platform/vendor/qcom-opensource/wlan/qca-wifi-host-cmn vulnerabilities (Android)
47 vulnerabilities.
platform/vendor/qcom-opensource/wlan/qca-wifi-host-cmnAndroidBuffer Over-read in WLAN Host7.5 Highplatform/vendor/qcom-opensource/wlan/qca-wifi-host-cmnAndroidBuffer Over-read in WLAN Host Communication7.5 Highplatform/vendor/qcom-opensource/wlan/qca-wifi-host-cmnAndroidBuffer Over-read in WLAN Host Cmn8.2 Highplatform/vendor/qcom-opensource/wlan/qca-wifi-host-cmnAndroidUse After Free in WLAN Host Communication7.8 Highplatform/vendor/qcom-opensource/wlan/qca-wifi-host-cmnAndroidImproper Validation of Array Index in WLAN Host Communication9.8 Criticalplatform/vendor/qcom-opensource/wlan/qca-wifi-host-cmnAndroidBuffer Over-read in WLAN Host Cmn7.5 Highplatform/vendor/qcom-opensource/wlan/qca-wifi-host-cmnAndroidInteger Overflow or Wraparound in WLAN Host Communication7.5 Highplatform/vendor/qcom-opensource/wlan/qca-wifi-host-cmnAndroidBuffer Over-read in WLAN Host Communication7.5 Highplatform/vendor/qcom-opensource/wlan/qca-wifi-host-cmnAndroidBuffer Over-read in WLAN Host Communication7.5 Highplatform/vendor/qcom-opensource/wlan/qca-wifi-host-cmnAndroidBuffer Over-read in WLAN Host Communication7.5 Highplatform/vendor/qcom-opensource/wlan/qca-wifi-host-cmnAndroidBuffer Over-read in WLAN Host7.5 Highplatform/vendor/qcom-opensource/wlan/qca-wifi-host-cmnAndroidBuffer Over-read in WLAN Host7.5 Highplatform/vendor/qcom-opensource/wlan/qca-wifi-host-cmnAndroidBuffer Over-read in WLAN Host7.5 Highplatform/vendor/qcom-opensource/wlan/qca-wifi-host-cmnAndroidInteger Overflow or Wraparound in WLAN Host7.5 Highplatform/vendor/qcom-opensource/wlan/qca-wifi-host-cmnAndroidBuffer Over-read in WLAN Host7.5 Highplatform/vendor/qcom-opensource/wlan/qca-wifi-host-cmnAndroidBuffer Over-read in WLAN Host7.5 Highplatform/vendor/qcom-opensource/wlan/qca-wifi-host-cmnAndroidBuffer Over-read in WLAN Host7.5 Highplatform/vendor/qcom-opensource/wlan/qca-wifi-host-cmnAndroidBuffer Over-read in WLAN Host7.5 Highplatform/vendor/qcom-opensource/wlan/qca-wifi-host-cmnAndroidBuffer Over-read in WLAN Host7.5 Highplatform/vendor/qcom-opensource/wlan/qca-wifi-host-cmnAndroidBuffer Over-read in WLAN Host7.5 Highplatform/vendor/qcom-opensource/wlan/qca-wifi-host-cmnAndroidBuffer Over-read in WLAN Host7.5 Highplatform/vendor/qcom-opensource/wlan/qca-wifi-host-cmnAndroidUse After Free in WLAN Host7.5 Highplatform/vendor/qcom-opensource/wlan/qca-wifi-host-cmnAndroidUse of Out-of-range Pointer Offset in WLAN HOST9.8 Criticalplatform/vendor/qcom-opensource/wlan/qca-wifi-host-cmnAndroidUse After Free in WLAN Host Communication9.8 Criticalplatform/vendor/qcom-opensource/wlan/qca-wifi-host-cmnAndroidBuffer Over-read in WLAN Host7.8 Highplatform/vendor/qcom-opensource/wlan/qca-wifi-host-cmnAndroidPotential out of Bounds read in FIPS event processing due to improper validation of the length...5.5 Mediumplatform/vendor/qcom-opensource/wlan/qca-wifi-host-cmnAndroidPossible buffer overflow due to lack of buffer length check during management frame Rx handling...5.5 Mediumplatform/vendor/qcom-opensource/wlan/qca-wifi-host-cmnAndroidPossible out of bound