Snapdragon 8cx Gen 2 5g Compute Platform Firmware

28 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-47383 Mar 02, 17:16 HIGH This Week

5G Fixed Wireless Access Platform Firmware versions up to - contains a vulnerability that allows attackers to cryptographic issue when a VoWiFi call is triggered from UE (CVSS 7.2).

Information Disclosure Qualcomm 5g Fixed Wireless Access Platform Firmware 9206 Lte Modem Firmware 9207 Lte Modem Firmware +197

NVD

CVSS 3.1

7.2

EPSS

0.0%

CVE-2024-43050 Dec 02, 11:15 HIGH This Week

Memory corruption while invoking IOCTL calls from user space to issue factory test command inside WLAN driver. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Stack Overflow Qualcomm Aqt1000 Firmware Fastconnect 6200 Firmware +52

NVD

CVSS 3.1

7.8

EPSS

0.1%

CVE-2024-33056 Dec 02, 11:15 HIGH This Week

Memory corruption when allocating and accessing an entry in an SMEM partition continuously. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm 205 Mobile Platform Firmware 315 5g Iot Modem Firmware 9206 Lte Modem Firmware +320

NVD

CVSS 3.1

7.8

EPSS

0.1%

CVE-2024-33044 Dec 02, 11:15 HIGH This Week

Memory corruption while Configuring the SMR/S2CR register in Bypass mode. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm 315 5g Iot Modem Firmware Aqt1000 Firmware Ar8035 Firmware +205

NVD

CVSS 3.1

7.8

EPSS

0.1%

CVE-2023-43511 Jan 02, 06:15 HIGH This Week

Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Qualcomm 315 5g Iot Modem Firmware 9206 Lte Modem Firmware Apq8017 Firmware +347

NVD

CVSS 3.1

7.5

EPSS

0.3%

CVE-2023-33110 Jan 02, 06:15 HIGH This Week

The session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may lead to race condition between event. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Memory Corruption Qualcomm Snapdragon 425 Mobile Platform Firmware Snapdragon 429 Mobile Platform Firmware +116

NVD

CVSS 3.1

7.8

EPSS

0.1%

CVE-2023-33109 Jan 02, 06:15 HIGH This Week

Transient DOS while processing a WMI P2P listen start command (0xD00A) sent from host. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Null Pointer Dereference Qualcomm 315 5g Iot Modem Firmware Aqt1000 Firmware +302

NVD

CVSS 3.1

7.5

EPSS

0.2%

CVE-2023-33062 Jan 02, 06:15 HIGH This Week

Transient DOS in WLAN Firmware while parsing a BTM request. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm 315 5g Iot Modem Firmware Aqt1000 Firmware Ar8031 Firmware +281

NVD

CVSS 3.1

7.5

EPSS

0.2%

CVE-2023-33040 Jan 02, 06:15 HIGH This Week

Transient DOS in Data Modem during DTLS handshake. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm 315 5g Iot Modem Firmware Aqt1000 Firmware Ar8035 Firmware +136

NVD

CVSS 3.1

7.5

EPSS

0.1%

CVE-2023-33038 Jan 02, 06:15 MEDIUM This Month

Memory corruption while receiving a message in Bus Socket Transport Server. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Integer Overflow Qualcomm 315 5g Iot Modem Firmware Aqt1000 Firmware +137

NVD

CVSS 3.1

6.7

EPSS

0.0%

CVE-2023-33036 Jan 02, 06:15 HIGH This Week

Permanent DOS in Hypervisor while untrusted VM without PSCI support makes a PSCI call. Rated high severity (CVSS 7.1), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Null Pointer Dereference Qualcomm Aqt1000 Firmware Ar8035 Firmware +100

NVD

CVSS 3.1

7.1

EPSS

0.0%

CVE-2023-33033 Jan 02, 06:15 HIGH This Week

Memory corruption in Audio during playback with speaker protection. Rated high severity (CVSS 8.4), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Memory Corruption Qualcomm 315 5g Iot Modem Firmware 9206 Lte Modem Firmware +257

NVD

CVSS 3.1

8.4

EPSS

0.1%

CVE-2023-33032 Jan 02, 06:15 CRITICAL Act Now

Memory corruption in TZ Secure OS while requesting a memory allocation from TA region. Rated critical severity (CVSS 9.3), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Integer Overflow Qualcomm Aqt1000 Firmware Ar8031 Firmware +115

NVD

CVSS 3.1

9.3

EPSS

0.1%

CVE-2023-33030 Jan 02, 06:15 CRITICAL Act Now

Memory corruption in HLOS while running playready use-case. Rated critical severity (CVSS 9.3), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm 315 5g Iot Modem Firmware 9206 Lte Modem Firmware 9207 Lte Modem Firmware +290

NVD

CVSS 3.1

9.3

EPSS

0.1%

CVE-2023-28569 Nov 07, 06:15 MEDIUM This Month

Information disclosure in WLAN HAL while handling command through WMI interfaces. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Qualcomm Aqt1000 Firmware Ar9380 Firmware +205

