Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2024-11-04	CVE-2024-23385	Reachable Assertion vulnerability in Qualcomm products Transient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at UE. network low complexity qualcomm CWE-617	6.5
2023-12-05	CVE-2023-28586	Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Qualcomm products Information disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE. local low complexity qualcomm CWE-119	6.5
2023-12-05	CVE-2023-33070	Improper Authentication vulnerability in Qualcomm products Transient DOS in Automotive OS due to improper authentication to the secure IO calls. local low complexity qualcomm CWE-287	5.5
2023-07-04	CVE-2023-21629	Double Free vulnerability in Qualcomm products Memory Corruption in Modem due to double free while parsing the PKCS15 sim files. low complexity qualcomm CWE-415	6.8
2023-06-06	CVE-2022-22076	Unspecified vulnerability in Qualcomm products information disclosure due to cryptographic issue in Core during RPMB read request. local low complexity qualcomm	5.5
2023-04-13	CVE-2022-33289	Improper Validation of Array Index vulnerability in Qualcomm products Memory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card. low complexity qualcomm CWE-129	6.8
2023-03-10	CVE-2022-22075	Unspecified vulnerability in Qualcomm products Information Disclosure in Graphics during GPU context switch. local low complexity qualcomm	5.5
2023-01-09	CVE-2022-22079	Out-of-bounds Read vulnerability in Qualcomm products Denial of service while processing fastboot flash command on mmc due to buffer over read low complexity qualcomm CWE-125	4.6
2023-01-09	CVE-2022-33255	Out-of-bounds Read vulnerability in Qualcomm products Information disclosure due to buffer over-read in Bluetooth HOST while processing GetFolderItems and GetItemAttribute Cmds from peer device. low complexity qualcomm CWE-125	6.5
2023-01-09	CVE-2022-33285	Out-of-bounds Read vulnerability in Qualcomm products Transient DOS due to buffer over-read in WLAN while parsing WLAN CSA action frames. low complexity qualcomm CWE-125	6.5