Skip to content

Known vulnerabilities in Qualcomm, Inc. Snapdragon

Is your version affected?

CVE Summary Score Published
CVE-2023-28571 Information disclosure in WLAN HOST while processing the WLAN scan descriptor list during roaming scan 6.1 Medium Oct 3, 2023
CVE-2023-28540 Cryptographic issue in Data Modem due to improper authentication during TLS handshake 9.1 Critical Oct 3, 2023
CVE-2023-28539 Memory corruption in WLAN Host when the firmware invokes multiple WMI Service Available command 6.6 Medium Oct 3, 2023
CVE-2023-24855 Memory corruption in Modem while processing security related configuration before AS Security Exchange 9.8 Critical Oct 3, 2023
CVE-2023-24853 Memory Corruption in HLOS while registering for key provisioning notify 8.4 High Oct 3, 2023
CVE-2023-24850 Memory Corruption in HLOS while importing a cryptographic key into KeyMaster Trusted Application 7.8 High Oct 3, 2023
CVE-2023-24849 Information Disclosure in data Modem while parsing an FMTP line in an SDP message 8.2 High Oct 3, 2023
CVE-2023-24848 Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value 8.2 High Oct 3, 2023
CVE-2023-24847 Transient DOS in Modem while allocating DSM items 7.5 High Oct 3, 2023
CVE-2023-24844 Memory Corruption in Core while invoking a call to Access Control core library with hardware protected address range 8.4 High Oct 3, 2023
CVE-2023-24843 Transient DOS in Modem while triggering a camping on an 5G cell 7.5 High Oct 3, 2023
CVE-2023-22385 Memory Corruption in Data Modem while making a MO call or MT VOLTE call 8.2 High Oct 3, 2023
CVE-2023-22384 Memory Corruption in VR Service while sending data using Fast Message Queue (FMQ) 6.7 Medium Oct 3, 2023
CVE-2023-22382 Weak configuration in Automotive while VM is processing a listener request from TEE 7.4 High Oct 3, 2023
CVE-2023-21673 Improper Access to the VM resource manager can lead to Memory Corruption 8.7 High Oct 3, 2023
CVE-2023-28543 A malformed DLC can trigger Memory Corruption in SNPE library due to out of bounds read, such as by loading an untrusted… 8.1 High Sep 5, 2023
CVE-2023-33021 Memory corruption in Graphics while processing user packets for command submission 8.4 High Sep 5, 2023
CVE-2023-33020 Transient DOS in WLAN Host when an invalid channel (like channel out of range) is received in STA during CSA IE 7.5 High Sep 5, 2023
CVE-2023-33019 Transient DOS in WLAN Host while doing channel switch announcement (CSA), when a mobile station receives invalid channel… 7.5 High Sep 5, 2023
CVE-2023-33016 Transient DOS in WLAN firmware while parsing MLO (multi-link operation) 7.5 High Sep 5, 2023
CVE-2023-33015 Transient DOS in WLAN Firmware while interpreting MBSSID IE of a received beacon frame 7.5 High Sep 5, 2023
CVE-2023-28584 Transient DOS in WLAN Host when a mobile station receives invalid channel in CSA IE while doing channel switch… 7.5 High Sep 5, 2023
CVE-2023-28581 Memory corruption in WLAN Firmware while parsing receieved GTK Keys in GTK KDE 9.8 Critical Sep 5, 2023
CVE-2023-28573 Memory corruption in WLAN HAL while parsing WMI command parameters 7.8 High Sep 5, 2023
CVE-2023-28567 Memory corruption in WLAN HAL while handling command through WMI interfaces 7.8 High Sep 5, 2023

Other Qualcomm, Inc. products