NVD

CVSS 3.1

5.5

EPSS

0.1%

CVE-2023-28568 Nov 07, 06:15 MEDIUM This Month

Information disclosure in WLAN HAL when reception status handler is called. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Qualcomm Aqt1000 Firmware Fastconnect 6200 Firmware +85

NVD

CVSS 3.1

5.5

EPSS

0.1%

CVE-2023-28566 Nov 07, 06:15 MEDIUM This Month

Information disclosure in WLAN HAL while handling the WMI state info command. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Qualcomm Aqt1000 Firmware Csrb31024 Firmware +122

NVD

CVSS 3.1

5.5

EPSS

0.1%

CVE-2023-28563 Nov 07, 06:15 MEDIUM This Month

Information disclosure in IOE Firmware while handling WMI command. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Qualcomm Aqt1000 Firmware Ar8031 Firmware +227

NVD

CVSS 3.1

5.5

EPSS

0.1%

CVE-2023-28556 Nov 07, 06:15 HIGH This Week

Cryptographic issue in HLOS during key management. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Qualcomm 315 5g Iot Modem Firmware Aqt1000 Firmware Ar8031 Firmware +217

NVD

CVSS 3.1

7.8

EPSS

0.1%

CVE-2023-28545 Nov 07, 06:15 HIGH This Week

Memory corruption in TZ Secure OS while loading an app ELF. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm 315 5g Iot Modem Firmware Aqt1000 Firmware Ar8031 Firmware +195

NVD

CVSS 3.1

7.8

EPSS

0.1%

CVE-2023-24852 Nov 07, 06:15 HIGH This Week

Memory Corruption in Core due to secure memory access by user while loading modem image. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Buffer Overflow Qualcomm 315 5g Iot Modem Firmware Aqt1000 Firmware +263

NVD

CVSS 3.1

7.8

EPSS

0.1%

CVE-2023-22388 Nov 07, 06:15 CRITICAL Act Now

Memory Corruption in Multi-mode Call Processor while processing bit mask API. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Memory Corruption Qualcomm 315 5g Iot Modem Firmware 9206 Lte Modem Firmware +221

NVD

CVSS 3.1

9.8

EPSS

0.4%

CVE-2023-28559 Sep 05, 07:15 HIGH This Week

Memory corruption in WLAN FW while processing command parameters from untrusted WMI payload. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm Aqt1000 Firmware Ar8031 Firmware Ar9380 Firmware +208

NVD

CVSS 3.1

7.8

EPSS

0.1%

CVE-2023-28558 Sep 05, 07:15 HIGH This Week

Memory corruption in WLAN handler while processing PhyID in Tx status handler. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm 315 5g Iot Modem Firmware Aqt1000 Firmware Ar8031 Firmware +192

NVD

CVSS 3.1

7.8

EPSS

0.1%

CVE-2023-28557 Sep 05, 07:15 HIGH This Week

Memory corruption in WLAN HAL while processing command parameters from untrusted WMI payload. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm 315 5g Iot Modem Firmware Aqt1000 Firmware Ar8031 Firmware +270

NVD

CVSS 3.1

7.8

EPSS

0.1%

CVE-2023-28549 Sep 05, 07:15 HIGH This Week

Memory corruption in WLAN HAL while parsing Rx buffer in processing TLV payload. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm 315 5g Iot Modem Firmware Aqt1000 Firmware Ar8035 Firmware +217

NVD

CVSS 3.1

7.8

EPSS

0.1%

CVE-2023-28548 Sep 05, 07:15 HIGH PATCH This Week

Memory corruption in WLAN HAL while processing Tx/Rx commands from QDART. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Buffer Overflow Qualcomm Aqt1000 Firmware Ar8035 Firmware Ar9380 Firmware +176

NVD

CVSS 3.1

7.8

EPSS

0.1%

CVE-2023-28544 Sep 05, 07:15 HIGH This Week

Memory corruption in WLAN while sending transmit command from HLOS to UTF handlers. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm Aqt1000 Firmware Ar9380 Firmware Csr8811 Firmware +202

NVD

CVSS 3.1

7.8

EPSS

0.1%

CVE-2025-47383

EPSS 0% CVSS 7.2

HIGH This Week

5G Fixed Wireless Access Platform Firmware versions up to - contains a vulnerability that allows attackers to cryptographic issue when a VoWiFi call is triggered from UE (CVSS 7.2).

