Vulnerabilities > Qualcomm > Snapdragon XR2 5G Platform Firmware

DATE CVE VULNERABILITY TITLE RISK
2023-10-03 CVE-2023-21673 Unspecified vulnerability in Qualcomm products
Improper Access to the VM resource manager can lead to Memory Corruption.
local
low complexity
qualcomm
7.8
2023-10-03 CVE-2023-22385 Out-of-bounds Write vulnerability in Qualcomm products
Memory Corruption in Data Modem while making a MO call or MT VOLTE call.
network
low complexity
qualcomm CWE-787
critical
9.8
2023-10-03 CVE-2023-24843 Reachable Assertion vulnerability in Qualcomm products
Transient DOS in Modem while triggering a camping on an 5G cell.
network
low complexity
qualcomm CWE-617
7.5
2023-10-03 CVE-2023-24847 NULL Pointer Dereference vulnerability in Qualcomm products
Transient DOS in Modem while allocating DSM items.
network
low complexity
qualcomm CWE-476
7.5
2023-10-03 CVE-2023-24848 Unspecified vulnerability in Qualcomm products
Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value.
network
low complexity
qualcomm
7.5
2023-10-03 CVE-2023-24849 Unspecified vulnerability in Qualcomm products
Information Disclosure in data Modem while parsing an FMTP line in an SDP message.
network
low complexity
qualcomm
7.5
2023-10-03 CVE-2023-24850 Improper Validation of Array Index vulnerability in Qualcomm products
Memory Corruption in HLOS while importing a cryptographic key into KeyMaster Trusted Application.
local
low complexity
qualcomm CWE-129
7.8
2023-10-03 CVE-2023-24853 Out-of-bounds Write vulnerability in Qualcomm products
Memory Corruption in HLOS while registering for key provisioning notify.
local
low complexity
qualcomm CWE-787
7.8
2023-10-03 CVE-2023-28539 Classic Buffer Overflow vulnerability in Qualcomm products
Memory corruption in WLAN Host when the firmware invokes multiple WMI Service Available command.
local
low complexity
qualcomm CWE-120
7.8
2023-10-03 CVE-2023-28540 Improper Authentication vulnerability in Qualcomm products
Cryptographic issue in Data Modem due to improper authentication during TLS handshake.
network
low complexity
qualcomm CWE-287
7.5