Skip to content

Vulnerabilities of qualcomm qsm8350_firmware

Is your version affected?

CVE Summary Score Published
CVE-2023-43531 Memory corruption while verifying the serialized header when the key pairs are generated 8.4 High May 6, 2024
CVE-2023-33119 Memory corruption while loading a VM from a signed VM image that is not coherent in the processor cache 8.4 High May 6, 2024
CVE-2024-21468 Memory corruption when there is failed unmap operation in GPU 8.4 High Apr 1, 2024
CVE-2023-33115 Memory corruption while processing buffer initialization, when trusted report for certain report types are generated 7.8 High Apr 1, 2024
CVE-2023-33023 Memory corruption while processing finish_sign command to pass a rsp buffer 8.4 High Apr 1, 2024
CVE-2023-28547 Memory corruption in SPS Application while requesting for public key in sorter TA 8.4 High Apr 1, 2024
CVE-2023-43550 Memory corruption while processing a QMI request for allocating memory from a DHMS supported subsystem 7.8 High Mar 4, 2024
CVE-2023-28578 Memory corruption in Core Services while executing the command for removing a single event listener 9.3 Critical Mar 4, 2024
CVE-2023-43522 Transient DOS while key unwrapping process, when the given encrypted key is empty or NULL 7.5 High Feb 6, 2024
CVE-2023-33027 Transient DOS in WLAN Firmware while parsing rsn ies 7.5 High Oct 3, 2023
CVE-2023-33026 Transient DOS in WLAN Firmware while parsing a NAN management frame 7.5 High Oct 3, 2023
CVE-2023-28558 Memory corruption in WLAN handler while processing PhyID in Tx status handler 7.8 High Sep 5, 2023
CVE-2023-21652 Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use 7.7 High Aug 8, 2023
CVE-2023-21651 Memory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE 9.3 Critical Aug 8, 2023
CVE-2023-21658 Transient DOS in WLAN Firmware while processing the received beacon or probe response frame 7.5 High Jun 6, 2023
CVE-2022-40533 Transient DOS due to untrusted Pointer Dereference in core while sending USB QMI request 6.2 Medium Jun 6, 2023
CVE-2022-33307 Memory Corruption due to double free in automotive when a bad HLOS address for one of the lists to be mapped is passed 8.4 High Jun 6, 2023
CVE-2022-33288 Memory corruption due to buffer copy without checking the size of input in Core while sending SCM command to get write… 9.3 Critical Apr 4, 2023
CVE-2022-33278 Memory corruption due to buffer copy without checking the size of input in HLOS when input message size is larger than… 7.8 High Mar 7, 2023
CVE-2022-33257 Memory corruption in Core due to time-of-check time-of-use race condition during dump collection in trust zone 9.3 Critical Mar 7, 2023
CVE-2022-33242 Memory corruption due to improper authentication in Qualcomm IPC while loading unsigned lib in audio PD 7.8 High Mar 7, 2023
CVE-2022-40512 Transient DOS in WLAN Firmware due to buffer over-read while processing probe response or beacon 7.5 High Feb 9, 2023
CVE-2022-33271 Information disclosure due to buffer over-read in WLAN while parsing NMF frame 8.2 High Feb 9, 2023
CVE-2022-33232 Memory corruption due to buffer copy without checking size of input while running memory sharing tests with large… 9.3 Critical Feb 9, 2023

Other qualcomm products