Qualcomm Sdx57M vulnerabilities, page 5
133 vulnerabilities
Known vulnerabilities in Qualcomm Sdx57M, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2024-23353qualcomm, inc. · snapdragon +247 moreBuffer Over-read in Multi Mode Call ProcessorTransient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI.EPSS0.35%HighCVE-2024-23362qualcomm, inc. · snapdragon +230 moreImproper Input Validation in Trusted Execution EnvironmentCryptographic issue while parsing RSA keys in COBR format.EPSS0.12%HighCVE-2024-23385qualcomm, inc. · snapdragon +91 moreReachable Assertion in ModemTransient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at UE.EPSS0.25%HighCVE-2024-23352qualcomm, inc. · snapdragon +103 moreLoop with Unreachable Exit Condition (`Infinite Loop`) in Multi Mode Call ProcessorTransient DOS when NAS receives ODAC criteria of length 1 and type 1 in registration accept OTA.EPSS0.35%HighCVE-2024-23359qualcomm, inc. · snapdragon +159 moreBuffer Over-read in Multi Mode Call ProcessorInformation disclosure while decoding Tracking Area Update Accept or Attach Accept message received from network.EPSS0.26%MediumCVE-2026-24078qualcomm, inc. · snapdragon +141 moreExposure of Private Personal Information to an Unauthorized Actor in Data ModemInformation Disclosure when IPSec negotiation fails or is not established properly during NG-eCall SIP signaling.EPSS0.17%HighCVE-2026-24084qualcomm, inc. · snapdragon +122 moreInsecure Security Identifier Mechanism in Multi-Mode Call ProcessorWeak configuration when UE does not verify the consistency of its additional security capabilities with the replayed capabilities.EPSS0.25%HighCVE-2023-21673qualcomm, inc. · snapdragon +161 moreImproper Access Control in KernelImproper Access to the VM resource manager can lead to Memory Corruption.EPSS0.10%MediumCVE-2023-21629qualcomm, inc. · snapdragon +207 moreDouble Free in ModemMemory Corruption in Modem due to double free while parsing the PKCS15 sim files.EPSS0.19%HighCVE-2023-21664qualcomm, inc. · snapdragon +137 moreBuffer Copy without Checking the Size of Input(Classic Buffer Overflow) in Core PlatformMemory Corruption in Core Platform while printing the response buffer in log.EPSS0.12%CriticalCVE-2023-21651qualcomm, inc. · snapdragon +140 moreIncorrect Type Conversion or Cast in CoreMemory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE.EPSS0.12%CriticalCVE-2023-21631qualcomm, inc. · snapdragon +155 moreImproper Input Validation in ModemWeak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network.EPSS0.36%HighCVE-2023-21662qualcomm, inc. · snapdragon +136 moreBuffer Copy without Checking the Size of Input(Classic Buffer Overflow) in Core PlatformMemory corruption in Core Platform while printing the response buffer in log.EPSS0.12%CriticalCVE-2023-43556qualcomm, inc. · snapdragon +65 moreBuffer Copy Without Checking Size of Input in HypervisorMemory corruption in Hypervisor when platform information mentioned is not aligned.EPSS0.10%HighCVE-2023-43542qualcomm, inc. · snapdragon +202 moreBuffer Copy Without Checking Size of Input in Trusted Execution EnvironmentMemory corruption while copying a keyblob`s material when the key material`s size is not accurately checked.EPSS0.10%CriticalCVE-2023-43551qualcomm, inc. · snapdragon +234 moreImproper Authentication in Multi-Mode Call ProcessorCryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command.EPSS0.26%HighCVE-2023-43529qualcomm, inc. · snapdragon +154 moreReachable Assertion in Data ModemTransient DOS while processing IKEv2 Informational request messages, when a malformed fragment packet is received.EPSS0.32%HighCVE-2023-43530qualcomm, inc. · snapdragon +154 moreInteger Overflow or Wraparound in HLOSMemory corruption in HLOS while checking for the storage type.EPSS0.11%CriticalCVE-2023-43538qualcomm, inc. · snapdragon +133 moreBuffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in TZ Secure OSMemory corruption in TZ Secure OS while Tunnel Invoke Manager initialization.EPSS0.10%CriticalCVE-2023-22388qualcomm, inc. · snapdragon +223 moreUse of Out-of-range Pointer Offset in Multi-mode Call ProcessorMemory Corruption in Multi-mode Call Processor while processing bit mask API.EPSS0.35%