Qualcomm Qca9558 vulnerabilities

• qualcomm ar8035 firmware, ar9380 firmware, csr8811 firmware +130 more +132 more Improper Input Validation in WIN SON CVE-2024-21473 9.8 CriticalApril 1, 2024
• qualcomm ar8035 firmware, ar9380 firmware, csr8811 firmware +113 more +115 more Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Host CVE-2023-33083 9.8 CriticalDecember 5, 2023
• qualcomm ar8035 firmware, ar9380 firmware, csr8811 firmware +113 more +115 more Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Host CVE-2023-33082 9.8 CriticalDecember 5, 2023
• qualcomm aqt1000 firmware, ar8031 firmware, ar8035 firmware +228 more +230 more Buffer Over-read in IOE Firmware CVE-2023-28563 6.1 MediumNovember 7, 2023
• qualcomm 9205 lte firmware, apq8017 firmware, apq8064au firmware +292 more +294 more Improper Validation of Array Index in WLAN HAL CVE-2023-28565 7.8 HighSeptember 5, 2023
• qualcomm aqt1000 firmware, ar8031 firmware, ar9380 firmware +247 more +249 more Use of Out-of-range Pointer Offset in WLAN HAL CVE-2023-28564 7.8 HighSeptember 5, 2023
• qualcomm 8098 firmware, 8998 firmware, apq5053-aa firmware +265 more +267 more Buffer Copy Without Checking Size of Input in WLAN HAL CVE-2023-28560 7.8 HighSeptember 5, 2023
• qualcomm apq8017 firmware, apq8064au firmware, apq8076 firmware +281 more +283 more Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN HAL CVE-2023-21628 8.4 HighJune 6, 2023
• qualcomm apq8009 firmware, apq8017 firmware, apq8076 firmware +236 more +238 more Buffer copy without checking the size of input in WLAN HAL. CVE-2022-25655 8.4 HighMarch 7, 2023
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8096au firmware, ar8031 firmware +157 more +159 more Possible out of bound access of DCI resources due to lack of validation process and resource... CVE-2021-30325 Fix available 6.7 MediumFebruary 1, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +237 more +239 more Possible buffer overflow due to lack of buffer length check when segmented WMI command is... CVE-2021-30303 7.8 HighJanuary 3, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8096au firmware, ar8031 firmware +178 more +180 more Use after free condition can occur in wired connectivity due to a race condition while creating... CVE-2021-30313 Fix available 6.7 MediumJanuary 1, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8053 firmware +202 more +204 more Possible use after free due to improper memory validation when initializing new interface via... CVE-2021-30266 6.7 MediumNovember 12, 2021
• qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8053 firmware +192 more +194 more Possible use after free due improper validation of reference from call back to internal store... CVE-2021-30264 6.7 MediumNovember 12, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +315 more +317 more Information disclosure through timing and power side-channels during mod exponentiation for RSA... CVE-2021-1924 9.0 CriticalNovember 12, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8053 firmware, apq8064au firmware +217 more +219 more Possible buffer over read due to lack of length check while parsing beacon IE response in... CVE-2021-1980 Fix available 7.5 HighOctober 1, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +325 more +327 more Buffer overflow occurs in trusted applications due to lack of length check of parameters in... CVE-2021-1909 7.3 HighSeptember 9, 2021
• qualcomm, inc. snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8053 firmware +106 more +108 more Buffer over read could occur due to incorrect check of buffer size while flashing emmc devices in... CVE-2021-1928 4.6 MediumSeptember 8, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +265 more +267 more Improper authentication of un-encrypted plaintext Wi-Fi frames in an encrypted network can lead... CVE-2020-11301 Fix available EPSS 11.1% 9.1 CriticalSeptember 8, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8035 firmware +188 more +190 more Possible buffer over read due to lack of alignment between map or unmap length of IPA SMMU and... CVE-2021-1974 Fix available 7.5 HighSeptember 1, 2021
• qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar9380 firmware +82 more +84 more Buffer Overflow while processing IOCTL for getting peripheral endpoint information there is no... CVE-2021-1962 Fix available 6.7 MediumSeptember 1, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8053 firmware, apq8064au firmware +216 more +218 more Possible out of bound read due to lack of length check of data while parsing the beacon or probe... CVE-2021-1948 Fix available 7.5 HighSeptember 1, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8064au firmware, apq8096au firmware +213 more +215 more Possible buffer over read issue due to improper length check on WPA IE string sent by peer in... CVE-2021-1941 Fix available 7.5 HighSeptember 1, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +245 more +247 more A use after free can occur due to improper validation of P2P device address in PD Request frame... CVE-2021-1976 Fix available 9.8 CriticalAugust 1, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +275 more +277 more Possible buffer overflow due to improper validation of device types during P2P search in... CVE-2021-1972 Fix available 9.8 CriticalAugust 1, 2021
• qualcomm, inc. snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009w firmware, apq8053 firmware +85 more +87 more Use-after-free vulnerability in kernel graphics driver because of storing an invalid pointer in... CVE-2021-1947 Fix available 8.4 HighAugust 1, 2021
