Skip to content

Vulnerabilities of qualcomm snapdragon_x70_modem-rf_system_firmware

Is your version affected?

CVE Summary Score Published
CVE-2024-33056 Memory corruption when allocating and accessing an entry in an SMEM partition continuously 8.4 High Dec 2, 2024
CVE-2024-23385 Transient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at UE 7.5 High Nov 4, 2024
CVE-2024-33016 memory corruption when an invalid firehose patch command is invoked 6.8 Medium Sep 2, 2024
CVE-2024-23362 Cryptographic issue while parsing RSA keys in COBR format 7.1 High Sep 2, 2024
CVE-2024-23359 Information disclosure while decoding Tracking Area Update Accept or Attach Accept message received from network 8.2 High Sep 2, 2024
CVE-2024-23353 Transient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI 7.5 High Aug 5, 2024
CVE-2024-23352 Transient DOS when NAS receives ODAC criteria of length 1 and type 1 in registration accept OTA 7.5 High Aug 5, 2024
CVE-2024-21469 Memory corruption when an invoke call and a TEE call are bound for the same trusted application 7.3 High Jul 1, 2024
CVE-2024-21465 Memory corruption while processing key blob passed by the user 7.8 High Jul 1, 2024
CVE-2023-43556 Memory corruption in Hypervisor when platform information mentioned is not aligned 9.3 Critical Jun 3, 2024
CVE-2023-43542 Memory corruption while copying a keyblob`s material when the key material`s size is not accurately checked 7.8 High Jun 3, 2024
CVE-2023-33104 Transient DOS while processing PDU Release command with a parameter PDU ID out of range 7.5 High Mar 4, 2024
CVE-2023-33096 Transient DOS while processing DL NAS Transport message, as specified in 3GPP 24.501 v16 7.5 High Mar 4, 2024
CVE-2023-33095 Transient DOS while processing multiple payload container type with incorrect container length received in DL NAS… 7.5 High Mar 4, 2024
CVE-2023-33086 Transient DOS while processing multiple IKEV2 Informational Request to device from IPSEC server with different… 7.5 High Mar 4, 2024
CVE-2023-28582 Memory corruption in Data Modem while verifying hello-verify message during the DTLS handshake 9.8 Critical Mar 4, 2024
CVE-2023-28578 Memory corruption in Core Services while executing the command for removing a single event listener 9.3 Critical Mar 4, 2024
CVE-2023-24847 Transient DOS in Modem while allocating DSM items 7.5 High Oct 3, 2023
CVE-2023-21629 Memory Corruption in Modem due to double free while parsing the PKCS15 sim files 6.8 Medium Jul 4, 2023
CVE-2022-40538 Transient DOS due to reachable assertion in modem while processing sib with incorrect values from network 7.5 High Jun 6, 2023
CVE-2022-40536 Transient DOS due to improper authentication in modem while receiving plain TLB OTA request message from network 7.5 High Jun 6, 2023
CVE-2022-33264 Memory corruption in modem due to stack based buffer overflow while parsing OTASP Key Generation Request Message 7.9 High Jun 6, 2023
CVE-2022-40508 Transient DOS due to reachable assertion in Modem while processing config related to cross carrier scheduling, which… 7.5 High May 2, 2023
CVE-2022-33289 Memory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card 6.8 Medium Apr 4, 2023
CVE-2022-33288 Memory corruption due to buffer copy without checking the size of input in Core while sending SCM command to get write… 9.3 Critical Apr 4, 2023

Other qualcomm products