Qualcomm Snapdragon 636 Mobile Platform vulnerabilities, page 2
47 vulnerabilities
Known vulnerabilities in Qualcomm Snapdragon 636 Mobile Platform, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2023-21628qualcomm, inc. · snapdragon +283 moreBuffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN HALMemory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command.EPSS0.12%HighCVE-2023-21665qualcomm, inc. · snapdragon +220 moreIncorrect Type Conversion or Cast in GraphicsMemory corruption in Graphics while importing a file.EPSS0.18%HighCVE-2023-43511qualcomm, inc. · snapdragon +350 moreLoop with Unreachable Exit Condition (Infinite Loop) in WLAN FirmwareTransient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header.EPSS0.32%HighCVE-2023-43533qualcomm, inc. · snapdragon +232 moreBuffer Over-read in WLAN FirmwareTransient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame.EPSS0.32%CriticalCVE-2023-22388qualcomm, inc. · snapdragon +223 moreUse of Out-of-range Pointer Offset in Multi-mode Call ProcessorMemory Corruption in Multi-mode Call Processor while processing bit mask API.EPSS0.35%CriticalCVE-2023-22385qualcomm, inc. · snapdragon +239 moreBuffer Over-read in Data ModemMemory Corruption in Data Modem while making a MO call or MT VOLTE call.EPSS0.42%HighCVE-2023-24849qualcomm, inc. · snapdragon +236 moreBuffer Over-read in Data ModemInformation Disclosure in data Modem while parsing an FMTP line in an SDP message.EPSS0.36%HighCVE-2023-24848qualcomm, inc. · snapdragon +242 moreBuffer Over-read in Data ModemInformation Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value.EPSS0.36%HighCVE-2023-24847qualcomm, inc. · snapdragon +255 moreNULL pointer Dereference in ModemTransient DOS in Modem while allocating DSM items.EPSS0.39%HighCVE-2023-28544qualcomm, inc. · snapdragon +205 moreBuffer Copy without Checking the Size of Input in WLAN FirmwareMemory corruption in WLAN while sending transmit command from HLOS to UTF handlers.EPSS0.12%HighCVE-2023-28549qualcomm, inc. · snapdragon +220 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in WLAN HALMemory corruption in WLAN HAL while parsing Rx buffer in processing TLV payload.EPSS0.12%HighCVE-2023-28588qualcomm, inc. · snapdragon +208 moreInteger Overflow or Wraparound in Bluetooth HostTransient DOS in Bluetooth Host while rfc slot allocation.EPSS0.52%HighCVE-2023-28558qualcomm, inc. · snapdragon +195 moreImproper Validation of Array Index in WLAN HALMemory corruption in WLAN handler while processing PhyID in Tx status handler.EPSS0.12%HighCVE-2023-28557qualcomm, inc. · snapdragon +275 moreImproper Validation of Array Index in WLAN HALMemory corruption in WLAN HAL while processing command parameters from untrusted WMI payload.EPSS0.12%HighCVE-2023-28551qualcomm, inc. · snapdragon +242 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in UTILSMemory corruption in UTILS when modem processes memory specific Diag commands having arbitrary address values as input arguments.EPSS0.12%HighCVE-2023-28560qualcomm, inc. · snapdragon +267 moreBuffer Copy Without Checking Size of Input in WLAN HALMemory corruption in WLAN HAL while processing devIndex from untrusted WMI payload.EPSS0.12%HighCVE-2023-28559qualcomm, inc. · snapdragon +211 moreBuffer Copy Without Checking Size of Input in WLAN HALMemory corruption in WLAN FW while processing command parameters from untrusted WMI payload.EPSS0.12%HighCVE-2023-28550qualcomm, inc. · snapdragon +329 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in MPP PerformanceMemory corruption in MPP performance while accessing DSM watermark using external memory address.EPSS0.12%HighCVE-2023-28546qualcomm, inc. · snapdragon +274 moreBuffer Copy Without Checking Size of Input in SPS ApplicationsMemory Corruption in SPS Application while exporting public key in sorter TA.EPSS0.11%HighCVE-2023-33110qualcomm, inc. · snapdragon +118 moreUse of Out-of-range Pointer Offset in AudioThe session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may lead to race condition between event callback - PCM close and reset session index causing memory corruption.EPSS0.08%