Vulnerabilities > Qualcomm > Wcd9306 Firmware > High
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-04-13 | CVE-2022-25726 | Out-of-bounds Read vulnerability in Qualcomm products Information disclosure in modem data due to array out of bound access while handling the incoming DNS response packet | 7.5 |
| 2023-04-13 | CVE-2022-25730 | Out-of-bounds Read vulnerability in Qualcomm products Information disclosure in modem due to improper check of IP type while processing DNS server query | 7.5 |
| 2023-04-13 | CVE-2022-25731 | Out-of-bounds Read vulnerability in Qualcomm products Information disclosure in modem due to buffer over-read while processing packets from DNS server | 7.5 |
| 2023-04-13 | CVE-2022-25737 | Use of Uninitialized Resource vulnerability in Qualcomm products Information disclosure in modem due to missing NULL check while reading packets received from local network | 7.5 |
| 2023-04-13 | CVE-2022-25739 | NULL Pointer Dereference vulnerability in Qualcomm products Denial of service in modem due to missing null check while processing the ipv6 packet received during ECM call | 7.5 |
| 2023-04-13 | CVE-2022-25747 | Out-of-bounds Read vulnerability in Qualcomm products Information disclosure in modem due to improper input validation during parsing of upcoming CoAP message | 7.5 |
| 2023-04-13 | CVE-2022-33222 | Out-of-bounds Read vulnerability in Qualcomm products Information disclosure due to buffer over-read while parsing DNS response packets in Modem. | 7.5 |
| 2023-04-13 | CVE-2022-33223 | NULL Pointer Dereference vulnerability in Qualcomm products Transient DOS in Modem due to null pointer dereference while processing the incoming packet with http chunked encoding. | 7.5 |
| 2023-04-13 | CVE-2022-33228 | Out-of-bounds Read vulnerability in Qualcomm products Information disclosure sue to buffer over-read in modem while processing ipv6 packet with hop-by-hop or destination option in header. | 7.5 |
| 2023-04-13 | CVE-2022-33231 | Double Free vulnerability in Qualcomm products Memory corruption due to double free in core while initializing the encryption key. | 7.8 |