Information Disclosure Qualcomm 5g Fixed Wireless Access Platform Firmware +199

NVD

CVE-2024-43050

EPSS 0% CVSS 7.8

HIGH This Week

Buffer Overflow Stack Overflow Qualcomm +54

NVD

CVE-2024-33056

EPSS 0% CVSS 7.8

HIGH This Week

Memory corruption when allocating and accessing an entry in an SMEM partition continuously. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm 205 Mobile Platform Firmware +322

NVD

CVE-2024-33044

EPSS 0% CVSS 7.8

HIGH This Week

Memory corruption while Configuring the SMR/S2CR register in Bypass mode. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm 315 5g Iot Modem Firmware +207

NVD

CVE-2023-43511

EPSS 0% CVSS 7.5

HIGH This Week

Denial Of Service Qualcomm 315 5g Iot Modem Firmware +349

NVD

CVE-2023-33110

EPSS 0% CVSS 7.8

HIGH This Week

Buffer Overflow Memory Corruption Qualcomm +118

NVD

CVE-2023-33109

EPSS 0% CVSS 7.5

HIGH This Week

Denial Of Service Null Pointer Dereference Qualcomm +304

NVD

CVE-2023-33062

EPSS 0% CVSS 7.5

HIGH This Week

Buffer Overflow Qualcomm 315 5g Iot Modem Firmware +283

NVD

CVE-2023-33040

EPSS 0% CVSS 7.5

HIGH This Week

Buffer Overflow Qualcomm 315 5g Iot Modem Firmware +138

NVD

CVE-2023-33038

EPSS 0% CVSS 6.7

MEDIUM This Month

Memory corruption while receiving a message in Bus Socket Transport Server. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Integer Overflow Qualcomm +139

NVD

CVE-2023-33036

EPSS 0% CVSS 7.1

HIGH This Week

Denial Of Service Null Pointer Dereference Qualcomm +102

NVD

CVE-2023-33033

EPSS 0% CVSS 8.4

HIGH This Week

Memory corruption in Audio during playback with speaker protection. Rated high severity (CVSS 8.4), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Memory Corruption Qualcomm +259

NVD

CVE-2023-33032

EPSS 0% CVSS 9.3

CRITICAL Act Now

Buffer Overflow Integer Overflow Qualcomm +117

NVD

CVE-2023-33030

EPSS 0% CVSS 9.3

CRITICAL Act Now

Memory corruption in HLOS while running playready use-case. Rated critical severity (CVSS 9.3), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm 315 5g Iot Modem Firmware +292

NVD

CVE-2023-28569

EPSS 0% CVSS 5.5

MEDIUM This Month

Information disclosure in WLAN HAL while handling command through WMI interfaces. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Qualcomm +207

NVD

CVE-2023-28568

EPSS 0% CVSS 5.5

MEDIUM This Month

Information disclosure in WLAN HAL when reception status handler is called. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Qualcomm +87

NVD

CVE-2023-28566

EPSS 0% CVSS 5.5

MEDIUM This Month

Information disclosure in WLAN HAL while handling the WMI state info command. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Qualcomm +124

NVD

CVE-2023-28563

EPSS 0% CVSS 5.5

MEDIUM This Month

Information disclosure in IOE Firmware while handling WMI command. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Qualcomm +229

NVD

CVE-2023-28556

EPSS 0% CVSS 7.8

HIGH This Week

Cryptographic issue in HLOS during key management. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Qualcomm 315 5g Iot Modem Firmware +219

NVD

CVE-2023-28545

EPSS 0% CVSS 7.8

HIGH This Week

Memory corruption in TZ Secure OS while loading an app ELF. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm 315 5g Iot Modem Firmware +197

NVD

CVE-2023-24852

EPSS 0% CVSS 7.8

HIGH This Week

Memory Corruption in Core due to secure memory access by user while loading modem image. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Buffer Overflow Qualcomm +265

NVD

CVE-2023-22388

EPSS 0% CVSS 9.8

CRITICAL Act Now

Buffer Overflow Memory Corruption Qualcomm +223

NVD

CVE-2023-28559

EPSS 0% CVSS 7.8

HIGH This Week

Memory corruption in WLAN FW while processing command parameters from untrusted WMI payload. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm Aqt1000 Firmware +210

NVD

CVE-2023-28558

EPSS 0% CVSS 7.8

HIGH This Week

Memory corruption in WLAN handler while processing PhyID in Tx status handler. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm 315 5g Iot Modem Firmware +194

NVD

CVE-2023-28557

EPSS 0% CVSS 7.8

HIGH This Week

Memory corruption in WLAN HAL while processing command parameters from untrusted WMI payload. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm 315 5g Iot Modem Firmware +272

NVD

CVE-2023-28549

EPSS 0% CVSS 7.8

HIGH This Week

Memory corruption in WLAN HAL while parsing Rx buffer in processing TLV payload. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm 315 5g Iot Modem Firmware +219

NVD

CVE-2023-28548

EPSS 0% CVSS 7.8

HIGH PATCH This Week

Memory corruption in WLAN HAL while processing Tx/Rx commands from QDART. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Buffer Overflow Qualcomm Aqt1000 Firmware +178

NVD

CVE-2023-28544

EPSS 0% CVSS 7.8

HIGH This Week

Memory corruption in WLAN while sending transmit command from HLOS to UTF handlers. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm Aqt1000 Firmware +204

NVD