Qualcomm Snapdragon Xr2 5G vulnerabilities, page 5
96 vulnerabilities
Known vulnerabilities in Qualcomm Snapdragon Xr2 5G, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2023-28567qualcomm, inc. · snapdragon +285 moreImproper Validation of Array Index in WLAN HALMemory corruption in WLAN HAL while handling command through WMI interfaces.EPSS0.12%CriticalCVE-2023-28581qualcomm, inc. · snapdragon +25 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in WLAN FirmwareMemory corruption in WLAN Firmware while parsing receieved GTK Keys in GTK KDE.EPSS0.50%HighCVE-2023-33101qualcomm, inc. · snapdragon +97 moreIncorrect Type Conversion or Cast in Multi-Mode Call ProcessorTransient DOS while processing DL NAS TRANSPORT message with payload length 0.EPSS0.32%HighCVE-2023-33099qualcomm, inc. · snapdragon +97 moreImproper Input Validation in Multi-Mode Call ProcessorTransient DOS while processing SMS container of non-standard size received in DL NAS transport in NR.EPSS0.32%HighCVE-2023-33023qualcomm, inc. · snapdragon +281 moreBuffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in SPS-ApplicationsMemory corruption while processing finish_sign command to pass a rsp buffer.EPSS0.11%HighCVE-2023-33104qualcomm, inc. · snapdragon +95 moreImproper input Validation in Multi-Mode Call ProcessorTransient DOS while processing PDU Release command with a parameter PDU ID out of range.EPSS0.32%HighCVE-2023-33015qualcomm, inc. · snapdragon +190 moreBuffer Over-read in WLAN FirmwareTransient DOS in WLAN Firmware while interpreting MBSSID IE of a received beacon frame.EPSS0.38%HighCVE-2023-33021qualcomm, inc. · snapdragon +163 moreUse After Free in GraphicsMemory corruption in Graphics while processing user packets for command submission.EPSS0.12%HighCVE-2023-33119qualcomm, inc. · snapdragon +157 moreTime-of-check Time-of-use (TOCTOU) Race Condition in HypervisorMemory corruption while loading a VM from a signed VM image that is not coherent in the processor cache.EPSS0.08%MediumCVE-2023-33111qualcomm, inc. · snapdragon +83 moreImproper Validation of Array Index in AudioInformation disclosure when VI calibration state set by ADSP is greater than MAX_FBSP_STATE in the response payload to AFE calibration command.EPSS0.11%HighCVE-2023-33066qualcomm, inc. · snapdragon +307 moreUse of Out-of-range Pointer Offset in AudioMemory corruption in Audio while processing RT proxy port register driver.EPSS0.11%HighCVE-2023-33095qualcomm, inc. · snapdragon +95 moreReachable Assertion in Multi-Mode Call ProcessorTransient DOS while processing multiple payload container type with incorrect container length received in DL NAS transport OTA in NR.EPSS0.32%HighCVE-2023-33096qualcomm, inc. · snapdragon +95 moreReachable Assertion in Multi-Mode Call ProcessorTransient DOS while processing DL NAS Transport message, as specified in 3GPP 24.501 v16.EPSS0.32%HighCVE-2023-33086qualcomm, inc. · snapdragon +150 moreImproper Release of Memory Before Removing Last Reference in Data ModemTransient DOS while processing multiple IKEV2 Informational Request to device from IPSEC server with different identifiers.EPSS0.32%HighCVE-2023-33115qualcomm, inc. · snapdragon +164 moreBuffer Over-read in Trusted Execution EnvironmentMemory corruption while processing buffer initialization, when trusted report for certain report types are generated.EPSS0.11%MediumCVE-2023-33090qualcomm, inc. · snapdragon +51 moreBuffer Over-read in AudioTransient DOS while processing channel information for speaker protection v2 module in ADSP.EPSS0.10%