Qualcomm Inc Snapdragon vulnerabilities

CVE-2023-33069 [HIGH] CWE-120 CVE-2023-33069: Memory corruption in Audio while processing the calibration data returned from ACDB loader. Memory corruption in Audio while processing the calibration data returned from ACDB loader.

CVE-2023-43532 [HIGH] CWE-822 CVE-2023-43532: Memory corruption while reading ACPI config through the user mode app. Memory corruption while reading ACPI config through the user mode app.

CVE-2023-43536 [HIGH] CWE-126 CVE-2023-43536: Transient DOS while parse fils IE with length equal to 1. Transient DOS while parse fils IE with length equal to 1.

CVE-2023-33065 [HIGH] CWE-126 CVE-2023-33065: Information disclosure in Audio while accessing AVCS services from ADSP payload. Information disclosure in Audio while accessing AVCS services from ADSP payload.

CVE-2023-33046 [HIGH] CWE-367 CVE-2023-33046: Memory corruption in Trusted Execution Environment while deinitializing an object used for license v Memory corruption in Trusted Execution Environment while deinitializing an object used for license validation.

CVE-2023-33064 [MEDIUM] CWE-126 CVE-2023-33064: Transient DOS in Audio when invoking callback function of ASM driver. Transient DOS in Audio when invoking callback function of ASM driver.

CVE-2023-33060 [MEDIUM] CWE-126 CVE-2023-33060: Transient DOS in Core when DDR memory check is called while DDR is not initialized. Transient DOS in Core when DDR memory check is called while DDR is not initialized.

CVE-2023-33025 [CRITICAL] CWE-120 CVE-2023-33025: Memory corruption in Data Modem when a non-standard SDP body, during a VOLTE call. Memory corruption in Data Modem when a non-standard SDP body, during a VOLTE call.

CVE-2023-43514 [HIGH] CWE-416 CVE-2023-43514: Memory corruption while invoking IOCTLs calls from user space for internal mem MAP and internal mem Memory corruption while invoking IOCTLs calls from user space for internal mem MAP and internal mem UNMAP.

CVE-2023-33030 [HIGH] CWE-120 CVE-2023-33030: Memory corruption in HLOS while running playready use-case. Memory corruption in HLOS while running playready use-case.

CVE-2023-33085 [HIGH] CWE-120 CVE-2023-33085: Memory corruption in wearables while processing data from AON. Memory corruption in wearables while processing data from AON.

CVE-2023-33114 [HIGH] CWE-416 CVE-2023-33114: Memory corruption while running NPU, when NETWORK_UNLOAD and (NETWORK_UNLOAD or NETWORK_EXECUTE_V2) Memory corruption while running NPU, when NETWORK_UNLOAD and (NETWORK_UNLOAD or NETWORK_EXECUTE_V2) commands are submitted at the same time.

CVE-2023-33120 [HIGH] CWE-416 CVE-2023-33120: Memory corruption in Audio when memory map command is executed consecutively in ADSP. Memory corruption in Audio when memory map command is executed consecutively in ADSP.

CVE-2023-33040 [HIGH] CWE-126 CVE-2023-33040: Transient DOS in Data Modem during DTLS handshake. Transient DOS in Data Modem during DTLS handshake.

CVE-2023-33110 [HIGH] CWE-823 CVE-2023-33110: The session index variable in PCM host voice audio driver initialized before PCM open, accessed duri The session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may lead to race condition between event callback - PCM close and reset session index causing memory corruption.

CVE-2023-43511 [HIGH] CWE-835 CVE-2023-43511: Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that co Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header.

CVE-2023-33094 [HIGH] CWE-416 CVE-2023-33094: Memory corruption while running VK synchronization with KASAN enabled. Memory corruption while running VK synchronization with KASAN enabled.

CVE-2023-33108 [HIGH] CWE-416 CVE-2023-33108: Memory corruption in Graphics Driver when destroying a context with KGSL_GPU_AUX_COMMAND_TIMELINE ob Memory corruption in Graphics Driver when destroying a context with KGSL_GPU_AUX_COMMAND_TIMELINE objects queued.

CVE-2023-33062 [HIGH] CWE-126 CVE-2023-33062: Transient DOS in WLAN Firmware while parsing a BTM request. Transient DOS in WLAN Firmware while parsing a BTM request.

CVE-2023-33118 [HIGH] CWE-416 CVE-2023-33118: Memory corruption while processing Listen Sound Model client payload buffer when there is a request Memory corruption while processing Listen Sound Model client payload buffer when there is a request for Listen Sound session get parameter from ST HAL.