Qualcomm Snapdragon 870 5G vulnerabilities, page 2
29 vulnerabilities
Known vulnerabilities in Qualcomm Snapdragon 870 5G, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2023-28576qualcomm, inc. · snapdragon +30 moreTime-of-check Time-of-use (TOCTOU) Race Condition in Camera Kernel DriverThe buffer obtained from kernel APIs such as cam_mem_get_cpu_buf() may be readable/writable in userspace after kernel accesses it. In other words, user mode may race and modify the packet header (e.g. header.count), causing checks (e.g. size checks) in kernel code to be invalid. This may lead to out-of-bounds read/write issues.EPSS0.08%HighCVE-2023-28577qualcomm, inc. · snapdragon +30 moreMultiple Dmabuf Kernel Address UAF VulnerabilityIn the function call related to CAM_REQ_MGR_RELEASE_BUF there is no check if the buffer is being used. So when a function called cam_mem_get_cpu_buf to get the kernel va to use, another thread can call CAM_REQ_MGR_RELEASE_BUF to unmap the kernel va which cause UAF of the kernel address.EPSS0.12%HighCVE-2023-28541qualcomm, inc. · snapdragon +198 moreBuffer Over-read in WLAN HostMemory Corruption in Data Modem while processing DMA buffer release event about CFR data.EPSS0.12%HighCVE-2023-28573qualcomm, inc. · snapdragon +195 moreImproper Validation of Array Index in WLAN HALMemory corruption in WLAN HAL while parsing WMI command parameters.EPSS0.12%HighCVE-2023-28542qualcomm, inc. · snapdragon +183 moreBuffer Over-read in WLAN HOSTMemory Corruption in WLAN HOST while fetching TX status information.EPSS0.12%HighCVE-2023-28567qualcomm, inc. · snapdragon +285 moreImproper Validation of Array Index in WLAN HALMemory corruption in WLAN HAL while handling command through WMI interfaces.EPSS0.12%CriticalCVE-2023-28581qualcomm, inc. · snapdragon +25 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in WLAN FirmwareMemory corruption in WLAN Firmware while parsing receieved GTK Keys in GTK KDE.EPSS0.50%HighCVE-2023-33015qualcomm, inc. · snapdragon +190 moreBuffer Over-read in WLAN FirmwareTransient DOS in WLAN Firmware while interpreting MBSSID IE of a received beacon frame.EPSS0.38%HighCVE-2023-33021qualcomm, inc. · snapdragon +163 moreUse After Free in GraphicsMemory corruption in Graphics while processing user packets for command submission.EPSS0.12%