Most severe vulnerabilities for "qualcomm snapdragon 888+"

Where

Sort:

Google AndroidImproper Input Validation in Modem

Risk 86

Severity

9.8

Input Validation

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network.

First published (updated )

CVE-2023-21631

Google AndroidUse After Free in Graphics

Risk 74

Severity

8.4

Use After Free

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Memory corruption in Graphics while processing user packets for command submission.

First published (updated )

CVE-2023-33021

Google AndroidInteger Overflow or Wraparound in Audio

Risk 74

Severity

8.4

Integer Overflow

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Memory Corruption in Audio while allocating the ion buffer during the music playback.

First published (updated )

CVE-2023-22667

Google AndroidBuffer Over-read in WLAN HOST

Risk 69

Severity

7.8

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Memory Corruption in WLAN HOST while fetching TX status information.

First published (updated )

CVE-2023-28542

Google AndroidUse of Out-of-range Pointer Offset in Qualcomm IPC

Risk 69

Severity

7.8

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Arbitrary memory overwrite when VM gets compromised in TX write leading to Memory Corruption.

First published (updated )

CVE-2023-22387

Google AndroidBuffer Over-read in WLAN Firmware

Risk 43

Severity

7.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Transient DOS in WLAN Firmware while interpreting MBSSID IE of a received beacon frame.

First published (updated )

CVE-2023-33015

Google AndroidDouble Free in Modem

Risk 62

Severity

6.8

Double Free

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Memory Corruption in Modem due to double free while parsing the PKCS15 sim files.

First published (updated )

CVE-2023-21629

Qualcomm Fastconnect 6700 FirmwareInformation Exposure in DSP Services

Risk 36

Severity

6.2

Infoleak

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Information disclosure in DSP Services while loading dynamic module.

First published (updated )

CVE-2023-21624

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Trending

Company

Resources

Contact