | Out-of-bounds Read vulnerability in Qualcomm products Transient DOS in WLAN Firmware while processing the received beacon or probe response frame. | 7.5 |
| 2023-06-06 | CVE-2023-21659 | Out-of-bounds Read vulnerability in Qualcomm products Transient DOS in WLAN Firmware while processing frames with missing header fields. | 7.5 |
| 2023-06-06 | CVE-2023-21661 | Out-of-bounds Read vulnerability in Qualcomm products Transient DOS while parsing WLAN beacon or probe-response frame. | 7.5 |
| 2023-06-06 | CVE-2023-21670 | Incorrect Authorization vulnerability in Qualcomm products Memory Corruption in GPU Subsystem due to arbitrary command execution from GPU in privileged mode. | 7.8 |
| 2023-05-02 | CVE-2022-40504 | Reachable Assertion vulnerability in Qualcomm products Transient DOS due to reachable assertion in Modem when UE received Downlink Data Indication message from the network. | 7.5 |
| 2023-05-02 | CVE-2022-25713 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Qualcomm products Memory corruption in Automotive due to Improper Restriction of Operations within the Bounds of a Memory Buffer while exporting a shared key. | 7.8 |
| 2023-05-02 | CVE-2022-33305 | NULL Pointer Dereference vulnerability in Qualcomm products Transient DOS due to NULL pointer dereference in Modem while sending invalid messages in DCCH. | 7.5 |