Qualcomm Snapdragon 710 Mobile Platform vulnerabilities, page 2
64 vulnerabilities
Known vulnerabilities in Qualcomm Snapdragon 710 Mobile Platform, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
MediumCVE-2024-33043qualcomm, inc. · snapdragon +197 moreBuffer Over-read in FM HostTransient DOS while handling PS event when Program Service name length offset value is set to 255.EPSS0.09%MediumCVE-2024-33016qualcomm, inc. · snapdragon +331 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in Storagememory corruption when an invalid firehose patch command is invoked.EPSS0.15%HighCVE-2024-33056qualcomm, inc. · snapdragon +323 moreBuffer Over-read in MProcMemory corruption when allocating and accessing an entry in an SMEM partition continuously.EPSS0.10%HighCVE-2024-33014qualcomm, inc. · snapdragon +319 moreBuffer Over-read in WLAN HostTransient DOS while parsing ESP IE from beacon/probe response frame.EPSS0.32%HighCVE-2024-23353qualcomm, inc. · snapdragon +247 moreBuffer Over-read in Multi Mode Call ProcessorTransient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI.EPSS0.35%MediumCVE-2024-23357qualcomm, inc. · snapdragon +236 moreNULL Pointer Dereference in HLOSTransient DOS while importing a PKCS#8-encoded RSA key with zero bytes modulus.EPSS0.09%HighCVE-2024-23356qualcomm, inc. · snapdragon +208 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in HLOSMemory corruption during session sign renewal request calls in HLOS.EPSS0.11%HighCVE-2024-23368qualcomm, inc. · snapdragon +341 moreBuffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Qualcomm IPCMemory corruption when allocating and accessing an entry in an SMEM partition.EPSS0.10%HighCVE-2024-23373qualcomm, inc. · snapdragon +220 moreUse After Free in GraphicsMemory corruption when IOMMU unmap operation fails, the DMA and anon buffers are getting released.EPSS0.15%CriticalCVE-2023-43518qualcomm, inc. · snapdragon +147 moreUntrusted Pointer Dereference in VideoMemory corruption in video while parsing invalid mp2 clip.EPSS0.26%HighCVE-2023-43511qualcomm, inc. · snapdragon +350 moreLoop with Unreachable Exit Condition (Infinite Loop) in WLAN FirmwareTransient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header.EPSS0.32%HighCVE-2023-43533qualcomm, inc. · snapdragon +232 moreBuffer Over-read in WLAN FirmwareTransient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame.EPSS0.32%HighCVE-2023-43513qualcomm, inc. · snapdragon +261 moreUse of Out-of-range Pointer Offset in PCIeMemory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element.EPSS0.11%HighCVE-2023-43536qualcomm, inc. · snapdragon +303 moreBuffer Over-read in WLAN FirmwareTransient DOS while parse fils IE with length equal to 1.EPSS0.32%CriticalCVE-2023-22388qualcomm, inc. · snapdragon +223 moreUse of Out-of-range Pointer Offset in Multi-mode Call ProcessorMemory Corruption in Multi-mode Call Processor while processing bit mask API.EPSS0.35%CriticalCVE-2023-22385qualcomm, inc. · snapdragon +239 moreBuffer Over-read in Data ModemMemory Corruption in Data Modem while making a MO call or MT VOLTE call.EPSS0.42%HighCVE-2023-24850qualcomm, inc. · snapdragon +204 moreImproper Validation of Array Index in HLOSMemory Corruption in HLOS while importing a cryptographic key into KeyMaster Trusted Application.EPSS0.12%HighCVE-2023-24849qualcomm, inc. · snapdragon +236 moreBuffer Over-read in Data ModemInformation Disclosure in data Modem while parsing an FMTP line in an SDP message.EPSS0.36%HighCVE-2023-24848qualcomm, inc. · snapdragon +242 moreBuffer Over-read in Data ModemInformation Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value.EPSS0.36%HighCVE-2023-24847qualcomm, inc. · snapdragon +255 moreNULL pointer Dereference in ModemTransient DOS in Modem while allocating DSM items.EPSS0.39%