Qualcomm Snapdragon X35 5G Modem Rf System vulnerabilities, page 4
100 vulnerabilities
Known vulnerabilities in Qualcomm Snapdragon X35 5G Modem Rf System, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2024-33022qualcomm, inc. · snapdragon +123 moreInteger Overflow or Wraparound in Automotive GPUMemory corruption while allocating memory in HGSL driver.EPSS0.10%HighCVE-2024-33058qualcomm, inc. · snapdragon +189 moreInsufficient Granularity of Access Control in CoreMemory corruption while assigning memory from the source DDR memory(HLOS) to ADSP.EPSS0.09%HighCVE-2024-33056qualcomm, inc. · snapdragon +323 moreBuffer Over-read in MProcMemory corruption when allocating and accessing an entry in an SMEM partition continuously.EPSS0.10%HighCVE-2024-33028qualcomm, inc. · snapdragon +136 moreUse After Free in Automotive TelematicsMemory corruption as fence object may still be accessed in timeline destruct after isync fence is released.EPSS0.11%HighCVE-2024-33021qualcomm, inc. · snapdragon +136 moreUse of Uninitialized Variable in Automotive GPUMemory corruption while processing IOCTL call to set metainfo.EPSS0.10%HighCVE-2024-33014qualcomm, inc. · snapdragon +319 moreBuffer Over-read in WLAN HostTransient DOS while parsing ESP IE from beacon/probe response frame.EPSS0.32%HighCVE-2024-23353qualcomm, inc. · snapdragon +247 moreBuffer Over-read in Multi Mode Call ProcessorTransient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI.EPSS0.35%MediumCVE-2024-23357qualcomm, inc. · snapdragon +236 moreNULL Pointer Dereference in HLOSTransient DOS while importing a PKCS#8-encoded RSA key with zero bytes modulus.EPSS0.09%HighCVE-2024-23356qualcomm, inc. · snapdragon +208 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in HLOSMemory corruption during session sign renewal request calls in HLOS.EPSS0.11%HighCVE-2024-23362qualcomm, inc. · snapdragon +230 moreImproper Input Validation in Trusted Execution EnvironmentCryptographic issue while parsing RSA keys in COBR format.EPSS0.12%HighCVE-2024-23368qualcomm, inc. · snapdragon +341 moreBuffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Qualcomm IPCMemory corruption when allocating and accessing an entry in an SMEM partition.EPSS0.10%HighCVE-2024-23385qualcomm, inc. · snapdragon +91 moreReachable Assertion in ModemTransient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at UE.EPSS0.25%MediumCVE-2024-23350qualcomm, inc. · snapdragon +25 moreReachable Assertion in Multi Mode Call ProcessorPermanent DOS when DL NAS transport receives multiple payloads such that one payload contains SOR container whose integrity check has failed, and the other is LPP where UE needs to send status message to network.EPSS0.17%HighCVE-2024-23352qualcomm, inc. · snapdragon +103 moreLoop with Unreachable Exit Condition (`Infinite Loop`) in Multi Mode Call ProcessorTransient DOS when NAS receives ODAC criteria of length 1 and type 1 in registration accept OTA.EPSS0.35%HighCVE-2024-23359qualcomm, inc. · snapdragon +159 moreBuffer Over-read in Multi Mode Call ProcessorInformation disclosure while decoding Tracking Area Update Accept or Attach Accept message received from network.EPSS0.26%HighCVE-2024-23369qualcomm, inc. · snapdragon +118 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in HLOSMemory corruption when invalid length is provided from HLOS for FRS/UDS request/response buffers.EPSS0.12%HighCVE-2024-23364qualcomm, inc. · snapdragon +177 moreBuffer Over-read in WLAN FirmwareTransient DOS when processing the non-transmitted BSSID profile sub-elements present within the MBSSID Information Element (IE) of a beacon frame that is received from over-the-air (OTA).EPSS0.30%HighCVE-2024-23355qualcomm, inc. · snapdragon +141 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in AutomotiveMemory corruption when keymaster operation imports a shared key.EPSS0.11%HighCVE-2026-25275qualcomm, inc. · snapdragon +369 moreBuffer Over-read in WLAN FirmwareTransient DOS when processing authentication frames with invalid FILS information element header lengths.EPSS0.19%HighCVE-2026-25302qualcomm, inc. · snapdragon +285 moreImproper Verification of Cryptographic Signature in BootCryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed.EPSS0.06%