• qualcomm, inc. snapdragon wired infrastructure and networking, qualcomm ar7420 firmware, ar9380 firmware +37 more +39 more An assertion can be reached in the WLAN subsystem while using the Wi-Fi Fine Timing Measurement... CVE-2021-1887 7.5 HighJuly 13, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm apq8053 firmware, aqt1000 firmware +186 more +188 more Possible buffer over read due to improper validation of IE size while parsing beacon from peer... CVE-2021-1964 Fix available 7.5 HighJuly 1, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm apq8053 firmware, aqt1000 firmware +148 more +150 more Possible buffer over read due to improper validation of data pointer while parsing FILS... CVE-2021-1954 Fix available 7.5 HighJuly 1, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8053 firmware, apq8064au firmware +204 more +206 more Possible out of bound read due to lack of length check of Bandwidth-NSS IE in Snapdragon Auto,... CVE-2021-1945 Fix available 7.5 HighJuly 1, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm apq8053 firmware, aqt1000 firmware +175 more +177 more Possible buffer out of bound read can occur due to improper validation of TBTT count and length... CVE-2021-1943 Fix available 7.5 HighJuly 1, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +536 more +538 more Buffer overflow might occur while parsing unified command due to lack of check of input data... CVE-2020-11235 7.8 HighJune 9, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +269 more +271 more Stack out-of-bounds write occurs while setting up a cipher device if the provided IV length... CVE-2020-11267 Fix available 8.4 HighJune 1, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8096au firmware, aqt1000 firmware +402 more +404 more Buffer overflow can occur due to improper validation of NDP application information length in... CVE-2021-1915 7.8 HighMay 7, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +455 more +457 more Possible use after free due to lack of null check while memory is being freed in FastRPC driver... CVE-2021-1927 Fix available 8.4 HighMay 1, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +530 more +532 more Arithmetic overflow can happen while processing NOA IE due to improper error handling in... CVE-2020-11296 7.5 HighFebruary 22, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar7420 firmware +410 more +412 more Denial of service while processing fine timing measurement request (FTMR) frame with reserved... CVE-2020-11280 7.5 HighFebruary 22, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar7420 firmware +413 more +415 more Possible denial of service due to RTT responder consistently rejects all FTMR by transmitting... CVE-2020-11270 7.5 HighFebruary 22, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +535 more +537 more Possible memory corruption while processing EAPOL frames due to lack of validation of key length... CVE-2020-11269 8.8 HighFebruary 22, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8064au, apq8096au +403 more +405 more Out of bound access in WLAN driver due to lack of validation of array length before copying into... CVE-2020-11225 Fix available 9.8 CriticalDecember 1, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +44 more +46 more u'Out of bounds memory access during memory copy while processing Host command' in Snapdragon... CVE-2020-3666 7.8 HighSeptember 8, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8053 firmware, apq8096au firmware +16 more +18 more Possible out of bounds read due to a missing bounds check and could lead to local information... CVE-2020-3700 Fix available 7.5 HighJuly 1, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +37 more +39 more Out of bounds memcpy can occur by providing the embedded NULL character string and length greater... CVE-2019-10607 7.8 HighDecember 18, 2019
• qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8053 firmware +28 more +30 more Possible buffer overwrite in message handler due to lack of validation of tid value calculated... CVE-2019-10595 7.8 HighDecember 18, 2019
• qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq8064 firmware, mdm9150 firmware +40 more +42 more The txrx stats req might be double freed in the pdev detach when the host driver is unloading in... CVE-2018-11947 5.5 MediumJune 14, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq4019 firmware, ipq8064 firmware +54 more +56 more Improper check before assigning value can lead to integer overflow in Snapdragon Auto, Snapdragon... CVE-2018-11968 7.8 HighMay 24, 2019
• qualcomm technologies, inc. small cell soc, snapdragon mobile, snapdragon wear, qualcomm fsm9055 firmware, fsm9955 firmware +37 more +39 more Lack of check of buffer length before copying can lead to buffer overflow in camera module in... CVE-2017-18279 7.8 HighMay 6, 2019
• qualcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm ipq4019 firmware, ipq8064 firmware +47 more +49 more Buffer overwrite can happen in WLAN function while processing set pdev parameter command due to... CVE-2018-11871 7.8 HighOctober 29, 2018
• qualcomm ipq4019 firmware, ipq8064 firmware, mdm9206 firmware +24 more +26 more In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and... CVE-2015-9220 9.8 CriticalApril 18, 2018
• qualcomm ipq4019 firmware, ipq8064 firmware, mdm9206 firmware +27 more +29 more In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile,... CVE-2014-9998 9.8 CriticalApril 18, 2018