Snapdragon X70 Firmware

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-21631 Jul 04, 05:15 CRITICAL Act Now

Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Qualcomm Apq8017 Firmware Apq8037 Firmware Aqt1000 Firmware +152

NVD

CVSS 3.1

9.8

EPSS

0.4%

CVE-2023-21629 Jul 04, 05:15 MEDIUM This Month

Memory Corruption in Modem due to double free while parsing the PKCS15 sim files. Rated medium severity (CVSS 6.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm Apq8017 Firmware Apq8037 Firmware Aqt1000 Firmware +204

NVD

CVSS 3.1

6.8

EPSS

0.2%

CVE-2023-21631

EPSS 0% CVSS 9.8

CRITICAL Act Now

Information Disclosure Qualcomm Apq8017 Firmware +154

NVD

CVE-2023-21629

EPSS 0% CVSS 6.8

MEDIUM This Month

Buffer Overflow Qualcomm Apq8017 Firmware +206

NVD