Qualcomm Snapdragon 835 Mobile Pc Platform vulnerabilities, page 3
73 vulnerabilities
Known vulnerabilities in Qualcomm Snapdragon 835 Mobile Pc Platform, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2023-24848qualcomm, inc. · snapdragon +242 moreBuffer Over-read in Data ModemInformation Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value.EPSS0.36%HighCVE-2023-24847qualcomm, inc. · snapdragon +255 moreNULL pointer Dereference in ModemTransient DOS in Modem while allocating DSM items.EPSS0.39%HighCVE-2023-28544qualcomm, inc. · snapdragon +205 moreBuffer Copy without Checking the Size of Input in WLAN FirmwareMemory corruption in WLAN while sending transmit command from HLOS to UTF handlers.EPSS0.12%MediumCVE-2023-28568qualcomm, inc. · snapdragon +87 moreBuffer Over-read in WLAN HALInformation disclosure in WLAN HAL when reception status handler is called.EPSS0.14%HighCVE-2023-28539qualcomm, inc. · snapdragon +157 moreBuffer Copy Without Checking Size of Input in WLAN HostMemory corruption in WLAN Host when the firmware invokes multiple WMI Service Available command.EPSS0.12%MediumCVE-2023-28554qualcomm, inc. · snapdragon +146 moreBuffer Over-read in Qualcomm IPCInformation Disclosure in Qualcomm IPC while reading values from shared memory in VM.EPSS0.14%CriticalCVE-2023-28574qualcomm, inc. · snapdragon +77 moreImproper Input Validation in CoreMemory corruption in core services when Diag handler receives a command to configure event listeners.EPSS0.13%HighCVE-2023-28549qualcomm, inc. · snapdragon +220 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in WLAN HALMemory corruption in WLAN HAL while parsing Rx buffer in processing TLV payload.EPSS0.12%MediumCVE-2023-28586qualcomm, inc. · snapdragon +307 moreImproper Restriction of Operation within the Bounds of a Memory Buffer in TZ Secure OSInformation disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE.EPSS0.14%HighCVE-2023-28588qualcomm, inc. · snapdragon +208 moreInteger Overflow or Wraparound in Bluetooth HostTransient DOS in Bluetooth Host while rfc slot allocation.EPSS0.52%HighCVE-2023-28570qualcomm, inc. · snapdragon +83 moreBuffer Copy without Checking Size of Input in AudioMemory corruption while processing audio effects.EPSS0.14%HighCVE-2023-28558qualcomm, inc. · snapdragon +195 moreImproper Validation of Array Index in WLAN HALMemory corruption in WLAN handler while processing PhyID in Tx status handler.EPSS0.12%HighCVE-2023-28557qualcomm, inc. · snapdragon +275 moreImproper Validation of Array Index in WLAN HALMemory corruption in WLAN HAL while processing command parameters from untrusted WMI payload.EPSS0.12%HighCVE-2023-28551qualcomm, inc. · snapdragon +242 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in UTILSMemory corruption in UTILS when modem processes memory specific Diag commands having arbitrary address values as input arguments.EPSS0.12%MediumCVE-2023-28569qualcomm, inc. · snapdragon +207 moreBuffer Over-read in WLAN HALInformation disclosure in WLAN HAL while handling command through WMI interfaces.EPSS0.14%HighCVE-2023-28559qualcomm, inc. · snapdragon +211 moreBuffer Copy Without Checking Size of Input in WLAN HALMemory corruption in WLAN FW while processing command parameters from untrusted WMI payload.EPSS0.12%HighCVE-2023-28550qualcomm, inc. · snapdragon +329 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in MPP PerformanceMemory corruption in MPP performance while accessing DSM watermark using external memory address.EPSS0.12%HighCVE-2023-28546qualcomm, inc. · snapdragon +274 moreBuffer Copy Without Checking Size of Input in SPS ApplicationsMemory Corruption in SPS Application while exporting public key in sorter TA.EPSS0.11%MediumCVE-2023-28566qualcomm, inc. · snapdragon +124 moreBuffer Over-read in WLAN HALInformation disclosure in WLAN HAL while handling the WMI state info command.EPSS0.14%HighCVE-2023-33092qualcomm, inc. · snapdragon +90 moreBuffer Copy Without Checking Size of Input in Bluetooth HOSTMemory corruption while processing pin reply in Bluetooth, when pin code received from APP layer is greater than expected size.EPSS0.16%