Qualcomm Snapdragon 8 Gen 1 Mobile vulnerabilities, page 4
92 vulnerabilities
Known vulnerabilities in Qualcomm Snapdragon 8 Gen 1 Mobile, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2024-33052qualcomm, inc. · snapdragon +197 moreBuffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in FM HostMemory corruption when user provides data for FM HCI command control operations.EPSS0.13%HighCVE-2024-23354qualcomm, inc. · snapdragon +74 moreUse After Free in Graphics LinuxMemory corruption when the IOCTL call is interrupted by a signal.EPSS0.16%HighCVE-2024-23363qualcomm, inc. · snapdragon +124 moreBuffer Over-read in WLAN FirmwareTransient DOS while processing an improperly formatted Fine Time Measurement (FTM) management frame.EPSS0.26%HighCVE-2024-23351qualcomm, inc. · snapdragon +91 moreImproper Access Control in Graphics LinuxMemory corruption as GPU registers beyond the last protected range can be accessed through LPAC submissions.EPSS0.14%CriticalCVE-2023-43556qualcomm, inc. · snapdragon +65 moreBuffer Copy Without Checking Size of Input in HypervisorMemory corruption in Hypervisor when platform information mentioned is not aligned.EPSS0.10%HighCVE-2023-43555qualcomm, inc. · snapdragon +113 moreBuffer Over-read in VideoInformation disclosure in Video while parsing mp2 clip with invalid section length.EPSS0.24%HighCVE-2023-43542qualcomm, inc. · snapdragon +202 moreBuffer Copy Without Checking Size of Input in Trusted Execution EnvironmentMemory corruption while copying a keyblob`s material when the key material`s size is not accurately checked.EPSS0.10%CriticalCVE-2023-43551qualcomm, inc. · snapdragon +234 moreImproper Authentication in Multi-Mode Call ProcessorCryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command.EPSS0.26%MediumCVE-2023-43527qualcomm, inc. · snapdragon +53 moreBuffer Over-read in VideoInformation disclosure while parsing dts header atom in Video.EPSS0.12%HighCVE-2023-43521qualcomm, inc. · snapdragon +76 moreUse After Free in HLOSMemory corruption when multiple listeners are being registered with the same file descriptor.EPSS0.11%HighCVE-2023-43515qualcomm, inc. · snapdragon +6 moreBuffer copy without checking size of input (Classic buffer overflow) in HLOSMemory corruption in HLOS while running kernel address sanitizers (syzkaller) on tmecom with DEBUG_FS enabled.EPSS0.11%CriticalCVE-2023-43548qualcomm, inc. · snapdragon +136 moreBuffer Copy Without Checking Size of Input in VideoMemory corruption while parsing qcp clip with invalid chunk data size.EPSS0.26%HighCVE-2023-43529qualcomm, inc. · snapdragon +154 moreReachable Assertion in Data ModemTransient DOS while processing IKEv2 Informational request messages, when a malformed fragment packet is received.EPSS0.32%HighCVE-2023-43549qualcomm, inc. · snapdragon +136 moreStack-based Buffer Overflow in WLAN HALMemory corruption while processing TPC target power table in FTM TPC.EPSS0.11%HighCVE-2023-43530qualcomm, inc. · snapdragon +154 moreInteger Overflow or Wraparound in HLOSMemory corruption in HLOS while checking for the storage type.EPSS0.11%HighCVE-2023-43550qualcomm, inc. · snapdragon +130 moreInteger Overflow or Wraparound in Core ServicesMemory corruption while processing a QMI request for allocating memory from a DHMS supported subsystem.EPSS0.11%HighCVE-2023-43531qualcomm, inc. · snapdragon +124 moreAccess of Uninitialized Pointer in SPS ApplicationsMemory corruption while verifying the serialized header when the key pairs are generated.EPSS0.11%HighCVE-2023-43539qualcomm, inc. · snapdragon +135 moreBuffer Over-read in WLAN FirmwareTransient DOS while processing an improperly formatted 802.11az Fine Time Measurement protocol frame.EPSS0.32%CriticalCVE-2023-43538qualcomm, inc. · snapdragon +133 moreBuffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in TZ Secure OSMemory corruption in TZ Secure OS while Tunnel Invoke Manager initialization.EPSS0.10%HighCVE-2023-28547qualcomm, inc. · snapdragon +295 moreBuffer Copy Without Checking Size of Input in SPS ApplicationsMemory corruption in SPS Application while requesting for public key in sorter TA.EPSS0.11%