High

DATE	CVE	VULNERABILITY TITLE	RISK
2023-12-05	CVE-2023-33080	Out-of-bounds Read vulnerability in Qualcomm products Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame. network low complexity qualcomm CWE-125	7.5
2023-12-05	CVE-2023-33092	Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Qualcomm products Memory corruption while processing pin reply in Bluetooth, when pin code received from APP layer is greater than expected size. local low complexity qualcomm CWE-119	7.8
2023-12-05	CVE-2023-33106	Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Qualcomm products Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND. local low complexity qualcomm CWE-119	7.8
2023-12-05	CVE-2023-33107	Integer Overflow or Wraparound vulnerability in Qualcomm products Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call. local low complexity qualcomm CWE-190	7.8
2023-11-07	CVE-2023-28570	Out-of-bounds Write vulnerability in Qualcomm products Memory corruption while processing audio effects. local low complexity qualcomm CWE-787	7.8
2023-11-07	CVE-2023-33031	Out-of-bounds Write vulnerability in Qualcomm products Memory corruption in Automotive Audio while copying data from ADSP shared buffer to the VOC packet data buffer. local low complexity qualcomm CWE-787	7.8
2023-11-07	CVE-2023-33055	Out-of-bounds Write vulnerability in Qualcomm products Memory Corruption in Audio while invoking callback function in driver from ADSP. local low complexity qualcomm CWE-787	7.8
2023-11-07	CVE-2023-33059	Out-of-bounds Write vulnerability in Qualcomm products Memory corruption in Audio while processing the VOC packet data from ADSP. local low complexity qualcomm CWE-787	7.8
2023-10-03	CVE-2023-24848	Unspecified vulnerability in Qualcomm products Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value. network low complexity qualcomm	7.5
2023-10-03	CVE-2023-24849	Unspecified vulnerability in Qualcomm products Information Disclosure in data Modem while parsing an FMTP line in an SDP message. network low complexity qualcomm	7.5