Qualcomm Inc Snapdragon vulnerabilities

908 known vulnerabilities affecting qualcomm_inc/snapdragon.

Total CVEs
908
CISA KEV
8
actively exploited
Public exploits
0
Exploited in wild
4
Severity breakdown
CRITICAL51HIGH715MEDIUM142

Vulnerabilities

Page 33 of 46
CVE-2023-28572HIGHCVSS 8.8vCSRB31024vFastConnect 6800+53 more2023-11-07
CVE-2023-28572 [HIGH] CWE-126 CVE-2023-28572: Memory corruption in WLAN HOST while processing the WLAN scan descriptor list. Memory corruption in WLAN HOST while processing the WLAN scan descriptor list.
nvd
CVE-2023-33031HIGHCVSS 7.8vAPQ8017vAPQ8064AU+160 more2023-11-07
CVE-2023-33031 [HIGH] CWE-120 CVE-2023-33031: Memory corruption in Automotive Audio while copying data from ADSP shared buffer to the VOC packet d Memory corruption in Automotive Audio while copying data from ADSP shared buffer to the VOC packet data buffer.
nvd
CVE-2023-33059HIGHCVSS 7.8v315 5G IoT Modemv9206 LTE Modem+251 more2023-11-07
CVE-2023-33059 [HIGH] CWE-191 CVE-2023-33059: Memory corruption in Audio while processing the VOC packet data from ADSP. Memory corruption in Audio while processing the VOC packet data from ADSP.
nvd
CVE-2023-24852HIGHCVSS 7.8v315 5G IoT Modemv9205 LTE Modem+272 more2023-11-07
CVE-2023-24852 [HIGH] CWE-287 CVE-2023-24852: Memory Corruption in Core due to secure memory access by user while loading modem image. Memory Corruption in Core due to secure memory access by user while loading modem image.
nvd
CVE-2023-33048HIGHCVSS 7.5vAR8035vCSR8811+111 more2023-11-07
CVE-2023-33048 [HIGH] CWE-126 CVE-2023-33048: Transient DOS in WLAN Firmware while parsing t2lm buffers. Transient DOS in WLAN Firmware while parsing t2lm buffers.
nvd
CVE-2023-28545HIGHCVSS 7.8v315 5G IoT Modemv9205 LTE Modem+205 more2023-11-07
CVE-2023-28545 [HIGH] CWE-119 CVE-2023-28545: Memory corruption in TZ Secure OS while loading an app ELF. Memory corruption in TZ Secure OS while loading an app ELF.
nvd
CVE-2023-33074HIGHCVSS 7.8vFastConnect 6700vFastConnect 6900+56 more2023-11-07
CVE-2023-33074 [HIGH] CWE-416 CVE-2023-33074: Memory corruption in Audio when SSR event is triggered after music playback is stopped. Memory corruption in Audio when SSR event is triggered after music playback is stopped.
nvd
CVE-2023-28569MEDIUMCVSS 5.5vAQT1000vAR9380+209 more2023-11-07
CVE-2023-28569 [MEDIUM] CWE-126 CVE-2023-28569: Information disclosure in WLAN HAL while handling command through WMI interfaces. Information disclosure in WLAN HAL while handling command through WMI interfaces.
nvd
CVE-2023-28570MEDIUMCVSS 6.7vAQT1000vAR8035+82 more2023-11-07
CVE-2023-28570 [MEDIUM] CWE-120 Buffer Copy without Checking Size of Input in Audio Buffer Copy without Checking Size of Input in Audio Memory corruption while processing audio effects.
cvelistv5
CVE-2023-28566MEDIUMCVSS 5.5vAQT1000vCSRB31024+126 more2023-11-07
CVE-2023-28566 [MEDIUM] CWE-126 CVE-2023-28566: Information disclosure in WLAN HAL while handling the WMI state info command. Information disclosure in WLAN HAL while handling the WMI state info command.
nvd
CVE-2023-28553MEDIUMCVSS 5.5vAR8035vAR9380+142 more2023-11-07
CVE-2023-28553 [MEDIUM] CWE-126 CVE-2023-28553: Information Disclosure in WLAN Host when processing WMI event command. Information Disclosure in WLAN Host when processing WMI event command.
nvd
CVE-2023-28563MEDIUMCVSS 5.5vAQT1000vAR8031+231 more2023-11-07
CVE-2023-28563 [MEDIUM] CWE-126 CVE-2023-28563: Information disclosure in IOE Firmware while handling WMI command. Information disclosure in IOE Firmware while handling WMI command.
nvd
CVE-2023-28568MEDIUMCVSS 5.5vAQT1000vFastConnect 6200+89 more2023-11-07
CVE-2023-28568 [MEDIUM] CWE-126 CVE-2023-28568: Information disclosure in WLAN HAL when reception status handler is called. Information disclosure in WLAN HAL when reception status handler is called.
nvd
CVE-2023-28554MEDIUMCVSS 5.5vAQT1000vAR9380+146 more2023-11-07
CVE-2023-28554 [MEDIUM] CWE-126 CVE-2023-28554: Information Disclosure in Qualcomm IPC while reading values from shared memory in VM. Information Disclosure in Qualcomm IPC while reading values from shared memory in VM.
nvd
CVE-2023-24855CRITICALCVSS 9.8vAR8035vFastConnect 6200+61 more2023-10-03
CVE-2023-24855 [CRITICAL] CWE-823 CVE-2023-24855: Memory corruption in Modem while processing security related configuration before AS Security Exchan Memory corruption in Modem while processing security related configuration before AS Security Exchange.
nvd
CVE-2023-33028CRITICALCVSS 9.8vAR8035vAR9380+171 more2023-10-03
CVE-2023-33028 [CRITICAL] CWE-121 CVE-2023-33028: Memory corruption in WLAN Firmware while doing a memory copy of pmk cache. Memory corruption in WLAN Firmware while doing a memory copy of pmk cache.
nvd
CVE-2023-22385CRITICALCVSS 9.8v315 5G IoT Modemv9205 LTE Modem+235 more2023-10-03
CVE-2023-22385 [CRITICAL] CWE-126 CVE-2023-22385: Memory Corruption in Data Modem while making a MO call or MT VOLTE call. Memory Corruption in Data Modem while making a MO call or MT VOLTE call.
nvd
CVE-2023-33034HIGHCVSS 7.8vCSRA6620vCSRA6640+61 more2023-10-03
CVE-2023-33034 [HIGH] CWE-195 CVE-2023-33034: Memory corruption while parsing the ADSP response command. Memory corruption while parsing the ADSP response command.
nvd
CVE-2023-24848HIGHCVSS 7.5v315 5G IoT Modemv9206 LTE Modem+239 more2023-10-03
CVE-2023-24848 [HIGH] CWE-126 CVE-2023-24848: Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line va Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value.
nvd
CVE-2023-24847HIGHCVSS 7.5v315 5G IoT ModemvAQT1000+251 more2023-10-03
CVE-2023-24847 [HIGH] CWE-476 CVE-2023-24847: Transient DOS in Modem while allocating DSM items. Transient DOS in Modem while allocating DSM items.
nvd