Vulnerabilities > Qualcomm > Wcd9370 Firmware > High

DATE CVE VULNERABILITY TITLE RISK
2024-11-04 CVE-2024-38424 Use After Free vulnerability in Qualcomm products
Memory corruption during GNSS HAL process initialization.
local
low complexity
qualcomm CWE-416
7.8
2024-10-07 CVE-2024-21455 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Qualcomm products
Memory corruption when a compat IOCTL call is followed by another IOCTL call from userspace to a driver.
local
low complexity
qualcomm CWE-119
7.8
2024-10-07 CVE-2024-23369 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Qualcomm products
Memory corruption when invalid length is provided from HLOS for FRS/UDS request/response buffers.
local
low complexity
qualcomm CWE-119
7.8
2024-10-07 CVE-2024-33049 Out-of-bounds Read vulnerability in Qualcomm products
Transient DOS while parsing noninheritance IE of Extension element when length of IE is 2 of beacon frame.
network
low complexity
qualcomm CWE-125
7.5
2024-10-07 CVE-2024-33065 Unspecified vulnerability in Qualcomm products
Memory corruption while taking snapshot when an offset variable is set by camera driver.
local
low complexity
qualcomm
7.8
2024-10-07 CVE-2024-33073 Out-of-bounds Read vulnerability in Qualcomm products
Information disclosure while parsing the BSS parameter change count or MLD capabilities fields of the ML IE.
network
low complexity
qualcomm CWE-125
8.2
2024-10-07 CVE-2024-38397 Out-of-bounds Read vulnerability in Qualcomm products
Transient DOS while parsing probe response and assoc response frame.
network
low complexity
qualcomm CWE-125
7.5
2024-10-07 CVE-2024-38399 Use After Free vulnerability in Qualcomm products
Memory corruption while processing user packets to generate page faults.
local
low complexity
qualcomm CWE-416
7.8
2024-10-07 CVE-2024-43047 Use After Free vulnerability in Qualcomm products
Memory corruption while maintaining memory maps of HLOS memory.
local
low complexity
qualcomm CWE-416
7.8
2024-09-02 CVE-2024-33038 Out-of-bounds Write vulnerability in Qualcomm products
Memory corruption while passing untrusted/corrupted pointers from DSP to EVA.
local
low complexity
qualcomm CWE-787
7.8