8998 Firmware

12 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-33063 Dec 05, 03:15 HIGH KEV PATCH THREAT This Week

Memory corruption in DSP Services during a remote call from HLOS to DSP. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

Buffer Overflow Use After Free Memory Corruption Qualcomm 315 5g Iot Modem Firmware +279

NVD

CVSS 3.1

7.8

EPSS

0.7%

CVE-2023-33080 Dec 05, 03:15 HIGH This Week

Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm 315 5g Iot Modem Firmware 9206 Lte Modem Firmware Apq8017 Firmware +362

NVD

CVSS 3.1

7.5

EPSS

0.3%

CVE-2023-33054 Dec 05, 03:15 CRITICAL Act Now

Cryptographic issue in GPS HLOS Driver while downloading Qualcomm GNSS assistance data. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Qualcomm 315 5g Iot Modem Firmware Aqt1000 Firmware Ar8035 Firmware +164

NVD

CVSS 3.1

9.1

EPSS

0.4%

CVE-2023-33024 Dec 05, 03:15 HIGH This Week

Memory corruption while sending SMS from AP firmware. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm Aqt1000 Firmware Ar8035 Firmware Qam8295p Firmware +68

NVD

CVSS 3.1

7.8

EPSS

0.2%

CVE-2023-33018 Dec 05, 03:15 HIGH This Week

Memory corruption while using the UIM diag command to get the operators name. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm 315 5g Iot Modem Firmware 9206 Lte Modem Firmware 9207 Lte Modem Firmware +259

NVD

CVSS 3.1

7.8

EPSS

0.1%

CVE-2023-33059 Nov 07, 06:15 HIGH PATCH This Week

Memory corruption in Audio while processing the VOC packet data from ADSP. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Buffer Overflow Integer Overflow Qualcomm 315 5g Iot Modem Firmware 9206 Lte Modem Firmware +256

NVD

CVSS 3.1

7.8

EPSS

0.1%

CVE-2023-33027 Oct 03, 06:15 HIGH This Week

Transient DOS in WLAN Firmware while parsing rsn ies. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm 315 5g Iot Modem Firmware Aqt1000 Firmware Ar8031 Firmware +324

NVD

CVSS 3.1

7.5

EPSS

0.3%

CVE-2023-28571 Oct 03, 06:15 MEDIUM PATCH This Month

Information disclosure in WLAN HOST while processing the WLAN scan descriptor list during roaming scan. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Buffer Overflow Information Disclosure Qualcomm Apq8064au Firmware Csrb31024 Firmware +83

NVD

CVSS 3.1

5.5

EPSS

0.1%

CVE-2023-28560 Sep 05, 07:15 HIGH This Week

Memory corruption in WLAN HAL while processing devIndex from untrusted WMI payload. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm Apq8076 Firmware Aqt1000 Firmware Ar8031 Firmware +264

NVD

CVSS 3.1

7.8

EPSS

0.1%

CVE-2023-28537 Aug 08, 10:15 HIGH This Week

Memory corruption while allocating memory in COmxApeDec module in Audio. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Integer Overflow Qualcomm 315 5g Iot Modem Firmware Apq8017 Firmware +181

NVD

CVSS 3.1

7.8

EPSS

0.1%

CVE-2023-21666 May 02, 06:15 HIGH PATCH This Week

Memory Corruption in Graphics while accessing a buffer allocated through the graphics pool. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. This Memory Leak vulnerability could allow attackers to exhaust available memory leading to denial of service.

Buffer Overflow Qualcomm Flight Rb5 5g Platform Firmware Mdm9250 Firmware Mdm9628 Firmware +162

NVD

CVSS 3.1

7.8

EPSS

0.2%

CVE-2023-21665 May 02, 06:15 HIGH PATCH This Week

Memory corruption in Graphics while importing a file. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Buffer Overflow Qualcomm 315 5g Iot Modem Firmware 9206 Lte Modem Firmware Apq8017 Firmware +217

NVD

CVSS 3.1

7.8

EPSS

0.2%

CVE-2023-33063

EPSS 1% CVSS 7.8

HIGH KEV PATCH THREAT This Week

Buffer Overflow Use After Free Memory Corruption +281

NVD

CVE-2023-33080

EPSS 0% CVSS 7.5

HIGH This Week

Buffer Overflow Qualcomm 315 5g Iot Modem Firmware +364

NVD

CVE-2023-33054

EPSS 0% CVSS 9.1

CRITICAL Act Now

Authentication Bypass Qualcomm 315 5g Iot Modem Firmware +166

NVD

CVE-2023-33024

EPSS 0% CVSS 7.8

HIGH This Week

Memory corruption while sending SMS from AP firmware. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm Aqt1000 Firmware +70

NVD

CVE-2023-33018

EPSS 0% CVSS 7.8

HIGH This Week

Memory corruption while using the UIM diag command to get the operators name. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm 315 5g Iot Modem Firmware +261

NVD

CVE-2023-33059

EPSS 0% CVSS 7.8

HIGH PATCH This Week

Memory corruption in Audio while processing the VOC packet data from ADSP. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Buffer Overflow Integer Overflow Qualcomm +258

NVD

CVE-2023-33027

EPSS 0% CVSS 7.5

HIGH This Week

Buffer Overflow Qualcomm 315 5g Iot Modem Firmware +326

NVD

CVE-2023-28571

EPSS 0% CVSS 5.5

MEDIUM PATCH This Month

Information disclosure in WLAN HOST while processing the WLAN scan descriptor list during roaming scan. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Buffer Overflow Information Disclosure Qualcomm +85

NVD

CVE-2023-28560

EPSS 0% CVSS 7.8

HIGH This Week

Memory corruption in WLAN HAL while processing devIndex from untrusted WMI payload. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm Apq8076 Firmware +266

NVD

CVE-2023-28537

EPSS 0% CVSS 7.8

HIGH This Week

Memory corruption while allocating memory in COmxApeDec module in Audio. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Integer Overflow Qualcomm +183

NVD

CVE-2023-21666

EPSS 0% CVSS 7.8

HIGH PATCH This Week

Buffer Overflow Qualcomm Flight Rb5 5g Platform Firmware +164

NVD

CVE-2023-21665

EPSS 0% CVSS 7.8

HIGH PATCH This Week

Memory corruption in Graphics while importing a file. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Buffer Overflow Qualcomm 315 5g Iot Modem Firmware +219

NVD