Qualcomm Snapdragon 8Cx Gen 3 Compute Platform vulnerabilities, page 3

50 vulnerabilities

Known vulnerabilities in Qualcomm Snapdragon 8Cx Gen 3 Compute Platform, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.8HighCVE-2023-28548qualcomm, inc. · snapdragon +179 moreImproper Validation of Array Index in WLAN HALMemory corruption in WLAN HAL while processing Tx/Rx commands from QDART.EPSS0.12%9.3CriticalCVE-2023-33072qualcomm, inc. · snapdragon +239 moreBuffer copy without checking size of Input in CoreMemory corruption in Core while processing control functions.EPSS0.11%7.8HighCVE-2023-33110qualcomm, inc. · snapdragon +118 moreUse of Out-of-range Pointer Offset in AudioThe session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may lead to race condition between event callback - PCM close and reset session index causing memory corruption.EPSS0.08%7.5HighCVE-2023-33062qualcomm, inc. · snapdragon +284 moreBuffer Over-read in WLAN FirmwareTransient DOS in WLAN Firmware while parsing a BTM request.EPSS0.34%7.5HighCVE-2023-33109qualcomm, inc. · snapdragon +304 moreNULL Pointer Dereference in WLAN FirmwareTransient DOS while processing a WMI P2P listen start command (0xD00A) sent from host.EPSS0.34%7.1HighCVE-2023-33037qualcomm, inc. · snapdragon +80 moreCryptographic Issues in AutomotiveCryptographic issue in Automotive while unwrapping the key secs2d and verifying with RPMB data.EPSS0.09%9.3CriticalCVE-2023-33030qualcomm, inc. · snapdragon +293 moreBuffer Copy without Checking Size of Input in HLOSMemory corruption in HLOS while running playready use-case.EPSS0.12%7.8HighCVE-2023-33076qualcomm, inc. · snapdragon +147 moreConfiguration Issue in CoreMemory corruption in Core when updating rollback version for TA and OTA feature is enabled.EPSS0.11%7.1HighCVE-2023-33036qualcomm, inc. · snapdragon +102 moreNULL Pointer Dereference in HypervisorPermanent DOS in Hypervisor while untrusted VM without PSCI support makes a PSCI call.EPSS0.10%7.8HighCVE-2023-33046qualcomm, inc. · snapdragon +48 moreTime-of-check Time-of-use (TOCTOU) Race Condition in Trusted Execution EnvironmentMemory corruption in Trusted Execution Environment while deinitializing an object used for license validation.EPSS0.08%