Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 185

CVE-2024-33015

Buffer Over-read in WLAN Host

Transient DOS while parsing SCAN RNR IE when bytes received from AP is such that the size of the last param of IE is less than neighbor report.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Qualcomm
Products
Ar8035 Ar8035 Firmware Csr8811 and 390 more
CVE-2024-33024

Integer Overflow or Wraparound in WLAN Host

Transient DOS while parsing the ML IE when a beacon with length field inside the common info of ML IE greater than the ML IE length.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Qualcomm
Products
Ar8035 Ar8035 Firmware Csr8811 and 361 more
CVE-2024-33018

Buffer Over-read in WLAN Host

Transient DOS while parsing the received TID-to-link mapping element of the TID-to-link mapping action frame.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Qualcomm
Products
Ar8035 Ar8035 Firmware Csr8811 and 300 more
CVE-2024-33026

Buffer Over-read in WLAN Host

Transient DOS while parsing probe response and assoc response frame when received frame length is less than max size of timestamp.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Qualcomm
Products
Ar8035 Ar8035 Firmware Csr8811 and 329 more
CVE-2024-33028

Use After Free in Automotive Telematics

Memory corruption as fence object may still be accessed in timeline destruct after isync fence is released.

CVSS 3.1 · 8.4 High EPSS < 1% KEV · Not listed
Vendors
Qualcomm
Products
Ar8035 Ar8035 Firmware Csra6620 and 276 more
CVE-2024-33030

Buffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in Performance

Memory corruption while parsing IPC frequency table parameters for LPLH that has size greater than expected size.

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed
Vendors
Qualcomm
Products
Ar8035 Ar8035 Firmware Fastconnect 6900 and 41 more