Qualcomm Qcn5502 vulnerabilities

• qualcomm ar8035 firmware, ar9380 firmware, csr8811 firmware +130 more +132 more Improper Input Validation in WIN SON CVE-2024-21473 9.8 CriticalApril 1, 2024
• qualcomm ar8035 firmware, ar9380 firmware, csr8811 firmware +113 more +115 more Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Host CVE-2023-33083 9.8 CriticalDecember 5, 2023
• qualcomm ar8035 firmware, ar9380 firmware, csr8811 firmware +113 more +115 more Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Host CVE-2023-33082 9.8 CriticalDecember 5, 2023
• qualcomm 9205 lte firmware, apq8017 firmware, apq8064au firmware +292 more +294 more Improper Validation of Array Index in WLAN HAL CVE-2023-28565 7.8 HighSeptember 5, 2023
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8096au firmware, ar8031 firmware +157 more +159 more Possible out of bound access of DCI resources due to lack of validation process and resource... CVE-2021-30325 Fix available 6.7 MediumFebruary 1, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +237 more +239 more Possible buffer overflow due to lack of buffer length check when segmented WMI command is... CVE-2021-30303 7.8 HighJanuary 3, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8096au firmware, ar8031 firmware +178 more +180 more Use after free condition can occur in wired connectivity due to a race condition while creating... CVE-2021-30313 Fix available 6.7 MediumJanuary 1, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8053 firmware +202 more +204 more Possible use after free due to improper memory validation when initializing new interface via... CVE-2021-30266 6.7 MediumNovember 12, 2021
• qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8053 firmware +192 more +194 more Possible use after free due improper validation of reference from call back to internal store... CVE-2021-30264 6.7 MediumNovember 12, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8053 firmware, apq8064au firmware +217 more +219 more Possible buffer over read due to lack of length check while parsing beacon IE response in... CVE-2021-1980 Fix available 7.5 HighOctober 1, 2021
• qualcomm, inc. snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8053 firmware +106 more +108 more Buffer over read could occur due to incorrect check of buffer size while flashing emmc devices in... CVE-2021-1928 4.6 MediumSeptember 8, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +265 more +267 more Improper authentication of un-encrypted plaintext Wi-Fi frames in an encrypted network can lead... CVE-2020-11301 Fix available EPSS 11.1% 9.1 CriticalSeptember 8, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8053 firmware, apq8064au firmware +216 more +218 more Possible out of bound read due to lack of length check of data while parsing the beacon or probe... CVE-2021-1948 Fix available 7.5 HighSeptember 1, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8064au firmware, apq8096au firmware +213 more +215 more Possible buffer over read issue due to improper length check on WPA IE string sent by peer in... CVE-2021-1941 Fix available 7.5 HighSeptember 1, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +245 more +247 more A use after free can occur due to improper validation of P2P device address in PD Request frame... CVE-2021-1976 Fix available 9.8 CriticalAugust 1, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +275 more +277 more Possible buffer overflow due to improper validation of device types during P2P search in... CVE-2021-1972 Fix available 9.8 CriticalAugust 1, 2021
• qualcomm, inc. snapdragon wired infrastructure and networking, qualcomm ar7420 firmware, ar9380 firmware +37 more +39 more An assertion can be reached in the WLAN subsystem while using the Wi-Fi Fine Timing Measurement... CVE-2021-1887 7.5 HighJuly 13, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm apq8053 firmware, aqt1000 firmware +186 more +188 more Possible buffer over read due to improper validation of IE size while parsing beacon from peer... CVE-2021-1964 Fix available 7.5 HighJuly 1, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm apq8053 firmware, aqt1000 firmware +148 more +150 more Possible buffer over read due to improper validation of data pointer while parsing FILS... CVE-2021-1954 Fix available 7.5 HighJuly 1, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8053 firmware, apq8064au firmware +204 more +206 more Possible out of bound read due to lack of length check of Bandwidth-NSS IE in Snapdragon Auto,... CVE-2021-1945 Fix available 7.5 HighJuly 1, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm apq8053 firmware, aqt1000 firmware +175 more +177 more Possible buffer out of bound read can occur due to improper validation of TBTT count and length... CVE-2021-1943 Fix available 7.5 HighJuly 1, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +536 more +538 more Buffer overflow might occur while parsing unified command due to lack of check of input data... CVE-2020-11235 7.8 HighJune 9, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +269 more +271 more Stack out-of-bounds write occurs while setting up a cipher device if the provided IV length... CVE-2020-11267 Fix available 8.4 HighJune 1, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8096au firmware, aqt1000 firmware +402 more +404 more Buffer overflow can occur due to improper validation of NDP application information length in... CVE-2021-1915 7.8 HighMay 7, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +455 more +457 more Possible use after free due to lack of null check while memory is being freed in FastRPC driver... CVE-2021-1927 Fix available 8.4 HighMay 1, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar7420 firmware +410 more +412 more Denial of service while processing fine timing measurement request (FTMR) frame with reserved... CVE-2020-11280 7.5 HighFebruary 22, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar7420 firmware +413 more +415 more Possible denial of service due to RTT responder consistently rejects all FTMR by transmitting... CVE-2020-11270 7.5 HighFebruary 22, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +535 more +537 more Possible memory corruption while processing EAPOL frames due to lack of validation of key length... CVE-2020-11269 8.8 HighFebruary 22, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8064au, apq8096au +403 more +405 more Out of bound access in WLAN driver due to lack of validation of array length before copying into... CVE-2020-11225 Fix available 9.8 CriticalDecember 1, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, arista access point, debian linux +11 more +13 more u'Specifically timed and handcrafted traffic can cause internal errors in a WLAN device that lead... CVE-2020-3702 Fix available 6.5 MediumSeptember 8, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +44 more +46 more u'Out of bounds memory access during memory copy while processing Host command' in Snapdragon... CVE-2020-3666 7.8 HighSeptember 8, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq4019 firmware, ipq8064 firmware +48 more +50 more While sending the rendered surface content to the screen, Error handling is not properly checked... CVE-2019-2240 5.5 MediumJuly 25, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq4019 firmware, ipq8064 firmware +54 more +56 more Improper check before assigning value can lead to integer overflow in Snapdragon Auto, Snapdragon... CVE-2018-11968 7.8 HighMay 24, 2019
• qualcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +21 more +23 more When dynamic memory allocation fails, currently the process sleeps for one second and continues... CVE-2017-18277 5.5 MediumOctober 23, 2018