qualcomm Vulnerabilities and Affected Products
Vulnerabilities associated with qca8081_firmware.
Products
Clear product- wsa8830_firmware215 vulnerabilities
- wsa8835_firmware215 vulnerabilities
- wcd9380_firmware211 vulnerabilities
- fastconnect_7800_firmware197 vulnerabilities
- fastconnect_6900_firmware194 vulnerabilities
- qca6696_firmware194 vulnerabilities
- wcd9385_firmware190 vulnerabilities
- qca6574au_firmware188 vulnerabilities
- wsa8810_firmware186 vulnerabilities
- wsa8815_firmware184 vulnerabilities
- qca6391_firmware180 vulnerabilities
- qca6574a_firmware175 vulnerabilities
- wcd9370_firmware175 vulnerabilities
- qca6595au_firmware172 vulnerabilities
- qca6698aq_firmware168 vulnerabilities
- qca8081_firmware160 vulnerabilities
- wcd9375_firmware158 vulnerabilities
- wcn3980_firmware157 vulnerabilities
- qca8337_firmware155 vulnerabilities
- sa6155p_firmware154 vulnerabilities
- wcn3988_firmware153 vulnerabilities
- ar8035_firmware150 vulnerabilities
- sa8155p_firmware150 vulnerabilities
- wcd9341_firmware145 vulnerabilities
- fastconnect_6700_firmware142 vulnerabilities
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2024-33063HIGH | Integer Overflow or Wraparound in WLAN Host CommunicationTransient DOS while parsing the ML IE when a beacon with common info length of the ML IE greater than the ML IE inside which this element is present. CWE-190Dec 2, 2024 | CVSS7.5v3.1 | EPSS0.265% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-33056HIGH | Buffer Over-read in MProcMemory corruption when allocating and accessing an entry in an SMEM partition continuously. | CVSS8.4v3.1 | EPSS0.104% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-33044HIGH | Improper Validation of Array Index in HypervisorMemory corruption while Configuring the SMR/S2CR register in Bypass mode. CWE-129Dec 2, 2024 | CVSS8.4v3.1 | EPSS0.104% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-38424HIGH | Use After Free in GPSMemory corruption during GNSS HAL process initialization. CWE-416Nov 4, 2024 | CVSS7.8v3.1 | EPSS0.103% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-38423HIGH | Buffer Copy Without Checking Size of Input in Graphics LinuxMemory corruption while processing GPU page table switch. CWE-120Nov 4, 2024 | CVSS7.8v3.1 | EPSS0.103% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-38422HIGH | Integer Overflow to Buffer Overflow in AudioMemory corruption while processing voice packet with arbitrary data received from ADSP. CWE-680Nov 4, 2024 | CVSS7.8v3.1 | EPSS0.103% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-38419HIGH | Use After Free in Automotive GPUMemory corruption while invoking IOCTL calls from the use-space for HGSL memory node. CWE-416Nov 4, 2024 | CVSS7.8v3.1 | EPSS0.103% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-38415HIGH | Use After Free in Computer VisionMemory corruption while handling session errors from firmware. CWE-416Nov 4, 2024 | CVSS7.8v3.1 | EPSS0.103% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-38408HIGH | Cryptographic Issues in BT ControllerCryptographic issue when a controller receives an LMP start encryption command under unexpected conditions. CWE-310Nov 4, 2024 | CVSS8.2v3.1 | EPSS0.144% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-38405HIGH | Buffer Over-read in WLAN HostTransient DOS while processing the CU information from RNR IE. | CVSS7.5v3.1 | EPSS0.254% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-38403HIGH | Buffer Over-read in WLAN FirmwareTransient DOS while parsing BTM ML IE when per STA profile is not included. | CVSS7.5v3.1 | EPSS0.254% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-33068HIGH | Use After Free in WLAN Host CommunicationTransient DOS while parsing fragments of MBSSID IE from beacon frame. CWE-416Nov 4, 2024 | CVSS7.5v3.1 | EPSS0.254% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-33031MEDIUM | Improper Input Validation in RILMemory corruption while processing the update SIM PB records request. CWE-20Nov 4, 2024 | CVSS6.7v3.1 | EPSS0.102% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-33030MEDIUM | Buffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in PerformanceMemory corruption while parsing IPC frequency table parameters for LPLH that has size greater than expected size. CWE-120Nov 4, 2024 | CVSS6.7v3.1 | EPSS0.102% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-23385HIGH | Reachable Assertion in ModemTransient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at UE. CWE-617Nov 4, 2024 | CVSS7.5v3.1 | EPSS0.254% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-38397HIGH | Buffer Over-read in WLAN Host CommunicationTransient DOS while parsing probe response and assoc response frame. | CVSS7.5v3.1 | EPSS0.324% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-33073HIGH | Buffer Over-read in WLAN Host CommunicationInformation disclosure while parsing the BSS parameter change count or MLD capabilities fields of the ML IE. | CVSS8.2v3.1 | EPSS0.347% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-33066CRITICAL | Improper Input Validation in WLAN Resource ManagerMemory corruption while redirecting log file to any file location with any file name. CWE-20Oct 7, 2024 | CVSS9.8v3.1 | EPSS0.59% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-23369HIGH | Improper Restriction of Operations within the Bounds of a Memory Buffer in HLOSMemory corruption when invalid length is provided from HLOS for FRS/UDS request/response buffers. CWE-119Oct 7, 2024 | CVSS7.8v3.1 | EPSS0.12% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-38402HIGH | Use After Free in DSP ServicesMemory corruption while processing IOCTL call for getting group info. CWE-416Sep 2, 2024 | CVSS7.8v3.1 | EPSS0.16% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-38401HIGH | Use After Free in Qualcomm IPCMemory corruption while processing concurrent IOCTL calls. CWE-416Sep 2, 2024 | CVSS7.8v3.1 | EPSS0.127% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-33060HIGH | Use After Free in DSP ServiceMemory corruption when two threads try to map and unmap a single node simultaneously. CWE-416Sep 2, 2024 | CVSS8.4v3.1 | EPSS0.166% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-33057HIGH | Buffer Over-read in WLAN Host CommunicationTransient DOS while parsing the multi-link element Control field when common information length check is missing before updating the location. | CVSS7.5v3.1 | EPSS0.297% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-33051HIGH | Buffer Over-read in WLAN FirmwareTransient DOS while processing TIM IE from beacon frame as there is no check for IE length. | CVSS7.5v3.1 | EPSS0.297% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-33050HIGH | Buffer Over-read in WLAN Host CommunicationTransient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper. | CVSS7.5v3.1 | EPSS0.297% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |