CVE-2022-33301 – Incorrect type conversion or cast in Audio
https://notcve.org/view.php?id=CVE-2022-33301
Memory corruption due to incorrect type conversion or cast in audio while using audio playback/capture when crafted address is sent from AGM IPC to AGM. • https://www.qualcomm.com/company/product-security/bulletins/april-2023-bulletin • CWE-704: Incorrect Type Conversion or Cast •
CVE-2022-33298 – Use after free in Modem
https://notcve.org/view.php?id=CVE-2022-33298
Memory corruption due to use after free in Modem while modem initialization. • https://www.qualcomm.com/company/product-security/bulletins/april-2023-bulletin • CWE-416: Use After Free •
CVE-2022-33296 – Integer overflow to buffer overflow in Modem
https://notcve.org/view.php?id=CVE-2022-33296
Memory corruption due to integer overflow to buffer overflow in Modem while parsing Traffic Channel Neighbor List Update message. • https://www.qualcomm.com/company/product-security/bulletins/april-2023-bulletin • CWE-190: Integer Overflow or Wraparound CWE-680: Integer Overflow to Buffer Overflow •
CVE-2022-33289 – Improper validation of array index in Modem
https://notcve.org/view.php?id=CVE-2022-33289
Memory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card. • https://www.qualcomm.com/company/product-security/bulletins/april-2023-bulletin • CWE-129: Improper Validation of Array Index •
CVE-2022-33231 – Double free in Core
https://notcve.org/view.php?id=CVE-2022-33231
Memory corruption due to double free in core while initializing the encryption key. • https://www.qualcomm.com/company/product-security/bulletins/april-2023-bulletin • CWE-415: Double Free •