Skip to content

Vulnerabilities of qualcomm snapdragon_x75_5g_modem-rf_system_firmware

Is your version affected?

CVE Summary Score Published
CVE-2024-23362 Cryptographic issue while parsing RSA keys in COBR format 7.1 High Sep 2, 2024
CVE-2024-23359 Information disclosure while decoding Tracking Area Update Accept or Attach Accept message received from network 8.2 High Sep 2, 2024
CVE-2024-23358 Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in Modem 7.5 High Sep 2, 2024
CVE-2024-33028 Memory corruption as fence object may still be accessed in timeline destruct after isync fence is released 8.4 High Aug 5, 2024
CVE-2024-33026 Transient DOS while parsing probe response and assoc response frame when received frame length is less than max size… 7.5 High Aug 5, 2024
CVE-2024-33025 Transient DOS while parsing the BSS parameter change count or MLD capabilities fields of the ML IE 7.5 High Aug 5, 2024
CVE-2024-33024 Transient DOS while parsing the ML IE when a beacon with length field inside the common info of ML IE greater than the… 7.5 High Aug 5, 2024
CVE-2024-33022 Memory corruption while allocating memory in HGSL driver 8.4 High Aug 5, 2024
CVE-2024-33021 Memory corruption while processing IOCTL call to set metainfo 8.4 High Aug 5, 2024
CVE-2024-33020 Transient DOS while processing TID-to-link mapping IE elements 7.5 High Aug 5, 2024
CVE-2024-33019 Transient DOS while parsing the received TID-to-link mapping action frame 7.5 High Aug 5, 2024
CVE-2024-33018 Transient DOS while parsing the received TID-to-link mapping element of the TID-to-link mapping action frame 7.5 High Aug 5, 2024
CVE-2024-33015 Transient DOS while parsing SCAN RNR IE when bytes received from AP is such that the size of the last param of IE is… 7.5 High Aug 5, 2024
CVE-2024-33014 Transient DOS while parsing ESP IE from beacon/probe response frame 7.5 High Aug 5, 2024
CVE-2024-33013 Transient DOS when driver accesses the ML IE memory and offset value is incremented beyond ML IE length 7.5 High Aug 5, 2024
CVE-2024-33012 Transient DOS while parsing the multiple MBSSID IEs from the beacon, when the tag length is non-zero value but with… 7.5 High Aug 5, 2024
CVE-2024-33011 Transient DOS while parsing the MBSSID IE from the beacons, when the MBSSID IE length is zero 7.5 High Aug 5, 2024
CVE-2024-33010 Transient DOS while parsing fragments of MBSSID IE from beacon frame 7.5 High Aug 5, 2024
CVE-2024-23356 Memory corruption during session sign renewal request calls in HLOS 7.8 High Aug 5, 2024
CVE-2024-23355 Memory corruption when keymaster operation imports a shared key 7.8 High Aug 5, 2024
CVE-2024-23353 Transient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI 7.5 High Aug 5, 2024
CVE-2024-23352 Transient DOS when NAS receives ODAC criteria of length 1 and type 1 in registration accept OTA 7.5 High Aug 5, 2024
CVE-2024-23350 Permanent DOS when DL NAS transport receives multiple payloads such that one payload contains SOR container whose… 6.5 Medium Aug 5, 2024
CVE-2024-21481 Memory corruption when preparing a shared memory notification for a memparcel in Resource Manager 8.4 High Aug 5, 2024
CVE-2024-21479 Transient DOS during music playback of ALAC content 7.5 High Aug 5, 2024

Other qualcomm products