Snapdragon XR1 Platform Firmware

DATE	CVE	VULNERABILITY TITLE	RISK
2023-12-05	CVE-2023-33022	Integer Overflow or Wraparound vulnerability in Qualcomm products Memory corruption in HLOS while invoking IOCTL calls from user-space. local low complexity qualcomm CWE-190	7.8
2023-12-05	CVE-2023-33063	Use After Free vulnerability in Qualcomm products Memory corruption in DSP Services during a remote call from HLOS to DSP. local low complexity qualcomm CWE-416	7.8
2023-12-05	CVE-2023-33080	Out-of-bounds Read vulnerability in Qualcomm products Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame. network low complexity qualcomm CWE-125	7.5
2023-12-05	CVE-2023-33088	NULL Pointer Dereference vulnerability in Qualcomm products Memory corruption when processing cmd parameters while parsing vdev. local low complexity qualcomm CWE-476	7.8
2023-12-05	CVE-2023-33107	Integer Overflow or Wraparound vulnerability in Qualcomm products Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call. local low complexity qualcomm CWE-190	7.8
2023-11-07	CVE-2023-22388	Out-of-bounds Write vulnerability in Qualcomm products Memory Corruption in Multi-mode Call Processor while processing bit mask API. network low complexity qualcomm CWE-787 critical	9.8
2023-11-07	CVE-2023-28556	Unspecified vulnerability in Qualcomm products Cryptographic issue in HLOS during key management. local low complexity qualcomm	7.8
2023-11-07	CVE-2023-28563	Unspecified vulnerability in Qualcomm products Information disclosure in IOE Firmware while handling WMI command. local low complexity qualcomm	5.5
2023-11-07	CVE-2023-28566	Unspecified vulnerability in Qualcomm products Information disclosure in WLAN HAL while handling the WMI state info command. local low complexity qualcomm	5.5
2023-11-07	CVE-2023-28568	Unspecified vulnerability in Qualcomm products Information disclosure in WLAN HAL when reception status handler is called. local low complexity qualcomm	5.5