cve.bz

qualcomm csra6620 firmware vulnerabilities, newest first, page 4

Filter
  1. 7.8CVE-2023-33063KEVEPSS 0.7%

    Memory corruption in DSP Services during a remote call from HLOS to DSP.

  2. 9.1CVE-2023-33054EPSS 0.4%

    Cryptographic issue in GPS HLOS Driver while downloading Qualcomm GNSS assistance data.

  3. 7.8CVE-2023-33022EPSS 0.2%

    Memory corruption in HLOS while invoking IOCTL calls from user-space.

  4. 7.8CVE-2023-33018EPSS 0.1%

    Memory corruption while using the UIM diag command to get the operators name.

  5. 7.8CVE-2023-33017EPSS 0.2%

    Memory corruption in Boot while running a ListVars test in UEFI Menu during boot.

  6. 7.5CVE-2023-28588EPSS 0.5%

    Transient DOS in Bluetooth Host while rfc slot allocation.

  7. 7.8CVE-2023-28587EPSS 0.2%

    Memory corruption in BT controller while parsing debug commands with specific sub-opcodes at HCI interface level.

  8. 6.5CVE-2023-28586EPSS 0.1%

    Information disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE.

  9. 8.8CVE-2023-28585EPSS 0.1%

    Memory corruption while loading an ELF segment in TEE Kernel.

  10. 7.8CVE-2023-28551EPSS 0.1%

    Memory corruption in UTILS when modem processes memory specific Diag commands having arbitrary address values as input arguments.

  11. 7.8CVE-2023-28550EPSS 0.1%

    Memory corruption in MPP performance while accessing DSM watermark using external memory address.

  12. 7.8CVE-2023-28546EPSS 0.1%

    Memory Corruption in SPS Application while exporting public key in sorter TA.

  13. 7.8CVE-2023-33059EPSS 0.1%

    Memory corruption in Audio while processing the VOC packet data from ADSP.

  14. 7.8CVE-2023-33055EPSS 0.1%

    Memory Corruption in Audio while invoking callback function in driver from ADSP.

  15. 7.8CVE-2023-33031EPSS 0.1%

    Memory corruption in Automotive Audio while copying data from ADSP shared buffer to the VOC packet data buffer.

  16. 5.5CVE-2023-28563EPSS 0.1%

    Information disclosure in IOE Firmware while handling WMI command.

  17. 7.8CVE-2023-28556EPSS 0.1%

    Cryptographic issue in HLOS during key management.

  18. 7.8CVE-2023-28545EPSS 0.1%

    Memory corruption in TZ Secure OS while loading an app ELF.

  19. 7.8CVE-2023-24852EPSS 0.1%

    Memory Corruption in Core due to secure memory access by user while loading modem image.

  20. 9.8CVE-2023-22388EPSS 0.4%

    Memory Corruption in Multi-mode Call Processor while processing bit mask API.

  21. 7.8CVE-2023-33035EPSS 0.1%

    Memory corruption while invoking callback function of AFE from ADSP.

  22. 7.8CVE-2023-33034EPSS 0.1%

    Memory corruption while parsing the ADSP response command.

  23. 7.8CVE-2023-33029EPSS 0.1%

    Memory corruption in DSP Service during a remote call from HLOS to DSP.

  24. 7.5CVE-2023-33027EPSS 0.4%

    Transient DOS in WLAN Firmware while parsing rsn ies.

  25. 7.5CVE-2023-28540EPSS 0.4%

    Cryptographic issue in Data Modem due to improper authentication during TLS handshake.

  26. 7.8CVE-2023-24850EPSS 0.1%

    Memory Corruption in HLOS while importing a cryptographic key into KeyMaster Trusted Application.

  27. 7.5CVE-2023-24849EPSS 0.4%

    Information Disclosure in data Modem while parsing an FMTP line in an SDP message.

  28. 7.5CVE-2023-24848EPSS 0.4%

    Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value.

  29. 7.5CVE-2023-24847EPSS 0.4%

    Transient DOS in Modem while allocating DSM items.

  30. 9.8CVE-2023-22385EPSS 0.4%

    Memory Corruption in Data Modem while making a MO call or MT VOLTE call.

  31. 7.8CVE-2023-33021EPSS 0.1%

    Memory corruption in Graphics while processing user packets for command submission.

  32. 7.5CVE-2023-33020EPSS 0.4%

    Transient DOS in WLAN Host when an invalid channel (like channel out of range) is received in STA during CSA IE.

  33. 7.5CVE-2023-33019EPSS 0.4%

    Transient DOS in WLAN Host while doing channel switch announcement (CSA), when a mobile station receives invalid channel in CSA IE.

  34. 7.8CVE-2023-28567EPSS 0.1%

    Memory corruption in WLAN HAL while handling command through WMI interfaces.

  35. 7.8CVE-2023-28565EPSS 0.1%

    Memory corruption in WLAN HAL while handling command streams through WMI interfaces.

  36. 7.8CVE-2023-28564EPSS 0.1%

    Memory corruption in WLAN HAL while passing command parameters through WMI interfaces.

  37. 7.8CVE-2023-28560EPSS 0.1%

    Memory corruption in WLAN HAL while processing devIndex from untrusted WMI payload.

  38. 7.8CVE-2023-28559EPSS 0.1%

    Memory corruption in WLAN FW while processing command parameters from untrusted WMI payload.

  39. 7.8CVE-2023-28558EPSS 0.1%

    Memory corruption in WLAN handler while processing PhyID in Tx status handler.

  40. 7.8CVE-2023-28557EPSS 0.1%

    Memory corruption in WLAN HAL while processing command parameters from untrusted WMI payload.

  41. 7.8CVE-2023-28544EPSS 0.1%

    Memory corruption in WLAN while sending transmit command from HLOS to UTF handlers.

  42. 7.8CVE-2023-28538EPSS 0.1%

    Memory corruption in WIN Product while invoking WinAcpi update driver in the UEFI region.

  43. 7.8CVE-2022-33275EPSS 0.1%

    Memory corruption due to improper validation of array index in WLAN HAL when received lm_itemNum is out of range.

  44. 7.8CVE-2023-28537EPSS 0.1%

    Memory corruption while allocating memory in COmxApeDec module in Audio.

  45. 7.8CVE-2023-22666EPSS 0.1%

    Memory Corruption in Audio while playing amrwbplus clips with modified content.

  46. 7.1CVE-2023-21652EPSS 0.1%

    Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use.

  47. 7.8CVE-2023-21651EPSS 0.1%

    Memory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE.

  48. 7.1CVE-2023-21626EPSS 0.1%

    Cryptographic issue in HLOS due to improper authentication while performing key velocity checks using more than one key.

  49. 7.5CVE-2023-21625EPSS 0.4%

    Information disclosure in Network Services due to buffer over-read while the device receives DNS response.

  50. 9.8CVE-2022-40510EPSS 0.4%

    Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder.