Qualcomm Snapdragon 855+/860 Mobile Platform Firmware vulnerabilities

55 CVEs affecting Qualcomm Snapdragon 855+/860 Mobile Platform Firmware, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-38423, published 2024-11-04.

More from Qualcomm.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-33107: Qualcomm Multiple Chipsets Integer Overflow Vulnerability, published 2023-12-05. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2023-12-05. EPSS: 0.7% chance of exploitation in the next 30 days. Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.
• CVE-2023-28588, published 2023-12-05. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. Transient DOS in Bluetooth Host while rfc slot allocation.
• CVE-2023-22388, published 2023-11-07. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. Memory Corruption in Multi-mode Call Processor while processing bit mask API.
• CVE-2023-33109, published 2024-01-02. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Transient DOS while processing a WMI P2P listen start command (0xD00A) sent from host.
• CVE-2023-33062, published 2024-01-02. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Transient DOS in WLAN Firmware while parsing a BTM request.
• CVE-2023-33040, published 2024-01-02. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Transient DOS in Data Modem during DTLS handshake.
• CVE-2023-43536, published 2024-02-06. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Transient DOS while parse fils IE with length equal to 1.
• CVE-2023-43533, published 2024-02-06. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Transient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame.
• CVE-2023-43522, published 2024-02-06. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Transient DOS while key unwrapping process, when the given encrypted key is empty or NULL.
• CVE-2023-33057, published 2024-02-06. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Transient DOS in Multi-Mode Call Processor while processing UE policy container.

Latest

• CVE-2024-38423, published 2024-11-04. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption while processing GPU page table switch.
• CVE-2024-38422, published 2024-11-04. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption while processing voice packet with arbitrary data received from ADSP.
• CVE-2024-38408, published 2024-11-04. Critical severity, CVSS 9.1. EPSS: 0.1% chance of exploitation in the next 30 days. Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.
• CVE-2023-43519, published 2024-02-06. Critical severity, CVSS 9.8. EPSS: 0.3% chance of exploitation in the next 30 days. Memory corruption in video while parsing the Videoinfo, when the size of atom is greater than the videoinfo size.
• CVE-2023-43518, published 2024-02-06. Critical severity, CVSS 9.8. EPSS: 0.3% chance of exploitation in the next 30 days. Memory corruption in video while parsing invalid mp2 clip.
• CVE-2023-43513, published 2024-02-06. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element.
• CVE-2023-33077, published 2024-02-06. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption in HLOS while converting from authorization token to HIDL vector.