Qualcomm Snapdragon 8 Gen 2 Mobile vulnerabilities, page 4
79 vulnerabilities
Known vulnerabilities in Qualcomm Snapdragon 8 Gen 2 Mobile, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2023-43539qualcomm, inc. · snapdragon +135 moreBuffer Over-read in WLAN FirmwareTransient DOS while processing an improperly formatted 802.11az Fine Time Measurement protocol frame.EPSS0.32%HighCVE-2023-43547qualcomm, inc. · snapdragon +118 moreUse After Free in Automotive MultimediaMemory corruption while invoking IOCTLs calls in Automotive Multimedia.EPSS0.11%HighCVE-2023-43546qualcomm, inc. · snapdragon +118 moreUse After Free in Automotive MultimediaMemory corruption while invoking HGSL IOCTL context create.EPSS0.11%CriticalCVE-2023-43538qualcomm, inc. · snapdragon +133 moreBuffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in TZ Secure OSMemory corruption in TZ Secure OS while Tunnel Invoke Manager initialization.EPSS0.10%CriticalCVE-2023-28582qualcomm, inc. · snapdragon +42 moreBuffer Copy Without Checking Size of Input in Data ModemMemory corruption in Data Modem while verifying hello-verify message during the DTLS handshake.EPSS0.44%HighCVE-2023-28547qualcomm, inc. · snapdragon +295 moreBuffer Copy Without Checking Size of Input in SPS ApplicationsMemory corruption in SPS Application while requesting for public key in sorter TA.EPSS0.11%CriticalCVE-2023-28578qualcomm, inc. · snapdragon +333 moreImproper Input Validation in ServicesMemory corruption in Core Services while executing the command for removing a single event listener.EPSS0.12%HighCVE-2023-33101qualcomm, inc. · snapdragon +97 moreIncorrect Type Conversion or Cast in Multi-Mode Call ProcessorTransient DOS while processing DL NAS TRANSPORT message with payload length 0.EPSS0.32%HighCVE-2023-33099qualcomm, inc. · snapdragon +97 moreImproper Input Validation in Multi-Mode Call ProcessorTransient DOS while processing SMS container of non-standard size received in DL NAS transport in NR.EPSS0.32%HighCVE-2023-33023qualcomm, inc. · snapdragon +281 moreBuffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in SPS-ApplicationsMemory corruption while processing finish_sign command to pass a rsp buffer.EPSS0.11%HighCVE-2023-33104qualcomm, inc. · snapdragon +95 moreImproper input Validation in Multi-Mode Call ProcessorTransient DOS while processing PDU Release command with a parameter PDU ID out of range.EPSS0.32%HighCVE-2023-33119qualcomm, inc. · snapdragon +157 moreTime-of-check Time-of-use (TOCTOU) Race Condition in HypervisorMemory corruption while loading a VM from a signed VM image that is not coherent in the processor cache.EPSS0.08%HighCVE-2023-33100qualcomm, inc. · snapdragon +48 moreImproper input validation in Multi-Mode Call ProcessorTransient DOS while processing DL NAS Transport message when message ID is not defined in the 3GPP specification.EPSS0.32%HighCVE-2023-33066qualcomm, inc. · snapdragon +307 moreUse of Out-of-range Pointer Offset in AudioMemory corruption in Audio while processing RT proxy port register driver.EPSS0.11%HighCVE-2023-33095qualcomm, inc. · snapdragon +95 moreReachable Assertion in Multi-Mode Call ProcessorTransient DOS while processing multiple payload container type with incorrect container length received in DL NAS transport OTA in NR.EPSS0.32%HighCVE-2023-33096qualcomm, inc. · snapdragon +95 moreReachable Assertion in Multi-Mode Call ProcessorTransient DOS while processing DL NAS Transport message, as specified in 3GPP 24.501 v16.EPSS0.32%HighCVE-2023-33086qualcomm, inc. · snapdragon +150 moreImproper Release of Memory Before Removing Last Reference in Data ModemTransient DOS while processing multiple IKEV2 Informational Request to device from IPSEC server with different identifiers.EPSS0.32%HighCVE-2023-33103qualcomm, inc. · snapdragon +47 moreImproper Input Validation in Multi-Mode Call ProcessorTransient DOS while processing CAG info IE received from NW.EPSS0.32%HighCVE-2023-33084qualcomm, inc. · snapdragon +41 moreImproper Release of Memory Before Removing Last Reference in Data ModemTransient DOS while processing IE fragments from server during DTLS handshake.EPSS0.32%