Qualcomm SM4450 Firmware vulnerabilities

34 CVEs affecting Qualcomm SM4450 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-33040, published 2024-01-02.

More from Qualcomm.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-40507, published 2023-06-06. High severity, CVSS 7.8. EPSS: 1.3% chance of exploitation in the next 30 days. Memory corruption due to double free in Core while mapping HLOS address to the list.
• CVE-2023-28555, published 2023-08-08. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. Transient DOS in Audio while remapping channel buffer in media codec decoding.
• CVE-2022-40536, published 2023-06-06. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. Transient DOS due to improper authentication in modem while receiving plain TLB OTA request message from network.
• CVE-2023-33025, published 2024-01-02. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. Memory corruption in Data Modem when a non-standard SDP body, during a VOLTE call.
• CVE-2023-21659, published 2023-06-06. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. Transient DOS in WLAN Firmware while processing frames with missing header fields.
• CVE-2022-40504, published 2023-05-02. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. Transient DOS due to reachable assertion in Modem when UE received Downlink Data Indication message from the network.
• CVE-2022-34144, published 2023-05-02. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. Transient DOS due to reachable assertion in Modem during OSI decode scheduling.
• CVE-2023-28584, published 2023-09-05. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. Transient DOS in WLAN Host when a mobile station receives invalid channel in CSA IE while doing channel switch announcement (CSA).
• CVE-2022-40521, published 2023-06-06. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. Transient DOS due to improper authorization in Modem
• CVE-2023-33040, published 2024-01-02. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Transient DOS in Data Modem during DTLS handshake.

Latest

• CVE-2023-33038, published 2024-01-02. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption while receiving a message in Bus Socket Transport Server.
• CVE-2023-33037, published 2024-01-02. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. Cryptographic issue in Automotive while unwrapping the key secs2d and verifying with RPMB data.
• CVE-2023-33033, published 2024-01-02. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption in Audio during playback with speaker protection.
• CVE-2023-33030, published 2024-01-02. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption in HLOS while running playready use-case.
• CVE-2023-33014, published 2024-01-02. Medium severity, CVSS 6.8. EPSS: 0.2% chance of exploitation in the next 30 days. Information disclosure in Core services while processing a Diag command.
• CVE-2023-33029, published 2023-10-03. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption in DSP Service during a remote call from HLOS to DSP.
• CVE-2023-28567, published 2023-09-05. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption in WLAN HAL while handling command through WMI interfaces.