U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

National Vulnerability Database

National Vulnerability Database

NVD

National Vulnerability Database
  1. VulnerabilitiesSearch And Statistics

Search Results (Refine Search)

Search Parameters:
  • Results Type: Overview
  • Keyword (text search): cpe:2.3:o:qualcomm:snapdragon_8cx_compute_platform_firmware:-:*:*:*:*:*:*:*
  • CPE Name Search: true
There are 34 matching records.
Displaying matches 21 through 34.
Vuln ID Summary CVSS Severity
CVE-2023-28566

Information disclosure in WLAN HAL while handling the WMI state info command.

Published: November 07, 2023; 1:15:09 AM -0500 		V4.0:(not available)
 V3.1: 5.5 MEDIUM
V2.0:(not available)
CVE-2023-28563

Information disclosure in IOE Firmware while handling WMI command.

Published: November 07, 2023; 1:15:09 AM -0500 		V4.0:(not available)
 V3.1: 5.5 MEDIUM
V2.0:(not available)
CVE-2023-28556

Cryptographic issue in HLOS during key management.

Published: November 07, 2023; 1:15:09 AM -0500 		V4.0:(not available)
 V3.1: 7.8 HIGH
V2.0:(not available)
CVE-2023-28545

Memory corruption in TZ Secure OS while loading an app ELF.

Published: November 07, 2023; 1:15:08 AM -0500 		V4.0:(not available)
 V3.1: 7.8 HIGH
V2.0:(not available)
CVE-2023-24852

Memory Corruption in Core due to secure memory access by user while loading modem image.

Published: November 07, 2023; 1:15:08 AM -0500 		V4.0:(not available)
 V3.1: 7.8 HIGH
V2.0:(not available)
CVE-2023-22388

Memory Corruption in Multi-mode Call Processor while processing bit mask API.

Published: November 07, 2023; 1:15:08 AM -0500 		V4.0:(not available)
 V3.1: 9.8 CRITICAL
V2.0:(not available)
CVE-2023-28559

Memory corruption in WLAN FW while processing command parameters from untrusted WMI payload.

Published: September 05, 2023; 3:15:13 AM -0400 		V4.0:(not available)
 V3.1: 7.8 HIGH
V2.0:(not available)
CVE-2023-28558

Memory corruption in WLAN handler while processing PhyID in Tx status handler.

Published: September 05, 2023; 3:15:13 AM -0400 		V4.0:(not available)
 V3.1: 7.8 HIGH
V2.0:(not available)
CVE-2023-28557

Memory corruption in WLAN HAL while processing command parameters from untrusted WMI payload.

Published: September 05, 2023; 3:15:13 AM -0400 		V4.0:(not available)
 V3.1: 7.8 HIGH
V2.0:(not available)
CVE-2023-28549

Memory corruption in WLAN HAL while parsing Rx buffer in processing TLV payload.

Published: September 05, 2023; 3:15:13 AM -0400 		V4.0:(not available)
 V3.1: 7.8 HIGH
V2.0:(not available)
CVE-2023-28548

Memory corruption in WLAN HAL while processing Tx/Rx commands from QDART.

Published: September 05, 2023; 3:15:13 AM -0400 		V4.0:(not available)
 V3.1: 7.8 HIGH
V2.0:(not available)
CVE-2023-28544

Memory corruption in WLAN while sending transmit command from HLOS to UTF handlers.

Published: September 05, 2023; 3:15:13 AM -0400 		V4.0:(not available)
 V3.1: 7.8 HIGH
V2.0:(not available)
CVE-2022-40504

Transient DOS due to reachable assertion in Modem when UE received Downlink Data Indication message from the network.

Published: May 02, 2023; 4:15:09 AM -0400 		V4.0:(not available)
 V3.1: 7.5 HIGH
V2.0:(not available)
CVE-2022-33273

Information disclosure due to buffer over-read in Trusted Execution Environment while QRKS report generation.

Published: May 02, 2023; 4:15:08 AM -0400 		V4.0:(not available)
 V3.1: 5.5 MEDIUM
V2.0:(not available)