Sm7350 Ab Firmware

26 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-33063 Dec 05, 03:15 HIGH KEV PATCH THREAT This Week

Memory corruption in DSP Services during a remote call from HLOS to DSP. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

Buffer Overflow Use After Free Memory Corruption Qualcomm 315 5g Iot Modem Firmware +279

NVD

CVSS 3.1

7.8

EPSS

0.7%

CVE-2023-33080 Dec 05, 03:15 HIGH This Week

Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm 315 5g Iot Modem Firmware 9206 Lte Modem Firmware Apq8017 Firmware +362

NVD

CVSS 3.1

7.5

EPSS

0.3%

CVE-2023-33079 Dec 05, 03:15 HIGH PATCH This Week

Memory corruption in Audio while running invalid audio recording from ADSP. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Buffer Overflow Memory Corruption Qualcomm Ar8035 Firmware Csra6620 Firmware +141

NVD

CVSS 3.1

7.8

EPSS

0.2%

CVE-2023-33054 Dec 05, 03:15 CRITICAL Act Now

Cryptographic issue in GPS HLOS Driver while downloading Qualcomm GNSS assistance data. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Qualcomm 315 5g Iot Modem Firmware Aqt1000 Firmware Ar8035 Firmware +164

NVD

CVSS 3.1

9.1

EPSS

0.4%

CVE-2023-33044 Dec 05, 03:15 HIGH This Week

Transient DOS in Data modem while handling TLB control messages from the Network. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Qualcomm 315 5g Iot Modem Firmware Ar8035 Firmware Qca6391 Firmware +86

NVD

CVSS 3.1

7.5

EPSS

0.5%

CVE-2023-33043 Dec 05, 03:15 HIGH This Week

Transient DOS in Modem when a Beam switch request is made with a non-configured BWP. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Qualcomm Ar8035 Firmware Qca6391 Firmware Qca8081 Firmware +55

NVD

CVSS 3.1

7.5

EPSS

0.5%

CVE-2023-33042 Dec 05, 03:15 HIGH This Week

Transient DOS in Modem after RRC Setup message is received. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Qualcomm 315 5g Iot Modem Firmware Ar8035 Firmware Qca6391 Firmware +71

NVD

CVSS 3.1

7.5

EPSS

0.6%

CVE-2023-33022 Dec 05, 03:15 HIGH This Week

Memory corruption in HLOS while invoking IOCTL calls from user-space. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm 315 5g Iot Modem Firmware Aqt1000 Firmware Ar8035 Firmware +208

NVD

CVSS 3.1

7.8

EPSS

0.2%

CVE-2023-33018 Dec 05, 03:15 HIGH This Week

Memory corruption while using the UIM diag command to get the operators name. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm 315 5g Iot Modem Firmware 9206 Lte Modem Firmware 9207 Lte Modem Firmware +259

NVD

CVSS 3.1

7.8

EPSS

0.1%

CVE-2023-33017 Dec 05, 03:15 HIGH This Week

Memory corruption in Boot while running a ListVars test in UEFI Menu during boot. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm 315 5g Iot Modem Firmware 9206 Lte Modem Firmware 9207 Lte Modem Firmware +273

NVD

CVSS 3.1

7.8

EPSS

0.2%

CVE-2023-33059 Nov 07, 06:15 HIGH PATCH This Week

Memory corruption in Audio while processing the VOC packet data from ADSP. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Buffer Overflow Integer Overflow Qualcomm 315 5g Iot Modem Firmware 9206 Lte Modem Firmware +256

NVD

CVSS 3.1

7.8

EPSS

0.1%

CVE-2023-33055 Nov 07, 06:15 HIGH PATCH This Week

Memory Corruption in Audio while invoking callback function in driver from ADSP. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. This Buffer Copy without Size Check vulnerability could allow attackers to overflow a buffer to corrupt adjacent memory.

Buffer Overflow Qualcomm Aqt1000 Firmware Ar8035 Firmware Csra6620 Firmware +148

NVD

CVSS 3.1

7.8

EPSS

0.1%

CVE-2023-33047 Nov 07, 06:15 HIGH This Week

Transient DOS in WLAN Firmware while parsing no-inherit IES. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm Ar8035 Firmware Ar9380 Firmware Csr8811 Firmware +174

NVD

CVSS 3.1

7.5

EPSS

0.4%

CVE-2023-33035 Oct 03, 06:15 HIGH PATCH This Week

Memory corruption while invoking callback function of AFE from ADSP. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. This Buffer Copy without Size Check vulnerability could allow attackers to overflow a buffer to corrupt adjacent memory.

Buffer Overflow Qualcomm Ar8035 Firmware Csra6620 Firmware Csra6640 Firmware +140

NVD

CVSS 3.1

7.8

EPSS

0.1%

CVE-2023-33034 Oct 03, 06:15 HIGH PATCH This Week

Memory corruption while parsing the ADSP response command. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Buffer Overflow Qualcomm Csra6620 Firmware Csra6640 Firmware Flight Rb5 5g Platform Firmware +61

NVD

CVSS 3.1

7.8

EPSS

0.1%

CVE-2023-33029 Oct 03, 06:15 HIGH PATCH This Week

Memory corruption in DSP Service during a remote call from HLOS to DSP. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

Buffer Overflow Use After Free Memory Corruption Qualcomm Ar8035 Firmware +130

NVD

CVSS 3.1

7.8

EPSS

0.1%

CVE-2023-33027 Oct 03, 06:15 HIGH This Week

Transient DOS in WLAN Firmware while parsing rsn ies. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm 315 5g Iot Modem Firmware Aqt1000 Firmware Ar8031 Firmware +324

NVD

CVSS 3.1

7.5

EPSS

0.3%

CVE-2023-33026 Oct 03, 06:15 HIGH This Week

Transient DOS in WLAN Firmware while parsing a NAN management frame. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm Ar8035 Firmware Ar9380 Firmware Csr8811 Firmware +191

NVD

CVSS 3.1

7.5

EPSS

0.3%

CVE-2023-28540 Oct 03, 06:15 HIGH This Week

Cryptographic issue in Data Modem due to improper authentication during TLS handshake. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Qualcomm 315 5g Iot Modem Firmware Aqt1000 Firmware Ar8035 Firmware +148

NVD

CVSS 3.1

7.5

EPSS

0.4%

CVE-2023-21670 Jun 06, 08:15 HIGH PATCH This Week

Memory Corruption in GPU Subsystem due to arbitrary command execution from GPU in privileged mode. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Authentication Bypass Buffer Overflow Qualcomm 315 5g Iot Modem Firmware Aqt1000 Firmware +180

NVD

CVSS 3.1

7.8

EPSS

0.1%

CVE-2023-21659 Jun 06, 08:15 HIGH This Week

Transient DOS in WLAN Firmware while processing frames with missing header fields. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm 315 5g Iot Modem Firmware Aqt1000 Firmware Ar8035 Firmware +267

NVD

CVSS 3.1

7.5

EPSS

0.4%

CVE-2023-21658 Jun 06, 08:15 HIGH This Week

Transient DOS in WLAN Firmware while processing the received beacon or probe response frame. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm Ar8035 Firmware Ar9380 Firmware Csr8811 Firmware +148

NVD

CVSS 3.1

7.5

EPSS

0.4%

CVE-2023-21657 Jun 06, 08:15 HIGH PATCH This Week

Memoru corruption in Audio when ADSP sends input during record use case. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Qualcomm Csra6620 Firmware Csra6640 Firmware Flight Rb5 5g Platform Firmware +123

NVD

CVSS 3.1

7.8

EPSS

0.1%

CVE-2023-21656 Jun 06, 08:15 HIGH PATCH This Week

Memory corruption in WLAN HOST while receiving an WMI event from firmware. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Buffer Overflow Qualcomm Ar8035 Firmware Csra6620 Firmware Csra6640 Firmware +125

NVD

CVSS 3.1

7.8

EPSS

0.1%

CVE-2023-21665 May 02, 06:15 HIGH PATCH This Week

Memory corruption in Graphics while importing a file. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Buffer Overflow Qualcomm 315 5g Iot Modem Firmware 9206 Lte Modem Firmware Apq8017 Firmware +217

NVD

CVSS 3.1

7.8

EPSS

0.2%

CVE-2023-21630 Apr 13, 07:15 HIGH PATCH This Week

Memory Corruption in Multimedia Framework due to integer overflow when synx bind is called along with synx signal. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Buffer Overflow Integer Overflow Qualcomm Qca6391 Firmware Qca6574 Firmware +40

NVD

CVSS 3.1

7.8

EPSS

0.1%

CVE-2023-33063

EPSS 1% CVSS 7.8

HIGH KEV PATCH THREAT This Week

Buffer Overflow Use After Free Memory Corruption +281

NVD

CVE-2023-33080

EPSS 0% CVSS 7.5

HIGH This Week

Buffer Overflow Qualcomm 315 5g Iot Modem Firmware +364

NVD

CVE-2023-33079

EPSS 0% CVSS 7.8

HIGH PATCH This Week

Memory corruption in Audio while running invalid audio recording from ADSP. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Buffer Overflow Memory Corruption Qualcomm +143

