Vulnerabilities > Qualcomm > Snapdragon X75 5G Modem RF Firmware

DATE CVE VULNERABILITY TITLE RISK
2024-05-06 CVE-2023-43525 Classic Buffer Overflow vulnerability in Qualcomm products
Memory corruption while copying the sound model data from user to kernel buffer during sound model register.
local
low complexity
qualcomm CWE-120
7.8
2024-05-06 CVE-2023-43526 Classic Buffer Overflow vulnerability in Qualcomm products
Memory corruption while querying module parameters from Listen Sound model client in kernel from user space.
local
low complexity
qualcomm CWE-120
7.8
2024-05-06 CVE-2023-43528 Out-of-bounds Read vulnerability in Qualcomm products
Information disclosure when the ADSP payload size received in HLOS in response to Audio Stream Manager matrix session is less than this expected size.
local
low complexity
qualcomm CWE-125
5.5
2024-05-06 CVE-2023-43530 Integer Overflow or Wraparound vulnerability in Qualcomm products
Memory corruption in HLOS while checking for the storage type.
local
low complexity
qualcomm CWE-190
7.8
2024-05-06 CVE-2023-43531 Access of Uninitialized Pointer vulnerability in Qualcomm products
Memory corruption while verifying the serialized header when the key pairs are generated.
local
low complexity
qualcomm CWE-824
7.8
2024-05-06 CVE-2024-21480 Classic Buffer Overflow vulnerability in Qualcomm products
Memory corruption while playing audio file having large-sized input buffer.
network
low complexity
qualcomm CWE-120
critical
9.8
2024-04-01 CVE-2023-28547 Out-of-bounds Write vulnerability in Qualcomm products
Memory corruption in SPS Application while requesting for public key in sorter TA.
local
low complexity
qualcomm CWE-787
7.8
2024-04-01 CVE-2023-33023 Classic Buffer Overflow vulnerability in Qualcomm products
Memory corruption while processing finish_sign command to pass a rsp buffer.
local
low complexity
qualcomm CWE-120
7.8
2024-04-01 CVE-2024-21463 Classic Buffer Overflow vulnerability in Qualcomm products
Memory corruption while processing Codec2 during v13k decoder pitch synthesis.
network
low complexity
qualcomm CWE-120
critical
9.8
2024-03-04 CVE-2023-33066 Out-of-bounds Write vulnerability in Qualcomm products
Memory corruption in Audio while processing RT proxy port register driver.
local
low complexity
qualcomm CWE-787
7.8