Qualcomm Snapdragon 765 5g Mobile Platform Firmware vulnerabilities

58 CVEs affecting Qualcomm Snapdragon 765 5g Mobile Platform Firmware, 2 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-33056, published 2024-12-02.

More from Qualcomm.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-33106: Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability, published 2023-12-05. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2023-12-05. EPSS: 0.8% chance of exploitation in the next 30 days. Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.
• CVE-2023-33107: Qualcomm Multiple Chipsets Integer Overflow Vulnerability, published 2023-12-05. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2023-12-05. EPSS: 0.7% chance of exploitation in the next 30 days. Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.
• CVE-2023-28588, published 2023-12-05. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. Transient DOS in Bluetooth Host while rfc slot allocation.
• CVE-2023-33098, published 2023-12-05. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. Transient DOS while parsing WPA IES, when it is passed with length more than expected size.
• CVE-2023-22388, published 2023-11-07. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. Memory Corruption in Multi-mode Call Processor while processing bit mask API.
• CVE-2023-33109, published 2024-01-02. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Transient DOS while processing a WMI P2P listen start command (0xD00A) sent from host.
• CVE-2023-33062, published 2024-01-02. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Transient DOS in WLAN Firmware while parsing a BTM request.
• CVE-2023-33040, published 2024-01-02. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Transient DOS in Data Modem during DTLS handshake.
• CVE-2023-43536, published 2024-02-06. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Transient DOS while parse fils IE with length equal to 1.
• CVE-2023-43533, published 2024-02-06. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Transient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame.

Latest

• CVE-2024-33056, published 2024-12-02. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption when allocating and accessing an entry in an SMEM partition continuously.
• CVE-2024-33053, published 2024-12-02. Medium severity, CVSS 6.7. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption when multiple threads try to unregister the CVP buffer at the same time.
• CVE-2024-33044, published 2024-12-02. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption while Configuring the SMR/S2CR register in Bypass mode.
• CVE-2024-38423, published 2024-11-04. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption while processing GPU page table switch.
• CVE-2024-38422, published 2024-11-04. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption while processing voice packet with arbitrary data received from ADSP.
• CVE-2024-38415, published 2024-11-04. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption while handling session errors from firmware.
• CVE-2024-38408, published 2024-11-04. Critical severity, CVSS 9.1. EPSS: 0.1% chance of exploitation in the next 30 days. Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.
• CVE-2024-33032, published 2024-11-04. Medium severity, CVSS 6.7. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption when the user application modifies the same shared memory asynchronously when kernel is accessing it.
• CVE-2024-33043, published 2024-09-02. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. Transient DOS while handling PS event when Program Service name length offset value is set to 255.
• CVE-2024-33014, published 2024-08-05. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Transient DOS while parsing ESP IE from beacon/probe response frame.