Qualcomm Inc Snapdragon vulnerabilities

908 known vulnerabilities affecting qualcomm_inc/snapdragon.

Total CVEs
908
CISA KEV
8
actively exploited
Public exploits
0
Exploited in wild
4
Severity breakdown
CRITICAL51HIGH715MEDIUM142

Vulnerabilities

Page 32 of 46
CVE-2023-33089HIGHCVSS 7.5v315 5G IoT ModemvAQT1000+226 more2023-12-05
CVE-2023-33089 [HIGH] CWE-476 CVE-2023-33089: Transient DOS when processing a NULL buffer while parsing WLAN vdev. Transient DOS when processing a NULL buffer while parsing WLAN vdev.
nvd
CVE-2023-28588HIGHCVSS 7.5vAPQ8017vAPQ8064AU+212 more2023-12-05
CVE-2023-28588 [HIGH] CWE-190 CVE-2023-28588: Transient DOS in Bluetooth Host while rfc slot allocation. Transient DOS in Bluetooth Host while rfc slot allocation.
nvd
CVE-2023-28551HIGHCVSS 7.8v315 5G IoT Modemv9205 LTE Modem+246 more2023-12-05
CVE-2023-28551 [HIGH] CWE-119 CVE-2023-28551: Memory corruption in UTILS when modem processes memory specific Diag commands having arbitrary addre Memory corruption in UTILS when modem processes memory specific Diag commands having arbitrary address values as input arguments.
nvd
CVE-2023-33079HIGHCVSS 7.8vAR8035vCSRA6620+141 more2023-12-05
CVE-2023-33079 [HIGH] CWE-823 CVE-2023-33079: Memory corruption in Audio while running invalid audio recording from ADSP. Memory corruption in Audio while running invalid audio recording from ADSP.
nvd
CVE-2023-33022HIGHCVSS 7.8v315 5G IoT ModemvAQT1000+202 more2023-12-05
CVE-2023-33022 [HIGH] CWE-680 CVE-2023-33022: Memory corruption in HLOS while invoking IOCTL calls from user-space. Memory corruption in HLOS while invoking IOCTL calls from user-space.
nvd
CVE-2023-33024HIGHCVSS 7.8vAQT1000vAR8035+65 more2023-12-05
CVE-2023-33024 [HIGH] CWE-120 CVE-2023-33024: Memory corruption while sending SMS from AP firmware. Memory corruption while sending SMS from AP firmware.
nvd
CVE-2023-33097HIGHCVSS 7.5vAR8035vCSR8811+120 more2023-12-05
CVE-2023-33097 [HIGH] CWE-126 CVE-2023-33097: Transient DOS in WLAN Firmware while processing a FTMR frame. Transient DOS in WLAN Firmware while processing a FTMR frame.
nvd
CVE-2023-33071HIGHCVSS 7.8vQCA6574vQCA6574A+11 more2023-12-05
CVE-2023-33071 [HIGH] CWE-284 CVE-2023-33071: Memory corruption in Automotive OS whenever untrusted apps try to access HAb for graphics functional Memory corruption in Automotive OS whenever untrusted apps try to access HAb for graphics functionalities.
nvd
CVE-2023-33017HIGHCVSS 7.8v315 5G IoT Modemv9205 LTE Modem+267 more2023-12-05
CVE-2023-33017 [HIGH] CWE-120 CVE-2023-33017: Memory corruption in Boot while running a ListVars test in UEFI Menu during boot. Memory corruption in Boot while running a ListVars test in UEFI Menu during boot.
nvd
CVE-2023-33070MEDIUMCVSS 5.5vAQT1000vAR8031+98 more2023-12-05
CVE-2023-33070 [MEDIUM] CWE-287 CVE-2023-33070: Transient DOS in Automotive OS due to improper authentication to the secure IO calls. Transient DOS in Automotive OS due to improper authentication to the secure IO calls.
nvd
CVE-2023-28586MEDIUMCVSS 6.5v315 5G IoT Modemv9205 LTE Modem+311 more2023-12-05
CVE-2023-28586 [MEDIUM] CWE-119 CVE-2023-28586: Information disclosure when the trusted application metadata symbol addresses are accessed while loa Information disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE.
nvd
CVE-2023-33045CRITICALCVSS 9.8vAR8035vCSR8811+125 more2023-11-07
CVE-2023-33045 [CRITICAL] CWE-120 CVE-2023-33045: Memory corruption in WLAN Firmware while parsing a NAN management frame carrying a S3 attribute. Memory corruption in WLAN Firmware while parsing a NAN management frame carrying a S3 attribute.
nvd
CVE-2023-22388CRITICALCVSS 9.8v315 5G IoT Modemv9205 LTE Modem+230 more2023-11-07
CVE-2023-22388 [CRITICAL] CWE-823 CVE-2023-22388: Memory Corruption in Multi-mode Call Processor while processing bit mask API. Memory Corruption in Multi-mode Call Processor while processing bit mask API.
nvd
CVE-2023-33047HIGHCVSS 7.5vAR8035vAR9380+173 more2023-11-07
CVE-2023-33047 [HIGH] CWE-126 CVE-2023-33047: Transient DOS in WLAN Firmware while parsing no-inherit IES. Transient DOS in WLAN Firmware while parsing no-inherit IES.
nvd
CVE-2023-33061HIGHCVSS 7.5vAR8035vCSR8811+111 more2023-11-07
CVE-2023-33061 [HIGH] CWE-126 CVE-2023-33061: Transient DOS in WLAN Firmware while parsing WLAN beacon or probe-response frame. Transient DOS in WLAN Firmware while parsing WLAN beacon or probe-response frame.
nvd
CVE-2023-28574HIGHCVSS 7.8vAR8035vFastConnect 6700+74 more2023-11-07
CVE-2023-28574 [HIGH] CWE-20 CVE-2023-28574: Memory corruption in core services when Diag handler receives a command to configure event listeners Memory corruption in core services when Diag handler receives a command to configure event listeners.
nvd
CVE-2023-28556HIGHCVSS 7.8v315 5G IoT Modemv9205 LTE Modem+227 more2023-11-07
CVE-2023-28556 [HIGH] CWE-285 CVE-2023-28556: Cryptographic issue in HLOS during key management. Cryptographic issue in HLOS during key management.
nvd
CVE-2023-33055HIGHCVSS 7.8vAQT1000vAR8035+150 more2023-11-07
CVE-2023-33055 [HIGH] CWE-120 CVE-2023-33055: Memory Corruption in Audio while invoking callback function in driver from ADSP. Memory Corruption in Audio while invoking callback function in driver from ADSP.
nvd
CVE-2023-33056HIGHCVSS 7.5vAR8035vCSR8811+112 more2023-11-07
CVE-2023-33056 [HIGH] CWE-476 CVE-2023-33056: Transient DOS in WLAN Firmware when firmware receives beacon including T2LM IE. Transient DOS in WLAN Firmware when firmware receives beacon including T2LM IE.
nvd
CVE-2023-21671HIGHCVSS 7.8vFastConnect 6700vFastConnect 6900+22 more2023-11-07
CVE-2023-21671 [HIGH] CWE-20 CVE-2023-21671: Memory Corruption in Core during syscall for Sectools Fuse comparison feature. Memory Corruption in Core during syscall for Sectools Fuse comparison feature.
nvd