High

DATE	CVE	VULNERABILITY TITLE	RISK
2024-01-02	CVE-2023-43511	Infinite Loop vulnerability in Qualcomm products Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header. network low complexity qualcomm CWE-835	7.5
2023-12-05	CVE-2023-28546	Classic Buffer Overflow vulnerability in Qualcomm products Memory Corruption in SPS Application while exporting public key in sorter TA. local low complexity qualcomm CWE-120	7.8
2023-12-05	CVE-2023-28550	Out-of-bounds Write vulnerability in Qualcomm products Memory corruption in MPP performance while accessing DSM watermark using external memory address. local low complexity qualcomm CWE-787	7.8
2023-12-05	CVE-2023-28551	Out-of-bounds Write vulnerability in Qualcomm products Memory corruption in UTILS when modem processes memory specific Diag commands having arbitrary address values as input arguments. local low complexity qualcomm CWE-787	7.8
2023-12-05	CVE-2023-28585	Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Qualcomm products Memory corruption while loading an ELF segment in TEE Kernel. local low complexity qualcomm CWE-119	8.8
2023-12-05	CVE-2023-28587	Out-of-bounds Write vulnerability in Qualcomm products Memory corruption in BT controller while parsing debug commands with specific sub-opcodes at HCI interface level. local low complexity qualcomm CWE-787	7.8
2023-12-05	CVE-2023-33017	Classic Buffer Overflow vulnerability in Qualcomm products Memory corruption in Boot while running a ListVars test in UEFI Menu during boot. local low complexity qualcomm CWE-120	7.8
2023-12-05	CVE-2023-33018	Integer Overflow or Wraparound vulnerability in Qualcomm products Memory corruption while using the UIM diag command to get the operators name. local low complexity qualcomm CWE-190	7.8
2023-12-05	CVE-2023-33022	Integer Overflow or Wraparound vulnerability in Qualcomm products Memory corruption in HLOS while invoking IOCTL calls from user-space. local low complexity qualcomm CWE-190	7.8
2023-12-05	CVE-2023-33042	Improper Input Validation vulnerability in Qualcomm products Transient DOS in Modem after RRC Setup message is received. network low complexity qualcomm CWE-20	7.5