read due to lack of length check of data length for a DIAG event in...5.5 Mediumplatform/vendor/qcom-opensource/wlan/qca-wifi-host-cmnAndroidPossible buffer over read due to lack of size validation while copying data from DBR buffer to RX...5.5 Mediumplatform/vendor/qcom-opensource/wlan/qca-wifi-host-cmnAndroidPossible out of bound write due to improper validation of number of timer values received from...7.8 Highplatform/vendor/qcom-opensource/wlan/qca-wifi-host-cmnAndroidPossible out of bound read due to improper validation of IE length during SSID IE parse when...8.2 Highplatform/vendor/qcom-opensource/wlan/qca-wifi-host-cmnAndroidImproper validation of data length received from DMA buffer can lead to memory corruption. in...7.8 Highplatform/vendor/qcom-opensource/wlan/qca-wifi-host-cmnAndroidPossible buffer over read due to lack of length check while parsing beacon IE response in...7.5 Highplatform/vendor/qcom-opensource/wlan/qca-wifi-host-cmnAndroidPossible buffer over read due to lack of alignment between map or unmap length of IPA SMMU and...7.5 Highplatform/vendor/qcom-opensource/wlan/qca-wifi-host-cmnAndroidPossible out of bound read due to lack of length check of data while parsing the beacon or probe...7.5 Highplatform/vendor/qcom-opensource/wlan/qca-wifi-host-cmnAndroidPossible buffer over read issue due to improper length check on WPA IE string sent by peer in...7.5 Highplatform/vendor/qcom-opensource/wlan/qca-wifi-host-cmnAndroidPossible buffer overflow due to lack of parameter length check during MBSSID scan IE parse in...9.8 Criticalplatform/vendor/qcom-opensource/wlan/qca-wifi-host-cmnAndroidPossible buffer over read due to improper validation of IE size while parsing beacon from peer...7.5 Highplatform/vendor/qcom-opensource/wlan/qca-wifi-host-cmnAndroidPossible buffer over read due to improper validation of data pointer while parsing FILS...7.5 Highplatform/vendor/qcom-opensource/wlan/qca-wifi-host-cmnAndroidPossible out of bound read due to lack of length check of Bandwidth-NSS IE in Snapdragon Auto,...7.5 Highplatform/vendor/qcom-opensource/wlan/qca-wifi-host-cmnAndroidPossible buffer out of bound read can occur due to improper validation of TBTT count and length...7.5 Highplatform/vendor/qcom-opensource/wlan/qca-wifi-host-cmnAndroidAn issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WPA, WPA2, and WPA3...5.3 Mediumplatform/vendor/qcom-opensource/wlan/qca-wifi-host-cmnAndroidAn issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3...6.5 Mediumplatform/vendor/qcom-opensource/wlan/qca-wifi-host-cmnAndroidAn issue was discovered in the kernel in NetBSD 7.1. An Access Point (AP) forwards EAPOL frames...5.3 Mediumplatform/vendor/qcom-opensource/wlan/qca-wifi-host-cmnAndroidThe 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired...2.6 Lowplatform/vendor/qcom-opensource/wlan/qca-wifi-host-cmnAndroidOut of bound access in WLAN driver due to lack of validation of array length before copying into...9.8 Criticalplatform/vendor/qcom-opensource/wlan/qca-wifi-host-cmnAndroidOut of bound issue in WLAN driver while processing vdev responses from firmware due to lack of...7.8 High