Critical

DATE	CVE	VULNERABILITY TITLE	RISK
2023-10-03	CVE-2023-22385	Out-of-bounds Write vulnerability in Qualcomm products Memory Corruption in Data Modem while making a MO call or MT VOLTE call. network low complexity qualcomm CWE-787 critical	9.8
2023-09-05	CVE-2023-28581	Out-of-bounds Write vulnerability in Qualcomm products Memory corruption in WLAN Firmware while parsing receieved GTK Keys in GTK KDE. network low complexity qualcomm CWE-787 critical	9.8
2023-09-05	CVE-2023-28562	Out-of-bounds Write vulnerability in Qualcomm products Memory corruption while handling payloads from remote ESL. network low complexity qualcomm CWE-787 critical	9.8
2023-08-08	CVE-2022-40510	Out-of-bounds Write vulnerability in Qualcomm products Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder. network low complexity qualcomm CWE-787 critical	9.8
2023-07-04	CVE-2023-21631	Unspecified vulnerability in Qualcomm products Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network. network low complexity qualcomm critical	9.8
2023-03-10	CVE-2022-40537	Improper Validation of Array Index vulnerability in Qualcomm products Memory corruption in Bluetooth HOST while processing the AVRC_PDU_GET_PLAYER_APP_VALUE_TEXT AVRCP response. network low complexity qualcomm CWE-129 critical	9.8
2023-03-10	CVE-2022-40515	Double Free vulnerability in Qualcomm products Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms. network low complexity qualcomm CWE-415 critical	9.8
2023-03-10	CVE-2022-33256	Improper Validation of Array Index vulnerability in Qualcomm products Memory corruption due to improper validation of array index in Multi-mode call processor. network low complexity qualcomm CWE-129 critical	9.8
2023-02-12	CVE-2022-40514	Out-of-bounds Write vulnerability in Qualcomm products Memory corruption due to buffer copy without checking the size of input in WLAN Firmware while processing CCKM IE in reassoc response frame. network low complexity qualcomm CWE-787 critical	9.8
2023-02-12	CVE-2022-25729	Out-of-bounds Write vulnerability in Qualcomm products Memory corruption in modem due to improper length check while copying into memory network low complexity qualcomm CWE-787 critical	9.8