Qualcomm Qca1990 vulnerabilities

• qualcomm 315 5g iot modem firmware, 9206 lte modem firmware, apq8017 firmware +354 more +356 more Loop with Unreachable Exit Condition (Infinite Loop) in WLAN Firmware CVE-2023-43511 7.5 HighJanuary 2, 2024
• qualcomm 9205 lte firmware, apq8017 firmware, apq8064au firmware +292 more +294 more Improper Validation of Array Index in WLAN HAL CVE-2023-28565 7.8 HighSeptember 5, 2023
• qualcomm 8098 firmware, 8998 firmware, apq5053-aa firmware +265 more +267 more Buffer Copy Without Checking Size of Input in WLAN HAL CVE-2023-28560 7.8 HighSeptember 5, 2023
• qualcomm apq8017 firmware, apq8064au firmware, apq8076 firmware +281 more +283 more Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN HAL CVE-2023-21628 8.4 HighJune 6, 2023
• qualcomm 315 5g iot modem firmware, 8905 firmware, 8909 firmware +351 more +353 more Integer overflow or wraparound in WLAN CVE-2022-40532 8.4 HighApril 4, 2023
• qualcomm apq8009 firmware, apq8017 firmware, apq8076 firmware +236 more +238 more Buffer copy without checking the size of input in WLAN HAL. CVE-2022-25655 8.4 HighMarch 7, 2023
• qualcomm apq8009 firmware, apq8017 firmware, apq8064au firmware +293 more +295 more Buffer over-read in WLAN Firmware. CVE-2022-40512 7.5 HighFebruary 9, 2023
• qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +116 more +118 more Information disclosure in WLAN due to improper length check while processing authentication... CVE-2022-25719 8.2 HighOctober 19, 2022
• qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +140 more +142 more Cryptographic issue in WLAN due to improper check on return value while authentication handshake... CVE-2022-25718 9.1 CriticalOctober 19, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +315 more +317 more Information disclosure through timing and power side-channels during mod exponentiation for RSA... CVE-2021-1924 9.0 CriticalNovember 12, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +186 more +188 more Possible memory corruption due to lack of bound check of input index in Snapdragon Auto,... CVE-2021-1959 7.8 HighOctober 20, 2021
• qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8053 firmware +89 more +91 more Accepting AMSDU frames with mismatched destination and source address can lead to information... CVE-2020-11303 8.6 HighOctober 20, 2021
• qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +180 more +182 more Possible integer and heap overflow due to lack of input command size validation while handling... CVE-2021-30261 8.4 HighSeptember 17, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +256 more +258 more Possible Integer overflow to buffer overflow issue can occur due to improper validation of input... CVE-2021-30260 8.4 HighSeptember 17, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +325 more +327 more Buffer overflow occurs in trusted applications due to lack of length check of parameters in... CVE-2021-1909 7.3 HighSeptember 9, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +169 more +171 more Integer underflow can occur due to improper handling of incoming RTCP packets in Snapdragon Auto,... CVE-2021-1920 9.8 CriticalSeptember 8, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +180 more +182 more Possible buffer underflow due to lack of check for negative indices values when processing user... CVE-2021-1916 9.8 CriticalSeptember 8, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +175 more +177 more Possible buffer overflow in voice service due to lack of input validation of parameters in QMI... CVE-2020-11292 7.8 HighJune 9, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +536 more +538 more Buffer overflow might occur while parsing unified command due to lack of check of input data... CVE-2020-11235 7.8 HighJune 9, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +501 more +503 more Buffer over-read can happen while processing WPA,RSN IE of beacon and response frames if IE... CVE-2020-11159 9.1 CriticalJune 9, 2021
• qualcomm, inc. snapdragon auto, snapdragon mobile, qualcomm apq8009, apq8016 +84 more +86 more Potential UE reset while decoding a crafted Sib1 or SIB1 that schedules unsupported SIBs and can... CVE-2020-11268 7.5 HighMay 7, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +474 more +476 more Out of bound read occurs while processing crafted SDP due to lack of check of null string in... CVE-2020-11191 8.2 HighApril 7, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +530 more +532 more Arithmetic overflow can happen while processing NOA IE due to improper error handling in... CVE-2020-11296 7.5 HighFebruary 22, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +512 more +514 more Possible buffer over read while processing P2P IE and NOA attribute of beacon and probe response... CVE-2020-11276 9.1 CriticalFebruary 22, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +535 more +537 more Possible memory corruption while processing EAPOL frames due to lack of validation of key length... CVE-2020-11269 8.8 HighFebruary 22, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8016 firmware +517 more +519 more Possible memory corruption and information leakage in sub-system due to lack of check for... CVE-2020-11204 7.8 HighFebruary 22, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8009 firmware, apq8016 firmware +391 more +393 more Out of bound write and read in TA while processing command from NS side due to improper length... CVE-2020-11195 7.8 HighFebruary 22, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +503 more +505 more Out of bound memory access while playing music playbacks with crafted vorbis content due to... CVE-2020-11170 9.8 CriticalFebruary 22, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009, apq8009w +504 more +506 more Possible out of bound memory access in audio due to integer underflow while processing modified... CVE-2020-3691 9.8 CriticalJanuary 21, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009, apq8009w +490 more +492 more Possible memory out of bound issue during music playback when an incorrect bit stream content is... CVE-2020-3686 9.8 CriticalJanuary 21, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009, apq8009w +504 more +506 more Pointer variable which is freed is not cleared can result in memory corruption and leads to... CVE-2020-3685 7.5 HighJanuary 21, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009, apq8009w +553 more +555 more Out of bound reads might occur in while processing Service descriptor due to improper validation... CVE-2020-11213 9.8 CriticalJanuary 21, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009, apq8016 +539 more +541 more Out of bounds reads while parsing NAN beacons attributes and OUIs due to improper length of field... CVE-2020-11212 9.8 CriticalJanuary 21, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009, apq8017 +492 more +494 more Out of bound memory access during music playback with modified content due to copying data... CVE-2020-11143 9.8 CriticalJanuary 21, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8017, apq8037 +447 more +449 more Out of bound memory access during music playback with ALAC modified content due to improper... CVE-2020-11140 9.8 CriticalJanuary 21, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009, apq8009w +489 more +491 more Uninitialized pointers accessed during music play back with incorrect bit stream due to an... CVE-2020-11138 9.8 CriticalJanuary 21, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009, apq8009w +489 more +491 more Integer multiplication overflow resulting in lower buffer size allocation than expected causes... CVE-2020-11137 9.8 CriticalJanuary 21, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009, apq8009w +504 more +506 more Buffer Over-read in audio driver while using malloc management function due to not returning NULL... CVE-2020-11136 9.8 CriticalJanuary 21, 2021