Search Results (21346 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2024-33042 1 Qualcomm 456 205, 205 Firmware, 215 and 453 more 2025-08-11 7.8 High
Memory corruption when Alternative Frequency offset value is set to 255.
CVE-2024-33041 1 Qualcomm 70 Fastconnect 6900, Fastconnect 6900 Firmware, Fastconnect 7800 and 67 more 2025-08-11 6.7 Medium
Memory corruption when input parameter validation for number of fences is missing for fence frame IOCTL calls,
CVE-2023-24854 1 Qualcomm 326 215, 215 Firmware, Ar8035 and 323 more 2025-08-11 7.8 High
Memory Corruption in WLAN HOST while parsing QMI WLAN Firmware response message.
CVE-2023-33028 1 Qualcomm 352 Ar8035, Ar8035 Firmware, Ar9380 and 349 more 2025-08-11 9.8 Critical
Memory corruption in WLAN Firmware while doing a memory copy of pmk cache.
CVE-2023-33066 1 Qualcomm 626 205 Mobile, 205 Mobile Firmware, 215 Mobile and 623 more 2025-08-11 8.4 High
Memory corruption in Audio while processing RT proxy port register driver.
CVE-2023-33067 1 Qualcomm 228 9206 Lte Modem, 9206 Lte Modem Firmware, Aqt1000 and 225 more 2025-08-11 6.7 Medium
Memory corruption in Audio while calling START command on host voice PCM multiple times for the same RX or TX tap points.
CVE-2023-22385 1 Qualcomm 482 315 5g Iot Modem, 315 5g Iot Modem Firmware, 9205 Lte Modem and 479 more 2025-08-11 8.2 High
Memory Corruption in Data Modem while making a MO call or MT VOLTE call.
CVE-2023-33113 1 Qualcomm 254 Ar8035, Ar8035 Firmware, Csra6620 and 251 more 2025-08-11 8.4 High
Memory corruption when resource manager sends the host kernel a reply message with multiple fragments.
CVE-2023-22383 1 Qualcomm 118 Aqt1000, Aqt1000 Firmware, C-v2x 9150 and 115 more 2025-08-11 6.7 Medium
Memory Corruption in camera while installing a fd for a particular DMA buffer.
CVE-2023-28547 1 Qualcomm 667 215 Mobile, 215 Mobile Firmware, 315 5g Iot and 664 more 2025-08-11 8.4 High
Memory corruption in SPS Application while requesting for public key in sorter TA.
CVE-2025-27061 1 Qualcomm 689 315 5g Iot, 315 5g Iot Firmware, Aqt1000 and 686 more 2025-08-11 7.8 High
Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmware.
CVE-2023-43513 1 Qualcomm 534 315 5g Iot Modem, 315 5g Iot Modem Firmware, Apq8017 and 531 more 2025-08-11 7.8 High
Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element.
CVE-2024-21481 1 Qualcomm 333 Aqt1000, Aqt1000 Firmware, Ar8035 and 330 more 2025-08-11 8.4 High
Memory corruption when preparing a shared memory notification for a memparcel in Resource Manager.
CVE-2023-43518 1 Qualcomm 306 Aqt1000, Aqt1000 Firmware, Fastconnect 6200 and 303 more 2025-08-11 7.3 High
Memory corruption in video while parsing invalid mp2 clip.
CVE-2023-24852 1 Qualcomm 542 315 5g Iot Modem, 315 5g Iot Modem Firmware, 9205 Lte Modem and 539 more 2025-08-11 8.4 High
Memory Corruption in Core due to secure memory access by user while loading modem image.
CVE-2023-33046 1 Qualcomm 98 Ar8035, Ar8035 Firmware, Fastconnect 6900 and 95 more 2025-08-11 7.8 High
Memory corruption in Trusted Execution Environment while deinitializing an object used for license validation.
CVE-2023-24855 1 Qualcomm 126 Ar8035, Ar8035 Firmware, Fastconnect 6200 and 123 more 2025-08-11 9.8 Critical
Memory corruption in Modem while processing security related configuration before AS Security Exchange.
CVE-2025-24936 1 Nokia 1 Wavesuite Noc 2025-08-11 9 Critical
The web application allows user input to pass unfiltered to a command executed on the underlying operating system. The vulnerable component is bound to the network stack and the set of possible attackers extends up to and including the entire Internet. An attacker with low privileged access to the application has the potential to execute commands on the operating system under the context of the webserver.
CVE-2025-24938 1 Nokia 1 Wavesuite Noc 2025-08-11 8.4 High
The web application allows user input to pass unfiltered to a command executed on the underlying operating system. An attacker with high privileged access (administrator) to the application has the potential execute commands on the operating system under the context of the webserver. The vulnerable component is bound to the network stack and the set of possible attackers extends up to and including the entire Internet. Has the potential to inject command while creating a new User from User Management.
CVE-2025-2531 1 Luxion 1 Keyshot 2025-08-11 N/A
Luxion KeyShot DAE File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Luxion KeyShot. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of dae files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-23704.