Skip to content

Vulnerabilities of Qualcomm, Inc. Snapdragon

Is your version affected?

CVE Summary Score Published
CVE-2023-28577 In the function call related to CAM_REQ_MGR_RELEASE_BUF there is no check if the buffer is being used 6.7 Medium Aug 8, 2023
CVE-2023-28576 The buffer obtained from kernel APIs such as cam_mem_get_cpu_buf() may be readable/writable in userspace after kernel… 6.4 Medium Aug 8, 2023
CVE-2023-28575 The cam_get_device_priv function does not check the type of handle being returned (device/session/link) 6.7 Medium Aug 8, 2023
CVE-2023-28561 Memory corruption in QESL while processing payload from external ESL device to firmware 9.8 Critical Aug 8, 2023
CVE-2023-28555 Transient DOS in Audio while remapping channel buffer in media codec decoding 7.5 High Aug 8, 2023
CVE-2023-28537 Memory corruption while allocating memory in COmxApeDec module in Audio 8.4 High Aug 8, 2023
CVE-2023-22666 Memory Corruption in Audio while playing amrwbplus clips with modified content 8.4 High Aug 8, 2023
CVE-2023-21652 Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use 7.7 High Aug 8, 2023
CVE-2023-21651 Memory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE 9.3 Critical Aug 8, 2023
CVE-2023-21650 Memory Corruption in GPS HLOS Driver when injectFdclData receives data with invalid data length 6.7 Medium Aug 8, 2023
CVE-2023-21649 Memory corruption in WLAN while running doDriverCmd for an unspecific command 6.7 Medium Aug 8, 2023
CVE-2023-21648 Memory corruption in RIL while trying to send apdu packet 6.7 Medium Aug 8, 2023
CVE-2023-21647 Information disclosure in Bluetooth when an GATT packet is received due to improper input validation 6.5 Medium Aug 8, 2023
CVE-2023-21643 Memory corruption due to untrusted pointer dereference in automotive during system call 9.1 Critical Aug 8, 2023
CVE-2023-21627 Memory corruption in Trusted Execution Environment while calling service API with invalid address 6.7 Medium Aug 8, 2023
CVE-2023-21626 Cryptographic issue in HLOS due to improper authentication while performing key velocity checks using more than one key 7.1 High Aug 8, 2023
CVE-2023-21625 Information disclosure in Network Services due to buffer over-read while the device receives DNS response 8.2 High Aug 8, 2023
CVE-2022-40510 Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder 9.8 Critical Aug 8, 2023
CVE-2023-28542 Memory Corruption in WLAN HOST while fetching TX status information 7.8 High Jul 4, 2023
CVE-2023-28541 Memory Corruption in Data Modem while processing DMA buffer release event about CFR data 7.8 High Jul 4, 2023
CVE-2023-24854 Memory Corruption in WLAN HOST while parsing QMI WLAN Firmware response message 7.8 High Jul 4, 2023
CVE-2023-24851 Memory Corruption in WLAN HOST while parsing QMI response message from firmware 7.8 High Jul 4, 2023
CVE-2023-22667 Memory Corruption in Audio while allocating the ion buffer during the music playback 8.4 High Jul 4, 2023
CVE-2023-22387 Arbitrary memory overwrite when VM gets compromised in TX write leading to Memory Corruption 7.8 High Jul 4, 2023
CVE-2023-22386 Memory Corruption in WLAN HOST while processing WLAN FW request to allocate memory 7.8 High Jul 4, 2023

Other Qualcomm, Inc. products