Vulnerabilities > Qualcomm > Snapdragon X70 Modem RF System Firmware
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2024-12-02 | CVE-2024-33056 | Out-of-bounds Read vulnerability in Qualcomm products Memory corruption when allocating and accessing an entry in an SMEM partition continuously. | 7.8 |
2024-11-04 | CVE-2024-23385 | Reachable Assertion vulnerability in Qualcomm products Transient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at UE. | 6.5 |
2024-07-01 | CVE-2024-21462 | Out-of-bounds Read vulnerability in Qualcomm products Transient DOS while loading the TA ELF file. | 5.5 |
2024-07-01 | CVE-2024-21465 | Out-of-bounds Read vulnerability in Qualcomm products Memory corruption while processing key blob passed by the user. | 7.8 |
2024-07-01 | CVE-2024-21469 | Out-of-bounds Write vulnerability in Qualcomm products Memory corruption when an invoke call and a TEE call are bound for the same trusted application. | 7.8 |
2024-03-04 | CVE-2023-28578 | Out-of-bounds Write vulnerability in Qualcomm products Memory corruption in Core Services while executing the command for removing a single event listener. | 7.8 |
2024-02-06 | CVE-2023-33072 | Classic Buffer Overflow vulnerability in Qualcomm products Memory corruption in Core while processing control functions. | 7.8 |
2024-02-06 | CVE-2023-33076 | Out-of-bounds Write vulnerability in Qualcomm products Memory corruption in Core when updating rollback version for TA and OTA feature is enabled. | 7.8 |
2024-02-06 | CVE-2023-33046 | Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Qualcomm products Memory corruption in Trusted Execution Environment while deinitializing an object used for license validation. | 7.0 |
2024-02-06 | CVE-2023-33058 | Out-of-bounds Read vulnerability in Qualcomm products Information disclosure in Modem while processing SIB5. | 9.1 |