Vulnerabilities > Qualcomm > Wcn3990 Firmware > High
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-01-09 | CVE-2022-40517 | Out-of-bounds Write vulnerability in Qualcomm products Memory corruption in core due to stack-based buffer overflow | 7.8 |
| 2023-01-09 | CVE-2022-40520 | Out-of-bounds Write vulnerability in Qualcomm products Memory corruption due to stack-based buffer overflow in Core | 7.8 |
| 2022-12-15 | CVE-2022-22063 | Out-of-bounds Write vulnerability in Qualcomm products Memory corruption in Core due to improper configuration in boot remapper. | 7.8 |
| 2022-12-13 | CVE-2022-25677 | Use After Free vulnerability in Qualcomm products Memory corruption in diag due to use after free while processing dci packet in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking | 7.8 |
| 2022-12-13 | CVE-2022-25681 | Unspecified vulnerability in Qualcomm products Possible memory corruption in kernel while performing memory access due to hypervisor not correctly invalidated the processor translation caches in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile | 7.8 |
| 2022-12-13 | CVE-2022-25682 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Qualcomm products Memory corruption in MODEM UIM due to usage of out of range pointer offset while decoding command from card in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables | 7.8 |
| 2022-12-13 | CVE-2022-25685 | Unspecified vulnerability in Qualcomm products Denial of service in Modem module due to improper authorization while error handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables | 7.5 |
| 2022-12-13 | CVE-2022-25695 | Improper Validation of Array Index vulnerability in Qualcomm products Memory corruption in MODEM due to Improper Validation of Array Index while processing GSTK Proactive commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables | 7.8 |
| 2022-12-13 | CVE-2022-25712 | Classic Buffer Overflow vulnerability in Qualcomm products Memory corruption in camera due to buffer copy without checking size of input in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Wearables | 7.8 |
| 2022-12-13 | CVE-2022-33235 | Out-of-bounds Read vulnerability in Qualcomm products Information disclosure due to buffer over-read in WLAN firmware while parsing security context info attributes. | 7.5 |