Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 301

CVE-2023-33105

Configuration Issue in WLAN Host and Firmware

Transient DOS in WLAN Host and Firmware when large number of open authentication frames are sent with an invalid transaction sequence number.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Qualcomm
Products
Ar8035 Ar8035 Firmware Ar9380 and 295 more
CVE-2023-43553

Use of Out-of-range Pointer Offset in WLAN HOST

Memory corruption while parsing beacon/probe response frame when AP sends more supported links in MLIE.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Qualcomm
Products
Ar8035 Ar8035 Firmware Csr8811 and 259 more
CVE-2024-33063

Integer Overflow or Wraparound in WLAN Host Communication

Transient DOS while parsing the ML IE when a beacon with common info length of the ML IE greater than the ML IE inside which this element is present.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Qualcomm
Products
Ar8035 Ar8035 Firmware Fastconnect 6900 and 247 more
CVE-2023-33083

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Host

Memory corruption in WLAN Host while processing RRM beacon on the AP.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Qualcomm
Products
Ar8035 Ar8035 Firmware Ar9380 and 227 more
CVE-2024-33012

Buffer Over-read in WLAN Host

Transient DOS while parsing the multiple MBSSID IEs from the beacon, when the tag length is non-zero value but with end of beacon.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Qualcomm
Products
Ar8035 Ar8035 Firmware Ar9380 and 498 more
CVE-2024-33013

Buffer Over-read in WLAN Host

Transient DOS when driver accesses the ML IE memory and offset value is incremented beyond ML IE length.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Qualcomm
Products
Ar8035 Ar8035 Firmware Csr8811 and 339 more
CVE-2024-23356

Improper Restriction of Operations within the Bounds of a Memory Buffer in HLOS

Memory corruption during session sign renewal request calls in HLOS.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Qualcomm
Products
Aqt1000 Aqt1000 Firmware Ar8031 and 419 more
CVE-2024-23350

Reachable Assertion in Multi Mode Call Processor

Permanent DOS when DL NAS transport receives multiple payloads such that one payload contains SOR container whose integrity check has failed, and the other is LPP where UE needs to send status message to network.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Qualcomm
Products
Ar8035 Ar8035 Firmware Fastconnect 6900 and 47 more