Qualcomm Qca9896 vulnerabilities

• qualcomm 9205 lte firmware, apq8017 firmware, apq8064au firmware +292 more +294 more Improper Validation of Array Index in WLAN HAL CVE-2023-28565 7.8 HighSeptember 5, 2023
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +237 more +239 more Possible buffer overflow due to lack of buffer length check when segmented WMI command is... CVE-2021-30303 7.8 HighJanuary 3, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8053 firmware +202 more +204 more Possible use after free due to improper memory validation when initializing new interface via... CVE-2021-30266 6.7 MediumNovember 12, 2021
• qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8053 firmware +192 more +194 more Possible use after free due improper validation of reference from call back to internal store... CVE-2021-30264 6.7 MediumNovember 12, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8053 firmware, apq8064au firmware +217 more +219 more Possible buffer over read due to lack of length check while parsing beacon IE response in... CVE-2021-1980 Fix available 7.5 HighOctober 1, 2021
• qualcomm, inc. snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8053 firmware +106 more +108 more Buffer over read could occur due to incorrect check of buffer size while flashing emmc devices in... CVE-2021-1928 4.6 MediumSeptember 8, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +265 more +267 more Improper authentication of un-encrypted plaintext Wi-Fi frames in an encrypted network can lead... CVE-2020-11301 Fix available EPSS 11.1% 9.1 CriticalSeptember 8, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8035 firmware +188 more +190 more Possible buffer over read due to lack of alignment between map or unmap length of IPA SMMU and... CVE-2021-1974 Fix available 7.5 HighSeptember 1, 2021
• qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar9380 firmware +82 more +84 more Buffer Overflow while processing IOCTL for getting peripheral endpoint information there is no... CVE-2021-1962 Fix available 6.7 MediumSeptember 1, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8053 firmware, apq8064au firmware +216 more +218 more Possible out of bound read due to lack of length check of data while parsing the beacon or probe... CVE-2021-1948 Fix available 7.5 HighSeptember 1, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8064au firmware, apq8096au firmware +213 more +215 more Possible buffer over read issue due to improper length check on WPA IE string sent by peer in... CVE-2021-1941 Fix available 7.5 HighSeptember 1, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +245 more +247 more A use after free can occur due to improper validation of P2P device address in PD Request frame... CVE-2021-1976 Fix available 9.8 CriticalAugust 1, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +275 more +277 more Possible buffer overflow due to improper validation of device types during P2P search in... CVE-2021-1972 Fix available 9.8 CriticalAugust 1, 2021
• qualcomm, inc. snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009w firmware, apq8053 firmware +85 more +87 more Use-after-free vulnerability in kernel graphics driver because of storing an invalid pointer in... CVE-2021-1947 Fix available 8.4 HighAugust 1, 2021
• qualcomm, inc. snapdragon wired infrastructure and networking, qualcomm ar7420 firmware, ar9380 firmware +37 more +39 more An assertion can be reached in the WLAN subsystem while using the Wi-Fi Fine Timing Measurement... CVE-2021-1887 7.5 HighJuly 13, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm apq8053 firmware, aqt1000 firmware +186 more +188 more Possible buffer over read due to improper validation of IE size while parsing beacon from peer... CVE-2021-1964 Fix available 7.5 HighJuly 1, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm apq8053 firmware, aqt1000 firmware +148 more +150 more Possible buffer over read due to improper validation of data pointer while parsing FILS... CVE-2021-1954 Fix available 7.5 HighJuly 1, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8053 firmware, apq8064au firmware +204 more +206 more Possible out of bound read due to lack of length check of Bandwidth-NSS IE in Snapdragon Auto,... CVE-2021-1945 Fix available 7.5 HighJuly 1, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm apq8053 firmware, aqt1000 firmware +175 more +177 more Possible buffer out of bound read can occur due to improper validation of TBTT count and length... CVE-2021-1943 Fix available 7.5 HighJuly 1, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +536 more +538 more Buffer overflow might occur while parsing unified command due to lack of check of input data... CVE-2020-11235 7.8 HighJune 9, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +269 more +271 more Stack out-of-bounds write occurs while setting up a cipher device if the provided IV length... CVE-2020-11267 Fix available 8.4 HighJune 1, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8096au firmware, aqt1000 firmware +402 more +404 more Buffer overflow can occur due to improper validation of NDP application information length in... CVE-2021-1915 7.8 HighMay 7, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +455 more +457 more Possible use after free due to lack of null check while memory is being freed in FastRPC driver... CVE-2021-1927 Fix available 8.4 HighMay 1, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +530 more +532 more Arithmetic overflow can happen while processing NOA IE due to improper error handling in... CVE-2020-11296 7.5 HighFebruary 22, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar7420 firmware +410 more +412 more Denial of service while processing fine timing measurement request (FTMR) frame with reserved... CVE-2020-11280 7.5 HighFebruary 22, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar7420 firmware +413 more +415 more Possible denial of service due to RTT responder consistently rejects all FTMR by transmitting... CVE-2020-11270 7.5 HighFebruary 22, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +535 more +537 more Possible memory corruption while processing EAPOL frames due to lack of validation of key length... CVE-2020-11269 8.8 HighFebruary 22, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8064au, apq8096au +403 more +405 more Out of bound access in WLAN driver due to lack of validation of array length before copying into... CVE-2020-11225 Fix available 9.8 CriticalDecember 1, 2020