Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2023-12-05	CVE-2023-33070	Improper Authentication vulnerability in Qualcomm products Transient DOS in Automotive OS due to improper authentication to the secure IO calls. local low complexity qualcomm CWE-287	5.5
2023-09-05	CVE-2022-33220	Out-of-bounds Read vulnerability in Qualcomm products Information disclosure in Automotive multimedia due to buffer over-read. local low complexity qualcomm CWE-125	5.5
2023-06-06	CVE-2022-22076	Unspecified vulnerability in Qualcomm products information disclosure due to cryptographic issue in Core during RPMB read request. local low complexity qualcomm	5.5
2023-06-06	CVE-2022-40523	Exposure of Resource to Wrong Sphere vulnerability in Qualcomm products Information disclosure in Kernel due to indirect branch misprediction. local low complexity qualcomm CWE-668	5.5
2023-06-06	CVE-2022-40533	Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Qualcomm products Transient DOS due to untrusted Pointer Dereference in core while sending USB QMI request. local low complexity qualcomm CWE-119	5.5
2023-05-02	CVE-2022-33273	Out-of-bounds Read vulnerability in Qualcomm products Information disclosure due to buffer over-read in Trusted Execution Environment while QRKS report generation. local low complexity qualcomm CWE-125	5.5
2023-04-13	CVE-2022-33270	Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Qualcomm products Transient DOS due to time-of-check time-of-use race condition in Modem while processing RRC Reconfiguration message. network high complexity qualcomm CWE-367	5.9
2023-04-13	CVE-2022-33289	Improper Validation of Array Index vulnerability in Qualcomm products Memory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card. low complexity qualcomm CWE-129	6.8
2023-03-10	CVE-2022-22075	Unspecified vulnerability in Qualcomm products Information Disclosure in Graphics during GPU context switch. local low complexity qualcomm	5.5
2023-01-09	CVE-2022-25725	Release of Invalid Pointer or Reference vulnerability in Qualcomm products Denial of service in MODEM due to improper pointer handling local low complexity qualcomm CWE-763	5.5