Qualcomm Smart Audio 400 vulnerabilities, page 3
54 vulnerabilities
Known vulnerabilities in Qualcomm Smart Audio 400, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2023-24851qualcomm, inc. · snapdragon +186 moreBuffer Copy Without Checking Size of Input in WLAN HOSTMemory Corruption in WLAN HOST while parsing QMI response message from firmware.EPSS0.12%HighCVE-2023-28565qualcomm, inc. · snapdragon +292 moreImproper Validation of Array Index in WLAN HALMemory corruption in WLAN HAL while handling command streams through WMI interfaces.EPSS0.12%HighCVE-2023-28541qualcomm, inc. · snapdragon +198 moreBuffer Over-read in WLAN HostMemory Corruption in Data Modem while processing DMA buffer release event about CFR data.EPSS0.12%HighCVE-2023-28547qualcomm, inc. · snapdragon +295 moreBuffer Copy Without Checking Size of Input in SPS ApplicationsMemory corruption in SPS Application while requesting for public key in sorter TA.EPSS0.11%HighCVE-2023-28564qualcomm, inc. · snapdragon +247 moreUse of Out-of-range Pointer Offset in WLAN HALMemory corruption in WLAN HAL while passing command parameters through WMI interfaces.EPSS0.12%CriticalCVE-2023-28578qualcomm, inc. · snapdragon +333 moreImproper Input Validation in ServicesMemory corruption in Core Services while executing the command for removing a single event listener.EPSS0.12%HighCVE-2023-28542qualcomm, inc. · snapdragon +183 moreBuffer Over-read in WLAN HOSTMemory Corruption in WLAN HOST while fetching TX status information.EPSS0.12%HighCVE-2023-28567qualcomm, inc. · snapdragon +285 moreImproper Validation of Array Index in WLAN HALMemory corruption in WLAN HAL while handling command through WMI interfaces.EPSS0.12%HighCVE-2023-33019qualcomm, inc. · snapdragon +82 moreImproper Authorization in WLAN HostTransient DOS in WLAN Host while doing channel switch announcement (CSA), when a mobile station receives invalid channel in CSA IE.EPSS0.35%HighCVE-2023-33023qualcomm, inc. · snapdragon +281 moreBuffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in SPS-ApplicationsMemory corruption while processing finish_sign command to pass a rsp buffer.EPSS0.11%HighCVE-2023-33021qualcomm, inc. · snapdragon +163 moreUse After Free in GraphicsMemory corruption in Graphics while processing user packets for command submission.EPSS0.12%HighCVE-2023-33066qualcomm, inc. · snapdragon +307 moreUse of Out-of-range Pointer Offset in AudioMemory corruption in Audio while processing RT proxy port register driver.EPSS0.11%HighCVE-2023-33086qualcomm, inc. · snapdragon +150 moreImproper Release of Memory Before Removing Last Reference in Data ModemTransient DOS while processing multiple IKEV2 Informational Request to device from IPSEC server with different identifiers.EPSS0.32%HighCVE-2023-33020qualcomm, inc. · snapdragon +82 moreImproper Authorization in WLAN HostTransient DOS in WLAN Host when an invalid channel (like channel out of range) is received in STA during CSA IE.EPSS0.35%