Vulnerabilities > Qualcomm > Sxr2250P Firmware

DATE CVE VULNERABILITY TITLE RISK
2024-07-01 CVE-2024-23372 Integer Overflow or Wraparound vulnerability in Qualcomm products
Memory corruption while invoking IOCTL call for GPU memory allocation and size param is greater than expected size.
local
low complexity
qualcomm CWE-190
7.8
2024-07-01 CVE-2024-23373 Use After Free vulnerability in Qualcomm products
Memory corruption when IOMMU unmap operation fails, the DMA and anon buffers are getting released.
local
low complexity
qualcomm CWE-416
7.8
2024-07-01 CVE-2024-23380 Use After Free vulnerability in Qualcomm products
Memory corruption while handling user packets during VBO bind operation.
local
low complexity
qualcomm CWE-416
7.8
2024-05-06 CVE-2023-33119 Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Qualcomm products
Memory corruption while loading a VM from a signed VM image that is not coherent in the processor cache.
local
high complexity
qualcomm CWE-367
7.0
2024-05-06 CVE-2024-21471 Use After Free vulnerability in Qualcomm products
Memory corruption when IOMMU unmap of a GPU buffer fails in Linux.
local
low complexity
qualcomm CWE-416
7.8
2024-05-06 CVE-2024-21480 Classic Buffer Overflow vulnerability in Qualcomm products
Memory corruption while playing audio file having large-sized input buffer.
network
low complexity
qualcomm CWE-120
critical
9.8
2024-05-06 CVE-2024-23351 Unspecified vulnerability in Qualcomm products
Memory corruption as GPU registers beyond the last protected range can be accessed through LPAC submissions.
local
low complexity
qualcomm
7.8
2024-05-06 CVE-2024-23354 Use After Free vulnerability in Qualcomm products
Memory corruption when the IOCTL call is interrupted by a signal.
local
low complexity
qualcomm CWE-416
7.8
2024-04-01 CVE-2023-28547 Out-of-bounds Write vulnerability in Qualcomm products
Memory corruption in SPS Application while requesting for public key in sorter TA.
local
low complexity
qualcomm CWE-787
7.8
2024-04-01 CVE-2023-33023 Classic Buffer Overflow vulnerability in Qualcomm products
Memory corruption while processing finish_sign command to pass a rsp buffer.
local
low complexity
qualcomm CWE-120
7.8