Search Results (187 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2023-43513 1 Qualcomm 534 315 5g Iot Modem, 315 5g Iot Modem Firmware, Apq8017 and 531 more 2025-08-11 7.8 High
Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element.
CVE-2023-24847 1 Qualcomm 514 315 5g Iot Modem, 315 5g Iot Modem Firmware, Aqt1000 and 511 more 2025-08-11 7.5 High
Transient DOS in Modem while allocating DSM items.
CVE-2023-24852 1 Qualcomm 542 315 5g Iot Modem, 315 5g Iot Modem Firmware, 9205 Lte Modem and 539 more 2025-08-11 8.4 High
Memory Corruption in Core due to secure memory access by user while loading modem image.
CVE-2023-24855 1 Qualcomm 126 Ar8035, Ar8035 Firmware, Fastconnect 6200 and 123 more 2025-08-11 9.8 Critical
Memory corruption in Modem while processing security related configuration before AS Security Exchange.
CVE-2023-22385 1 Qualcomm 482 315 5g Iot Modem, 315 5g Iot Modem Firmware, 9205 Lte Modem and 479 more 2025-08-11 8.2 High
Memory Corruption in Data Modem while making a MO call or MT VOLTE call.
CVE-2023-33076 1 Qualcomm 302 Aqt1000, Aqt1000 Firmware, Ar8035 and 299 more 2025-06-17 5.9 Medium
Memory corruption in Core when updating rollback version for TA and OTA feature is enabled.
CVE-2023-24844 1 Qualcomm 86 Ar8035, Ar8035 Firmware, Fastconnect 6700 and 83 more 2025-02-27 8.4 High
Memory Corruption in Core while invoking a call to Access Control core library with hardware protected address range.
CVE-2023-24853 1 Qualcomm 226 Ar8035, Ar8035 Firmware, Fastconnect 6200 and 223 more 2025-02-27 8.4 High
Memory Corruption in HLOS while registering for key provisioning notify.
CVE-2023-28540 1 Qualcomm 304 315 5g Iot Modem, 315 5g Iot Modem Firmware, Apq5053-aa and 301 more 2025-02-27 9.1 Critical
Cryptographic issue in Data Modem due to improper authentication during TLS handshake.
CVE-2024-49838 1 Qualcomm 338 Ar8035, Ar8035 Firmware, Fastconnect 6200 and 335 more 2025-02-05 8.2 High
Information disclosure while parsing the OCI IE with invalid length.
CVE-2024-49834 1 Qualcomm 254 Csra6620, Csra6620 Firmware, Csra6640 and 251 more 2025-02-05 7.8 High
Memory corruption while power-up or power-down sequence of the camera sensor.
CVE-2024-49833 1 Qualcomm 160 Fastconnect 6700, Fastconnect 6700 Firmware, Fastconnect 6900 and 157 more 2025-02-05 7.8 High
Memory corruption can occur in the camera when an invalid CID is used.
CVE-2024-21463 1 Qualcomm 218 Ar8035, Ar8035 Firmware, Fastconnect 6200 and 215 more 2025-01-13 7.3 High
Memory corruption while processing Codec2 during v13k decoder pitch synthesis.
CVE-2023-33100 1 Qualcomm 100 Ar8035, Ar8035 Firmware, Fastconnect 6700 and 97 more 2025-01-13 7.5 High
Transient DOS while processing DL NAS Transport message when message ID is not defined in the 3GPP specification.
CVE-2023-33103 1 Qualcomm 96 Ar8035, Ar8035 Firmware, Fastconnect 6700 and 93 more 2025-01-10 7.5 High
Transient DOS while processing CAG info IE received from NW.
CVE-2023-33084 1 Qualcomm 84 Ar8035, Ar8035 Firmware, Fastconnect 6700 and 81 more 2025-01-10 7.5 High
Transient DOS while processing IE fragments from server during DTLS handshake.
CVE-2023-28582 1 Qualcomm 86 Ar8035, Ar8035 Firmware, Fastconnect 6700 and 83 more 2025-01-10 9.8 Critical
Memory corruption in Data Modem while verifying hello-verify message during the DTLS handshake.
CVE-2024-33043 1 Qualcomm 406 205 Mobile Platform, 205 Mobile Platform Firmware, 215 Mobile Platform and 403 more 2024-12-20 5.5 Medium
Transient DOS while handling PS event when Program Service name length offset value is set to 255.
CVE-2024-33056 1 Qualcomm 662 205 Mobile Platform, 205 Mobile Platform Firmware, 315 5g Iot Modem and 659 more 2024-12-12 8.4 High
Memory corruption when allocating and accessing an entry in an SMEM partition continuously.
CVE-2024-33012 1 Qualcomm 501 Ar8035, Ar8035 Firmware, Ar9380 and 498 more 2024-11-26 7.5 High
Transient DOS while parsing the multiple MBSSID IEs from the beacon, when the tag length is non-zero value but with end of beacon.