NVD

CVE-2023-33054

EPSS 0% CVSS 9.1

CRITICAL Act Now

Authentication Bypass Qualcomm 315 5g Iot Modem Firmware +166

NVD

CVE-2023-33044

EPSS 1% CVSS 7.5

HIGH This Week

Information Disclosure Qualcomm 315 5g Iot Modem Firmware +88

NVD

CVE-2023-33043

EPSS 1% CVSS 7.5

HIGH This Week

Information Disclosure Qualcomm Ar8035 Firmware +57

NVD

CVE-2023-33042

EPSS 1% CVSS 7.5

HIGH This Week

Information Disclosure Qualcomm 315 5g Iot Modem Firmware +73

NVD

CVE-2023-33022

EPSS 0% CVSS 7.8

HIGH This Week

Memory corruption in HLOS while invoking IOCTL calls from user-space. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm 315 5g Iot Modem Firmware +210

NVD

CVE-2023-33018

EPSS 0% CVSS 7.8

HIGH This Week

Memory corruption while using the UIM diag command to get the operators name. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm 315 5g Iot Modem Firmware +261

NVD

CVE-2023-33017

EPSS 0% CVSS 7.8

HIGH This Week

Memory corruption in Boot while running a ListVars test in UEFI Menu during boot. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm 315 5g Iot Modem Firmware +275

NVD

CVE-2023-33059

EPSS 0% CVSS 7.8

HIGH PATCH This Week

Memory corruption in Audio while processing the VOC packet data from ADSP. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Buffer Overflow Integer Overflow Qualcomm +258

NVD

CVE-2023-33055

EPSS 0% CVSS 7.8

HIGH PATCH This Week

Buffer Overflow Qualcomm Aqt1000 Firmware +150

NVD

CVE-2023-33047

EPSS 0% CVSS 7.5

HIGH This Week

Buffer Overflow Qualcomm Ar8035 Firmware +176

NVD

CVE-2023-33035

EPSS 0% CVSS 7.8

HIGH PATCH This Week

Buffer Overflow Qualcomm Ar8035 Firmware +142

NVD

CVE-2023-33034

EPSS 0% CVSS 7.8

HIGH PATCH This Week

Memory corruption while parsing the ADSP response command. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Buffer Overflow Qualcomm Csra6620 Firmware +63

NVD

CVE-2023-33029

EPSS 0% CVSS 7.8

HIGH PATCH This Week

Buffer Overflow Use After Free Memory Corruption +132

NVD

CVE-2023-33027

EPSS 0% CVSS 7.5

HIGH This Week

Buffer Overflow Qualcomm 315 5g Iot Modem Firmware +326

NVD

CVE-2023-33026

EPSS 0% CVSS 7.5

HIGH This Week

Buffer Overflow Qualcomm Ar8035 Firmware +193

NVD

CVE-2023-28540

EPSS 0% CVSS 7.5

HIGH This Week

Authentication Bypass Qualcomm 315 5g Iot Modem Firmware +150

NVD

CVE-2023-21670

EPSS 0% CVSS 7.8

HIGH PATCH This Week

Memory Corruption in GPU Subsystem due to arbitrary command execution from GPU in privileged mode. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Authentication Bypass Buffer Overflow Qualcomm +182

NVD

CVE-2023-21659

EPSS 0% CVSS 7.5

HIGH This Week

Buffer Overflow Qualcomm 315 5g Iot Modem Firmware +269

NVD

CVE-2023-21658

EPSS 0% CVSS 7.5

HIGH This Week

Buffer Overflow Qualcomm Ar8035 Firmware +150

NVD

CVE-2023-21657

EPSS 0% CVSS 7.8

HIGH PATCH This Week

Memoru corruption in Audio when ADSP sends input during record use case. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Qualcomm Csra6620 Firmware +125

NVD

CVE-2023-21656

EPSS 0% CVSS 7.8

HIGH PATCH This Week

Memory corruption in WLAN HOST while receiving an WMI event from firmware. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Buffer Overflow Qualcomm Ar8035 Firmware +127

NVD

CVE-2023-21665

EPSS 0% CVSS 7.8

HIGH PATCH This Week

Memory corruption in Graphics while importing a file. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Buffer Overflow Qualcomm 315 5g Iot Modem Firmware +219

NVD

CVE-2023-21630

EPSS 0% CVSS 7.8

HIGH PATCH This Week

Memory Corruption in Multimedia Framework due to integer overflow when synx bind is called along with synx signal. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Buffer Overflow Integer Overflow Qualcomm +42

NVD