SN
Product
Snapdragon
On CISA KEVExploited in the wild
997
CVEs
8
On KEV
9.8
Max CVSS
15
New 30D
Severity mix
Critical 54High 446Medium 0Low 0
Watch
Add Snapdragon to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-33053 | 7.8 | Dec 5 | Improper Validation of Array Index in Kernel Affected: CSR8811; FastConnect 6700; FastConnect 6900; FastConnect 7800; Immersive Home 214 Platform; Immersive Home 216 Platform; +34 more |
| CVE-2023-33024 | 7.8 | Dec 5 | Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Radio Interface Layer Affected: AQT1000; AR8035; FastConnect 6200; FastConnect 6800; FastConnect 6900; FastConnect 7800; +34 more |
| CVE-2023-33022 | 7.8 | Dec 5 | Integer Overflow to Buffer Overflow in HLOS Affected: 315 5G IoT Modem; AQT1000; AR8035; CSRA6620; CSRA6640; FastConnect 6200; +34 more |
| CVE-2023-33018 | 7.8 | Dec 5 | Integer Overflow to Buffer Overflow in User Identity Module Affected: 315 5G IoT Modem; 9205 LTE Modem; 9206 LTE Modem; 9207 LTE Modem; APQ8017; APQ8037; +34 more |
| CVE-2023-33017 | 7.8 | Dec 5 | Buffer Copy Without Checking Size of Input in Boot Affected: 315 5G IoT Modem; 9205 LTE Modem; 9206 LTE Modem; 9207 LTE Modem; AQT1000; AR8031; +34 more |
| CVE-2023-28587 | 7.8 | Dec 5 | Improper Restriction of Operations within the Bounds of a Memory Buffer in BT Controller Affected: 315 5G IoT Modem; AQT1000; AR8031; AR8035; CSRA6620; CSRA6640; +34 more |
| CVE-2023-28580 | 7.8 | Dec 5 | Buffer Copy Without Checking Size of Input in WLAN Host Affected: AR8035; FastConnect 6900; FastConnect 7800; QAM8295P; QCA6391; QCA6574AU; +34 more |
| CVE-2023-28579 | 7.8 | Dec 5 | Buffer Copy Without Checking Size of Input in WLAN Host Affected: FastConnect 6900; FastConnect 7800; QAM8295P; QCA6391; QCA6574AU; QCA6595AU; +28 more |
| CVE-2023-28551 | 7.8 | Dec 5 | Improper Restriction of Operations within the Bounds of a Memory Buffer in UTILS Affected: 315 5G IoT Modem; 9205 LTE Modem; 9206 LTE Modem; 9207 LTE Modem; APQ8017; APQ8037; +34 more |
| CVE-2023-28550 | 7.8 | Dec 5 | Improper Restriction of Operations within the Bounds of a Memory Buffer in MPP Performance Affected: 315 5G IoT Modem; 9205 LTE Modem; 9206 LTE Modem; 9207 LTE Modem; APQ8017; APQ8037; +34 more |
| CVE-2023-28546 | 7.8 | Dec 5 | Buffer Copy Without Checking Size of Input in SPS Applications Affected: 315 5G IoT Modem; 9205 LTE Modem; APQ8017; APQ8037; APQ8064AU; AQT1000; +34 more |
| CVE-2023-22668 | 7.8 | Dec 5 | Use After Free in Audio Affected: AQT1000; AR8035; FastConnect 6200; FastConnect 6800; FastConnect 6900; FastConnect 7800; +34 more |
| CVE-2023-22383 | 7.8 | Dec 5 | Use After Free in Camera Affected: AQT1000; C-V2X 9150; FastConnect 6200; FastConnect 6700; FastConnect 6800; FastConnect 6900; +34 more |
