Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2023-10-03	CVE-2023-28571	Out-of-bounds Read vulnerability in Qualcomm products Information disclosure in WLAN HOST while processing the WLAN scan descriptor list during roaming scan. local low complexity qualcomm CWE-125	5.5
2023-09-05	CVE-2023-21667	Out-of-bounds Read vulnerability in Qualcomm products Transient DOS in Bluetooth HOST while passing descriptor to validate the blacklisted BT keyboard. low complexity qualcomm CWE-125	6.5
2023-08-08	CVE-2023-21647	Improper Input Validation vulnerability in Qualcomm products Information disclosure in Bluetooth when an GATT packet is received due to improper input validation. network low complexity qualcomm CWE-20	6.5
2023-07-04	CVE-2023-21624	Unspecified vulnerability in Qualcomm products Information disclosure in DSP Services while loading dynamic module. local low complexity qualcomm	5.5
2023-07-04	CVE-2023-21629	Double Free vulnerability in Qualcomm products Memory Corruption in Modem due to double free while parsing the PKCS15 sim files. low complexity qualcomm CWE-415	6.8
2023-06-06	CVE-2022-22076	Unspecified vulnerability in Qualcomm products information disclosure due to cryptographic issue in Core during RPMB read request. local low complexity qualcomm	5.5
2023-06-06	CVE-2022-40523	Exposure of Resource to Wrong Sphere vulnerability in Qualcomm products Information disclosure in Kernel due to indirect branch misprediction. local low complexity qualcomm CWE-668	5.5
2023-06-06	CVE-2022-40533	Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Qualcomm products Transient DOS due to untrusted Pointer Dereference in core while sending USB QMI request. local low complexity qualcomm CWE-119	5.5
2023-05-02	CVE-2022-33273	Out-of-bounds Read vulnerability in Qualcomm products Information disclosure due to buffer over-read in Trusted Execution Environment while QRKS report generation. local low complexity qualcomm CWE-125	5.5
2023-04-13	CVE-2022-33270	Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Qualcomm products Transient DOS due to time-of-check time-of-use race condition in Modem while processing RRC Reconfiguration message. network high complexity qualcomm CWE-367	5.9