Qualcomm 8998 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Qualcomm 8998 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (13)

• CVE-2022-33231 — CVSS 9.3 (critical): Memory corruption due to double free in core while initializing the encryption key.
• CVE-2023-33054 — CVSS 9.1 (critical): Cryptographic issue in GPS HLOS Driver while downloading Qualcomm GNSS assistance data.
• CVE-2023-21666 — CVSS 8.4 (high): Memory Corruption in Graphics while accessing a buffer allocated through the graphics pool.
• CVE-2023-28537 — CVSS 8.4 (high): Memory corruption while allocating memory in COmxApeDec module in Audio.
• CVE-2023-21665 — CVSS 8.4 (high): Memory corruption in Graphics while importing a file.
• CVE-2023-33018 — CVSS 7.8 (high): Memory corruption while using the UIM diag command to get the operators name.
• CVE-2023-28560 — CVSS 7.8 (high): Memory corruption in WLAN HAL while processing devIndex from untrusted WMI payload.
• CVE-2023-33059 — CVSS 7.8 (high): Memory corruption in Audio while processing the VOC packet data from ADSP.
• CVE-2023-33063 — CVSS 7.8 (high) — actively exploited: Memory corruption in DSP Services during a remote call from HLOS to DSP.
• CVE-2023-33080 — CVSS 7.5 (high): Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame.
• CVE-2023-33027 — CVSS 7.5 (high): Transient DOS in WLAN Firmware while parsing rsn ies.
• CVE-2023-33024 — CVSS 6.7 (medium): Memory corruption while sending SMS from AP firmware.
• CVE-2023-28571 — CVSS 6.1 (medium): Information disclosure in WLAN HOST while processing the WLAN scan descriptor list during roaming scan.