Qualcomm Snapdragon 8 Gen 1 Mobile vulnerabilities, page 5

92 vulnerabilities

Known vulnerabilities in Qualcomm Snapdragon 8 Gen 1 Mobile, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.3CriticalCVE-2023-28578qualcomm, inc. · snapdragon +333 moreImproper Input Validation in ServicesMemory corruption in Core Services while executing the command for removing a single event listener.EPSS0.12%7.5HighCVE-2023-33101qualcomm, inc. · snapdragon +97 moreIncorrect Type Conversion or Cast in Multi-Mode Call ProcessorTransient DOS while processing DL NAS TRANSPORT message with payload length 0.EPSS0.32%7.5HighCVE-2023-33099qualcomm, inc. · snapdragon +97 moreImproper Input Validation in Multi-Mode Call ProcessorTransient DOS while processing SMS container of non-standard size received in DL NAS transport in NR.EPSS0.32%8.4HighCVE-2023-33023qualcomm, inc. · snapdragon +281 moreBuffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in SPS-ApplicationsMemory corruption while processing finish_sign command to pass a rsp buffer.EPSS0.11%7.5HighCVE-2023-33104qualcomm, inc. · snapdragon +95 moreImproper input Validation in Multi-Mode Call ProcessorTransient DOS while processing PDU Release command with a parameter PDU ID out of range.EPSS0.32%8.4HighCVE-2023-33119qualcomm, inc. · snapdragon +157 moreTime-of-check Time-of-use (TOCTOU) Race Condition in HypervisorMemory corruption while loading a VM from a signed VM image that is not coherent in the processor cache.EPSS0.08%7.5HighCVE-2023-33100qualcomm, inc. · snapdragon +48 moreImproper input validation in Multi-Mode Call ProcessorTransient DOS while processing DL NAS Transport message when message ID is not defined in the 3GPP specification.EPSS0.32%8.4HighCVE-2023-33066qualcomm, inc. · snapdragon +307 moreUse of Out-of-range Pointer Offset in AudioMemory corruption in Audio while processing RT proxy port register driver.EPSS0.11%7.5HighCVE-2023-33095qualcomm, inc. · snapdragon +95 moreReachable Assertion in Multi-Mode Call ProcessorTransient DOS while processing multiple payload container type with incorrect container length received in DL NAS transport OTA in NR.EPSS0.32%7.5HighCVE-2023-33096qualcomm, inc. · snapdragon +95 moreReachable Assertion in Multi-Mode Call ProcessorTransient DOS while processing DL NAS Transport message, as specified in 3GPP 24.501 v16.EPSS0.32%7.5HighCVE-2023-33086qualcomm, inc. · snapdragon +150 moreImproper Release of Memory Before Removing Last Reference in Data ModemTransient DOS while processing multiple IKEV2 Informational Request to device from IPSEC server with different identifiers.EPSS0.32%7.8HighCVE-2023-33115qualcomm, inc. · snapdragon +164 moreBuffer Over-read in Trusted Execution EnvironmentMemory corruption while processing buffer initialization, when trusted report for certain report types are generated.EPSS0.11%