Snapdragon X70 Firmware

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-21631 CRITICAL Act Now

Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure 315 5G Firmware 9205 Firmware Apq8017 Firmware Apq8037 Firmware +151

NVD

CVSS 3.1

9.8

EPSS

0.4%

CVE-2023-21629 MEDIUM This Month

Memory Corruption in Modem due to double free while parsing the PKCS15 sim files. Rated medium severity (CVSS 6.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow 315 5G Firmware Apq8017 Firmware Apq8037 Firmware Aqt1000 Firmware +203

NVD

CVSS 3.1

6.8

EPSS

0.2%

CVE-2023-21631

EPSS 0% CVSS 9.8

CRITICAL Act Now

Information Disclosure 315 5G Firmware 9205 Firmware +153

NVD

CVE-2023-21629

EPSS 0% CVSS 6.8

MEDIUM This Month

Buffer Overflow 315 5G Firmware Apq8017 Firmware +205

NVD