Qualcomm Snapdragon X5 Lte Modem vulnerabilities, page 3
70 vulnerabilities
Known vulnerabilities in Qualcomm Snapdragon X5 Lte Modem, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2024-38422qualcomm, inc. · snapdragon +263 moreInteger Overflow to Buffer Overflow in AudioMemory corruption while processing voice packet with arbitrary data received from ADSP.EPSS0.10%HighCVE-2024-38423qualcomm, inc. · snapdragon +203 moreBuffer Copy Without Checking Size of Input in Graphics LinuxMemory corruption while processing GPU page table switch.EPSS0.10%HighCVE-2024-33056qualcomm, inc. · snapdragon +323 moreBuffer Over-read in MProcMemory corruption when allocating and accessing an entry in an SMEM partition continuously.EPSS0.10%HighCVE-2024-23353qualcomm, inc. · snapdragon +247 moreBuffer Over-read in Multi Mode Call ProcessorTransient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI.EPSS0.35%HighCVE-2026-21385qualcomm, inc. · snapdragon +230 moreInteger Overflow or Wraparound in GraphicsMemory corruption while using alignments for memory allocation.KEVEPSS1.29%HighCVE-2026-24088qualcomm, inc. · snapdragon +243 moreMissing Authentication for Critical Function in BootCryptographic Issue while processing a specific partition which allows unauthorized write access to load a customized bootloader.EPSS0.07%HighCVE-2023-21628qualcomm, inc. · snapdragon +283 moreBuffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN HALMemory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command.EPSS0.12%HighCVE-2023-21665qualcomm, inc. · snapdragon +220 moreIncorrect Type Conversion or Cast in GraphicsMemory corruption in Graphics while importing a file.EPSS0.18%HighCVE-2023-21666qualcomm, inc. · snapdragon +165 moreImproper Release of Memory Before Removing Last Reference (`Memory Leak`) in GraphicsMemory Corruption in Graphics while accessing a buffer allocated through the graphics pool.EPSS0.18%HighCVE-2023-43511qualcomm, inc. · snapdragon +350 moreLoop with Unreachable Exit Condition (Infinite Loop) in WLAN FirmwareTransient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header.EPSS0.32%CriticalCVE-2023-43551qualcomm, inc. · snapdragon +234 moreImproper Authentication in Multi-Mode Call ProcessorCryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command.EPSS0.26%CriticalCVE-2023-22388qualcomm, inc. · snapdragon +223 moreUse of Out-of-range Pointer Offset in Multi-mode Call ProcessorMemory Corruption in Multi-mode Call Processor while processing bit mask API.EPSS0.35%CriticalCVE-2023-22385qualcomm, inc. · snapdragon +239 moreBuffer Over-read in Data ModemMemory Corruption in Data Modem while making a MO call or MT VOLTE call.EPSS0.42%HighCVE-2023-24849qualcomm, inc. · snapdragon +236 moreBuffer Over-read in Data ModemInformation Disclosure in data Modem while parsing an FMTP line in an SDP message.EPSS0.36%HighCVE-2023-24848qualcomm, inc. · snapdragon +242 moreBuffer Over-read in Data ModemInformation Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value.EPSS0.36%HighCVE-2023-28551qualcomm, inc. · snapdragon +242 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in UTILSMemory corruption in UTILS when modem processes memory specific Diag commands having arbitrary address values as input arguments.EPSS0.12%HighCVE-2023-28550qualcomm, inc. · snapdragon +329 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in MPP PerformanceMemory corruption in MPP performance while accessing DSM watermark using external memory address.EPSS0.12%HighCVE-2023-33110qualcomm, inc. · snapdragon +118 moreUse of Out-of-range Pointer Offset in AudioThe session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may lead to race condition between event callback - PCM close and reset session index causing memory corruption.EPSS0.08%HighCVE-2023-33031qualcomm, inc. · snapdragon +164 moreBuffer Copy Without Checking Size of Input in Automotive AudioMemory corruption in Automotive Audio while copying data from ADSP shared buffer to the VOC packet data buffer.EPSS0.11%HighCVE-2023-33120qualcomm, inc. · snapdragon +227 moreUse After Free in AudioMemory corruption in Audio when memory map command is executed consecutively in ADSP.EPSS0.11%