CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
Possible stack out of bound write might happen due to time bitmap length and bit duration fields of the attributes like NAN ranging setup attribute inside a NAN management frame are not Properly validated in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking |
Possible out of bound read while WLAN frame parsing due to lack of check for body and header length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking |
Buffer over-read can happen when the buffer length received from response handlers is more than the size of the payload in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking |
Transient DOS while parsing ESP IE from beacon/probe response frame. |
Memory corruption while creating a fence to wait on timeline events, and simultaneously signal timeline events. |
Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions. |
Memory corruption while processing voice packet with arbitrary data received from ADSP. |
Memory corruption while handling session errors from firmware. |
Cryptographic issue while parsing RSA keys in COBR format. |
Information disclosure while decoding Tracking Area Update Accept or Attach Accept message received from network. |
memory corruption when an invalid firehose patch command is invoked. |
Transient DOS when processing the non-transmitted BSSID profile sub-elements present within the MBSSID Information Element (IE) of a beacon frame that is received from over-the-air (OTA). |