Qualcomm Qdx1011 vulnerabilities, page 5
116 vulnerabilities
Known vulnerabilities in Qualcomm Qdx1011, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2023-43542qualcomm, inc. · snapdragon +202 moreBuffer Copy Without Checking Size of Input in Trusted Execution EnvironmentMemory corruption while copying a keyblob`s material when the key material`s size is not accurately checked.EPSS0.10%HighCVE-2023-43514qualcomm, inc. · snapdragon +81 moreUse After Free in DSP ServicesMemory corruption while invoking IOCTLs calls from user space for internal mem MAP and internal mem UNMAP.EPSS0.11%HighCVE-2023-43530qualcomm, inc. · snapdragon +154 moreInteger Overflow or Wraparound in HLOSMemory corruption in HLOS while checking for the storage type.EPSS0.11%HighCVE-2023-43550qualcomm, inc. · snapdragon +130 moreInteger Overflow or Wraparound in Core ServicesMemory corruption while processing a QMI request for allocating memory from a DHMS supported subsystem.EPSS0.11%HighCVE-2023-43513qualcomm, inc. · snapdragon +261 moreUse of Out-of-range Pointer Offset in PCIeMemory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element.EPSS0.11%HighCVE-2023-43531qualcomm, inc. · snapdragon +124 moreAccess of Uninitialized Pointer in SPS ApplicationsMemory corruption while verifying the serialized header when the key pairs are generated.EPSS0.11%HighCVE-2023-43547qualcomm, inc. · snapdragon +118 moreUse After Free in Automotive MultimediaMemory corruption while invoking IOCTLs calls in Automotive Multimedia.EPSS0.11%HighCVE-2023-43546qualcomm, inc. · snapdragon +118 moreUse After Free in Automotive MultimediaMemory corruption while invoking HGSL IOCTL context create.EPSS0.11%CriticalCVE-2023-43538qualcomm, inc. · snapdragon +133 moreBuffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in TZ Secure OSMemory corruption in TZ Secure OS while Tunnel Invoke Manager initialization.EPSS0.10%HighCVE-2023-24844qualcomm, inc. · snapdragon +42 moreImproper Access Control in CoreMemory Corruption in Core while invoking a call to Access Control core library with hardware protected address range.EPSS0.10%HighCVE-2023-24850qualcomm, inc. · snapdragon +204 moreImproper Validation of Array Index in HLOSMemory Corruption in HLOS while importing a cryptographic key into KeyMaster Trusted Application.EPSS0.12%HighCVE-2023-24853qualcomm, inc. · snapdragon +111 moreImproper Input Validation in HLOSMemory Corruption in HLOS while registering for key provisioning notify.EPSS0.12%HighCVE-2023-24847qualcomm, inc. · snapdragon +255 moreNULL pointer Dereference in ModemTransient DOS in Modem while allocating DSM items.EPSS0.39%HighCVE-2023-24852qualcomm, inc. · snapdragon +265 moreImproper Authentication in CoreMemory Corruption in Core due to secure memory access by user while loading modem image.EPSS0.12%HighCVE-2023-28545qualcomm, inc. · snapdragon +198 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in TZ Secure OSMemory corruption in TZ Secure OS while loading an app ELF.EPSS0.14%HighCVE-2023-28547qualcomm, inc. · snapdragon +295 moreBuffer Copy Without Checking Size of Input in SPS ApplicationsMemory corruption in SPS Application while requesting for public key in sorter TA.EPSS0.11%CriticalCVE-2023-28574qualcomm, inc. · snapdragon +77 moreImproper Input Validation in CoreMemory corruption in core services when Diag handler receives a command to configure event listeners.EPSS0.13%MediumCVE-2023-28586qualcomm, inc. · snapdragon +307 moreImproper Restriction of Operation within the Bounds of a Memory Buffer in TZ Secure OSInformation disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE.EPSS0.14%HighCVE-2023-28556qualcomm, inc. · snapdragon +220 moreImproper Authorization in HLOSCryptographic issue in HLOS during key management.EPSS0.12%CriticalCVE-2023-28578qualcomm, inc. · snapdragon +333 moreImproper Input Validation in ServicesMemory corruption in Core Services while executing the command for removing a single event listener.EPSS0.12%