Qualcomm Snapdragon 782G Mobile Platform vulnerabilities, page 4
84 vulnerabilities
Known vulnerabilities in Qualcomm Snapdragon 782G Mobile Platform, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2023-33089qualcomm, inc. · snapdragon +223 moreNULL Pointer Dereference in WLAN FirmwareTransient DOS when processing a NULL buffer while parsing WLAN vdev.EPSS0.47%HighCVE-2023-33110qualcomm, inc. · snapdragon +118 moreUse of Out-of-range Pointer Offset in AudioThe session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may lead to race condition between event callback - PCM close and reset session index causing memory corruption.EPSS0.08%HighCVE-2023-33062qualcomm, inc. · snapdragon +284 moreBuffer Over-read in WLAN FirmwareTransient DOS in WLAN Firmware while parsing a BTM request.EPSS0.34%HighCVE-2023-33109qualcomm, inc. · snapdragon +304 moreNULL Pointer Dereference in WLAN FirmwareTransient DOS while processing a WMI P2P listen start command (0xD00A) sent from host.EPSS0.34%HighCVE-2023-33098qualcomm, inc. · snapdragon +257 moreBuffer Over-read in WLAN FirmwareTransient DOS while parsing WPA IES, when it is passed with length more than expected size.EPSS0.47%HighCVE-2023-33038qualcomm, inc. · snapdragon +139 moreInteger Overflow or Wraparound in Radio Interface LayerMemory corruption while receiving a message in Bus Socket Transport Server.EPSS0.12%HighCVE-2023-33120qualcomm, inc. · snapdragon +227 moreUse After Free in AudioMemory corruption in Audio when memory map command is executed consecutively in ADSP.EPSS0.11%HighCVE-2023-33067qualcomm, inc. · snapdragon +110 moreUse of Out-of-range Pointer Offset in AudioMemory corruption in Audio while calling START command on host voice PCM multiple times for the same RX or TX tap points.EPSS0.11%HighCVE-2023-33118qualcomm, inc. · snapdragon +130 moreUse After Free in Automotive AudioMemory corruption while processing Listen Sound Model client payload buffer when there is a request for Listen Sound session get parameter from ST HAL.EPSS0.11%HighCVE-2023-33040qualcomm, inc. · snapdragon +139 moreBuffer Over-read in Data ModemTransient DOS in Data Modem during DTLS handshake.EPSS0.34%HighCVE-2023-33088qualcomm, inc. · snapdragon +300 moreNULL pointer dereference in WLAN FirmwareMemory corruption when processing cmd parameters while parsing vdev.EPSS0.16%HighCVE-2023-33033qualcomm, inc. · snapdragon +259 moreUse of Out-of-range Pointer Offset in AudioMemory corruption in Audio during playback with speaker protection.EPSS0.12%HighCVE-2023-33106qualcomm, inc. · snapdragon +147 moreUse of Out-of-range Pointer Offset in GraphicsMemory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.KEVEPSS0.79%HighCVE-2023-33065qualcomm, inc. · snapdragon +101 moreBuffer Over-read in AudioInformation disclosure in Audio while accessing AVCS services from ADSP payload.EPSS0.11%CriticalCVE-2023-33030qualcomm, inc. · snapdragon +293 moreBuffer Copy without Checking Size of Input in HLOSMemory corruption in HLOS while running playready use-case.EPSS0.12%HighCVE-2023-33113qualcomm, inc. · snapdragon +122 moreBuffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in KernelMemory corruption when resource manager sends the host kernel a reply message with multiple fragments.EPSS0.12%HighCVE-2023-33117qualcomm, inc. · snapdragon +136 moreUse After Free in AudioMemory corruption when HLOS allocates the response payload buffer to copy the data received from ADSP in response to AVCS_LOAD_MODULE command.EPSS0.11%HighCVE-2023-33094qualcomm, inc. · snapdragon +120 moreUse After Free in Linux GraphicsMemory corruption while running VK synchronization with KASAN enabled.EPSS0.12%HighCVE-2023-33057qualcomm, inc. · snapdragon +95 moreImproper Input Validation in Multi-Mode Call ProcessorTransient DOS in Multi-Mode Call Processor while processing UE policy container.EPSS0.32%HighCVE-2023-33068qualcomm, inc. · snapdragon +110 moreBuffer Copy Without Checking Size of Input in AudioMemory corruption in Audio while processing IIR config data from AFE calibration block.EPSS0.11%