Vulnerabilities > Qualcomm > Snapdragon X70 Modem RF System Firmware
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-02-06 | CVE-2023-33072 | Classic Buffer Overflow vulnerability in Qualcomm products Memory corruption in Core while processing control functions. | 7.8 |
| 2024-02-06 | CVE-2023-33076 | Out-of-bounds Write vulnerability in Qualcomm products Memory corruption in Core when updating rollback version for TA and OTA feature is enabled. | 7.8 |
| 2024-02-06 | CVE-2023-33046 | Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Qualcomm products Memory corruption in Trusted Execution Environment while deinitializing an object used for license validation. | 7.0 |
| 2024-02-06 | CVE-2023-33049 | Memory Leak vulnerability in Qualcomm products Transient DOS in Multi-Mode Call Processor due to UE failure because of heap leakage. | 7.5 |
| 2024-02-06 | CVE-2023-33057 | Improper Input Validation vulnerability in Qualcomm products Transient DOS in Multi-Mode Call Processor while processing UE policy container. | 7.5 |
| 2024-02-06 | CVE-2023-33058 | Out-of-bounds Read vulnerability in Qualcomm products Information disclosure in Modem while processing SIB5. | 9.1 |
| 2024-02-06 | CVE-2023-33060 | Out-of-bounds Read vulnerability in Qualcomm products Transient DOS in Core when DDR memory check is called while DDR is not initialized. | 5.5 |
| 2024-01-02 | CVE-2023-33014 | Improper Input Validation vulnerability in Qualcomm products Information disclosure in Core services while processing a Diag command. | 6.8 |
| 2024-01-02 | CVE-2023-33025 | Classic Buffer Overflow vulnerability in Qualcomm products Memory corruption in Data Modem when a non-standard SDP body, during a VOLTE call. | 9.8 |
| 2024-01-02 | CVE-2023-33030 | Out-of-bounds Write vulnerability in Qualcomm products Memory corruption in HLOS while running playready use-case. | 7.8 |