Vulnerabilities > Qualcomm > Wcd9370 Firmware > High
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-02-06 | CVE-2023-33076 | Out-of-bounds Write vulnerability in Qualcomm products Memory corruption in Core when updating rollback version for TA and OTA feature is enabled. | 7.8 |
| 2024-02-06 | CVE-2023-33077 | Classic Buffer Overflow vulnerability in Qualcomm products Memory corruption in HLOS while converting from authorization token to HIDL vector. | 7.8 |
| 2024-02-06 | CVE-2023-33065 | Out-of-bounds Read vulnerability in Qualcomm products Information disclosure in Audio while accessing AVCS services from ADSP payload. | 7.1 |
| 2024-01-02 | CVE-2023-33030 | Out-of-bounds Write vulnerability in Qualcomm products Memory corruption in HLOS while running playready use-case. | 7.8 |
| 2024-01-02 | CVE-2023-33032 | Out-of-bounds Write vulnerability in Qualcomm products Memory corruption in TZ Secure OS while requesting a memory allocation from TA region. | 7.8 |
| 2024-01-02 | CVE-2023-33033 | Out-of-bounds Write vulnerability in Qualcomm products Memory corruption in Audio during playback with speaker protection. | 7.8 |
| 2024-01-02 | CVE-2023-33038 | Out-of-bounds Write vulnerability in Qualcomm products Memory corruption while receiving a message in Bus Socket Transport Server. | 7.8 |
| 2024-01-02 | CVE-2023-33094 | Use After Free vulnerability in Qualcomm products Memory corruption while running VK synchronization with KASAN enabled. | 7.8 |
| 2024-01-02 | CVE-2023-33110 | Race Condition vulnerability in Qualcomm products The session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may lead to race condition between event callback - PCM close and reset session index causing memory corruption. | 7.0 |
| 2024-01-02 | CVE-2023-33113 | Out-of-bounds Write vulnerability in Qualcomm products Memory corruption when resource manager sends the host kernel a reply message with multiple fragments. | 7.8 |