| CVE-2023-21634 | 7.8 | Dec 5 | Improper Restriction of Operations within the Bounds of a Memory Buffer in Radio Interface Layer Affected: AQT1000; FastConnect 6200; FastConnect 6800; FastConnect 6900; QCA6310; QCA6320; +34 more |
| CVE-2023-33074 | 7.8 | Nov 7 | Use After Free in Audio Affected: FastConnect 6700; FastConnect 6900; FastConnect 7800; QAM8255P; QAM8295P; QAM8650P; +34 more |
| CVE-2023-33059 | 7.8 | Nov 7 | Buffer Copy Without Checking Size of Input in Audio Affected: 315 5G IoT Modem; 9206 LTE Modem; APQ8017; APQ8052; APQ8056; APQ8064AU; +34 more |
| CVE-2023-33055 | 7.8 | Nov 7 | Buffer Copy Without Checking Size of Input in Audio Affected: AQT1000; AR8035; CSRA6620; CSRA6640; FastConnect 6200; FastConnect 6700; +34 more |
| CVE-2023-33031 | 7.8 | Nov 7 | Buffer Copy Without Checking Size of Input in Automotive Audio Affected: APQ8017; APQ8064AU; AQT1000; AR8031; AR8035; C-V2X 9150; +34 more |
| CVE-2023-28574 | 7.8 | Nov 7 | Improper Input Validation in Core Affected: AR8035; FastConnect 6700; FastConnect 6900; FastConnect 7800; QAM8255P; QAM8650P; +34 more |
| CVE-2023-28570 | 7.8 | Nov 7 | Buffer Copy without Checking Size of Input in Audio Affected: AQT1000; AR8035; FastConnect 6200; FastConnect 6800; FastConnect 6900; FastConnect 7800; +34 more |
| CVE-2023-28556 | 7.8 | Nov 7 | Improper Authorization in HLOS Affected: 315 5G IoT Modem; 9205 LTE Modem; AQT1000; AR8031; AR8035; C-V2X 9150; +34 more |
| CVE-2023-28545 | 7.8 | Nov 7 | Improper Restriction of Operations within the Bounds of a Memory Buffer in TZ Secure OS Affected: 315 5G IoT Modem; 9205 LTE Modem; AQT1000; AR8031; AR8035; CSRA6620; +34 more |
| CVE-2023-24852 | 7.8 | Nov 7 | Improper Authentication in Core Affected: 315 5G IoT Modem; 9205 LTE Modem; AQT1000; AR8031; AR8035; C-V2X 9150; +34 more |
| CVE-2023-21671 | 7.8 | Nov 7 | Improper Input Validation in Core Affected: FastConnect 6700; FastConnect 6900; QCA6391; QCM6490; QCS6490; QSM8350; +18 more |
| CVE-2023-33039 | 7.8 | Oct 3 | Use After Free in Automotive Display Affected: QAM8295P; QAM8650P; QAMSRV1H; QCA6574A; QCA6574AU; QCA6595AU; +15 more |
| CVE-2023-33035 | 7.8 | Oct 3 | Buffer Copy Without Checking Size of Input in Audio Affected: AR8035; CSRA6620; CSRA6640; FastConnect 6200; FastConnect 6700; FastConnect 6800; +34 more |
| CVE-2023-33034 | 7.8 | Oct 3 | Signed-to-unsigned conversion error in Audio Affected: CSRA6620; CSRA6640; FastConnect 6200; FastConnect 6700; FastConnect 6900; Flight RB5 5G Platform; +34 more |
| CVE-2023-33029 | 7.8 | Oct 3 | Use After Free in DSP Service Affected: AR8035; CSRA6620; CSRA6640; FastConnect 6200; FastConnect 6700; FastConnect 6900; +34 more |
| CVE-2023-28539 | 7.8 | Oct 3 | Buffer Copy Without Checking Size of Input in WLAN Host Affected: AR8035; AR9380; CSR8811; CSRB31024; FastConnect 6800; FastConnect 6900; +34 more |
| CVE-2023-24853 | 7.8 | Oct 3 | Improper Input Validation in HLOS Affected: AR8035; FastConnect 6200; FastConnect 6700; FastConnect 6800; FastConnect 6900; FastConnect 7800; +34 more |
| CVE-2023-24850 | 7.8 | Oct 3 | Improper Validation of Array Index in HLOS Affected: APQ8017; APQ8037; AQT1000; AR8035; CSRA6620; CSRA6640; +34 more |
| CVE-2023-24844 | 7.8 | Oct 3 | Improper Access Control in Core Affected: AR8035; FastConnect 6700; FastConnect 6900; FastConnect 7800; QCA8081; QCA8337; +34 more |
| CVE-2023-22384 | 7.8 | Oct 3 | Buffer Copy Without Checking Size of Input in VR Service Affected: QCA6574AU; QCA6696; SA6145P; SA6150P; SA6155P; SA8145P; +3 more |
| CVE-2023-21673 | 7.8 | Oct 3 | Improper Access Control in Kernel Affected: AQT1000; AR8035; FastConnect 6200; FastConnect 6700; FastConnect 6800; FastConnect 6900; +34 more |
| CVE-2023-33021 | 7.8 | Sep 5 | Use After Free in Graphics Affected: APQ8064AU; AQT1000; AR8035; CSRA6620; CSRA6640; FastConnect 6200; +34 more |
| CVE-2023-28573 | 7.8 | Sep 5 | Improper Validation of Array Index in WLAN HAL Affected: 315 5G IoT Modem; AQT1000; AR8035; AR9380; CSR8811; CSRB31024; +34 more |
| CVE-2023-28567 | 7.8 | Sep 5 | Improper Validation of Array Index in WLAN HAL Affected: 315 5G IoT Modem; AQT1000; AR8031; AR8035; AR9380; CSR8811; +34 more |
| CVE-2023-28565 | 7.8 | Sep 5 | Improper Validation of Array Index in WLAN HAL Affected: 9205 LTE Modem; APQ8017; APQ8064AU; APQ8076; APQ8092; APQ8094; +34 more |
| CVE-2023-28564 | 7.8 | Sep 5 | Use of Out-of-range Pointer Offset in WLAN HAL Affected: AQT1000; AR8031; AR9380; CSR8811; CSRA6620; CSRA6640; +34 more |
| CVE-2023-28560 | 7.8 | Sep 5 | Buffer Copy Without Checking Size of Input in WLAN HAL Affected: APQ8076; APQ8084; APQ8092; APQ8094; AQT1000; AR8031; +34 more |
| CVE-2023-28559 | 7.8 | Sep 5 | Buffer Copy Without Checking Size of Input in WLAN HAL Affected: AQT1000; AR8031; AR9380; CSR8811; CSRA6620; CSRA6640; +34 more |
| CVE-2023-28558 | 7.8 | Sep 5 | Improper Validation of Array Index in WLAN HAL Affected: 315 5G IoT Modem; AQT1000; AR8031; AR8035; AR9380; CSR8811; +34 more |
| CVE-2023-28557 | 7.8 | Sep 5 | Improper Validation of Array Index in WLAN HAL Affected: 315 5G IoT Modem; AQT1000; AR8031; AR8035; AR9380; CSR8811; +34 more |
| CVE-2023-28549 | 7.8 | Sep 5 | Improper Restriction of Operations within the Bounds of a Memory Buffer in WLAN HAL Affected: 315 5G IoT Modem; AQT1000; AR8035; AR9380; CSR8811; CSRB31024; +34 more |
| CVE-2023-28548 | 7.8 | Sep 5 | Improper Validation of Array Index in WLAN HAL Affected: AQT1000; AR8035; AR9380; CSR8811; CSRB31024; FastConnect 6200; +34 more |
| CVE-2023-28544 | 7.8 | Sep 5 | Buffer Copy without Checking the Size of Input in WLAN Firmware Affected: AQT1000; AR9380; CSR8811; CSRA6620; CSRA6640; FastConnect 6200; +34 more |
The 500 most important CVEs for this product (exploited first, then by severity)