Showing 25 vulnerabilities on this page for qca8081_firmware

Signals CISA KEV Ransomware Nuclei
qualcomm vulnerability results
VulnerabilityTitle and contextCVSSEPSSPoCsSignalsSTIX action

Integer Overflow or Wraparound in WLAN Host Communication

Transient DOS while parsing the ML IE when a beacon with common info length of the ML IE greater than the ML IE inside which this element is present.

CWE-190Dec 2, 2024
CVSS7.5v3.1EPSS0.265%PoCs0SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX

Buffer Over-read in MProc

Memory corruption when allocating and accessing an entry in an SMEM partition continuously.

CWE-125CWE-126Dec 2, 2024
CVSS8.4v3.1EPSS0.104%PoCs0SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX

Improper Validation of Array Index in Hypervisor

Memory corruption while Configuring the SMR/S2CR register in Bypass mode.

CWE-129Dec 2, 2024
CVSS8.4v3.1EPSS0.104%PoCs0SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX

Use After Free in GPS

Memory corruption during GNSS HAL process initialization.

CWE-416Nov 4, 2024
CVSS7.8v3.1EPSS0.103%PoCs0SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX

Buffer Copy Without Checking Size of Input in Graphics Linux

Memory corruption while processing GPU page table switch.

CWE-120Nov 4, 2024
CVSS7.8v3.1EPSS0.103%PoCs0SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX

Integer Overflow to Buffer Overflow in Audio

Memory corruption while processing voice packet with arbitrary data received from ADSP.

CWE-680Nov 4, 2024
CVSS7.8v3.1EPSS0.103%PoCs0SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX

Use After Free in Automotive GPU

Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node.

CWE-416Nov 4, 2024
CVSS7.8v3.1EPSS0.103%PoCs0SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX

Use After Free in Computer Vision

Memory corruption while handling session errors from firmware.

CWE-416Nov 4, 2024
CVSS7.8v3.1EPSS0.103%PoCs0SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX

Cryptographic Issues in BT Controller

Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.

CWE-310Nov 4, 2024
CVSS8.2v3.1EPSS0.144%PoCs0SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX

Buffer Over-read in WLAN Host

Transient DOS while processing the CU information from RNR IE.

CWE-125CWE-126Nov 4, 2024
CVSS7.5v3.1EPSS0.254%PoCs0SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX

Buffer Over-read in WLAN Firmware

Transient DOS while parsing BTM ML IE when per STA profile is not included.

CWE-125CWE-126Nov 4, 2024
CVSS7.5v3.1EPSS0.254%PoCs0SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX

Use After Free in WLAN Host Communication

Transient DOS while parsing fragments of MBSSID IE from beacon frame.

CWE-416Nov 4, 2024
CVSS7.5v3.1EPSS0.254%PoCs0SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX

Improper Input Validation in RIL

Memory corruption while processing the update SIM PB records request.

CWE-20Nov 4, 2024
CVSS6.7v3.1EPSS0.102%PoCs0SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX

Buffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in Performance

Memory corruption while parsing IPC frequency table parameters for LPLH that has size greater than expected size.

CWE-120Nov 4, 2024
CVSS6.7v3.1EPSS0.102%PoCs0SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX

Reachable Assertion in Modem

Transient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at UE.

CWE-617Nov 4, 2024
CVSS7.5v3.1EPSS0.254%PoCs0SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX

Buffer Over-read in WLAN Host Communication

Transient DOS while parsing probe response and assoc response frame.

CWE-125CWE-126Oct 7, 2024
CVSS7.5v3.1EPSS0.324%PoCs0SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX

Buffer Over-read in WLAN Host Communication

Information disclosure while parsing the BSS parameter change count or MLD capabilities fields of the ML IE.

CWE-125CWE-126Oct 7, 2024
CVSS8.2v3.1EPSS0.347%PoCs0SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX

Improper Input Validation in WLAN Resource Manager

Memory corruption while redirecting log file to any file location with any file name.

CWE-20Oct 7, 2024
CVSS9.8v3.1EPSS0.59%PoCs0SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX

Improper Restriction of Operations within the Bounds of a Memory Buffer in HLOS

Memory corruption when invalid length is provided from HLOS for FRS/UDS request/response buffers.

CWE-119Oct 7, 2024
CVSS7.8v3.1EPSS0.12%PoCs0SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX

Use After Free in DSP Services

Memory corruption while processing IOCTL call for getting group info.

CWE-416Sep 2, 2024
CVSS7.8v3.1EPSS0.16%PoCs0SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX

Use After Free in Qualcomm IPC

Memory corruption while processing concurrent IOCTL calls.

CWE-416Sep 2, 2024
CVSS7.8v3.1EPSS0.127%PoCs0SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX

Use After Free in DSP Service

Memory corruption when two threads try to map and unmap a single node simultaneously.

CWE-416Sep 2, 2024
CVSS8.4v3.1EPSS0.166%PoCs0SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX

Buffer Over-read in WLAN Host Communication

Transient DOS while parsing the multi-link element Control field when common information length check is missing before updating the location.

CWE-125CWE-126Sep 2, 2024
CVSS7.5v3.1EPSS0.297%PoCs0SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX

Buffer Over-read in WLAN Firmware

Transient DOS while processing TIM IE from beacon frame as there is no check for IE length.

CWE-125CWE-126Sep 2, 2024
CVSS7.5v3.1EPSS0.297%PoCs0SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX

Buffer Over-read in WLAN Host Communication

Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper.

CWE-125CWE-126Sep 2, 2024
CVSS7.5v3.1EPSS0.297%PoCs0SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX