Qualcomm Snapdragon X70 Modem Rf System vulnerabilities, page 3
75 vulnerabilities
Known vulnerabilities in Qualcomm Snapdragon X70 Modem Rf System, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2026-24084qualcomm, inc. · snapdragon +122 moreInsecure Security Identifier Mechanism in Multi-Mode Call ProcessorWeak configuration when UE does not verify the consistency of its additional security capabilities with the replayed capabilities.EPSS0.25%CriticalCVE-2023-22388qualcomm, inc. · snapdragon +223 moreUse of Out-of-range Pointer Offset in Multi-mode Call ProcessorMemory Corruption in Multi-mode Call Processor while processing bit mask API.EPSS0.35%CriticalCVE-2023-22385qualcomm, inc. · snapdragon +239 moreBuffer Over-read in Data ModemMemory Corruption in Data Modem while making a MO call or MT VOLTE call.EPSS0.42%HighCVE-2023-24844qualcomm, inc. · snapdragon +42 moreImproper Access Control in CoreMemory Corruption in Core while invoking a call to Access Control core library with hardware protected address range.EPSS0.10%HighCVE-2023-24849qualcomm, inc. · snapdragon +236 moreBuffer Over-read in Data ModemInformation Disclosure in data Modem while parsing an FMTP line in an SDP message.EPSS0.36%HighCVE-2023-24848qualcomm, inc. · snapdragon +242 moreBuffer Over-read in Data ModemInformation Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value.EPSS0.36%CriticalCVE-2023-24855qualcomm, inc. · snapdragon +61 moreUse of Out-of-range Pointer Offset in ModemMemory corruption in Modem while processing security related configuration before AS Security Exchange.EPSS0.55%HighCVE-2023-24847qualcomm, inc. · snapdragon +255 moreNULL pointer Dereference in ModemTransient DOS in Modem while allocating DSM items.EPSS0.39%HighCVE-2023-24852qualcomm, inc. · snapdragon +265 moreImproper Authentication in CoreMemory Corruption in Core due to secure memory access by user while loading modem image.EPSS0.12%HighCVE-2023-28545qualcomm, inc. · snapdragon +198 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in TZ Secure OSMemory corruption in TZ Secure OS while loading an app ELF.EPSS0.14%CriticalCVE-2023-28574qualcomm, inc. · snapdragon +77 moreImproper Input Validation in CoreMemory corruption in core services when Diag handler receives a command to configure event listeners.EPSS0.13%CriticalCVE-2023-28540qualcomm, inc. · snapdragon +151 moreImproper Authentication in Data ModemCryptographic issue in Data Modem due to improper authentication during TLS handshake.EPSS0.43%MediumCVE-2023-28586qualcomm, inc. · snapdragon +307 moreImproper Restriction of Operation within the Bounds of a Memory Buffer in TZ Secure OSInformation disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE.EPSS0.14%CriticalCVE-2023-28578qualcomm, inc. · snapdragon +333 moreImproper Input Validation in ServicesMemory corruption in Core Services while executing the command for removing a single event listener.EPSS0.12%HighCVE-2023-28551qualcomm, inc. · snapdragon +242 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in UTILSMemory corruption in UTILS when modem processes memory specific Diag commands having arbitrary address values as input arguments.EPSS0.12%HighCVE-2023-28585qualcomm, inc. · snapdragon +275 moreInteger Overflow to Buffer Overflow in TZ Secure OSMemory corruption while loading an ELF segment in TEE Kernel.EPSS0.14%HighCVE-2023-28550qualcomm, inc. · snapdragon +329 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in MPP PerformanceMemory corruption in MPP performance while accessing DSM watermark using external memory address.EPSS0.12%CriticalCVE-2023-33072qualcomm, inc. · snapdragon +239 moreBuffer copy without checking size of Input in CoreMemory corruption in Core while processing control functions.EPSS0.11%HighCVE-2023-33014qualcomm, inc. · snapdragon +37 moreImproper Input Validation in ServicesInformation disclosure in Core services while processing a Diag command.EPSS0.18%HighCVE-2023-33110qualcomm, inc. · snapdragon +118 moreUse of Out-of-range Pointer Offset in AudioThe session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may lead to race condition between event callback - PCM close and reset session index causing memory corruption.EPSS0.08%