cve.bz

qualcomm csr8811 firmware vulnerabilities, newest first, page 2

Filter
  1. 7.5CVE-2024-33010EPSS 0.3%

    Transient DOS while parsing fragments of MBSSID IE from beacon frame.

  2. 7.5CVE-2024-21467EPSS 0.3%

    Information disclosure while handling beacon probe frame during scan entry generation in client side.

  3. 7.5CVE-2024-21459EPSS 0.3%

    Information disclosure while handling beacon or probe response frame in STA.

  4. 7.8CVE-2024-23368EPSS 0.1%

    Memory corruption when allocating and accessing an entry in an SMEM partition.

  5. 7.8CVE-2024-21482EPSS 0.1%

    Memory corruption during the secure boot process, when the `bootm` command is used, it bypasses the authentication of the kernel/rootfs image.

  6. 5.5CVE-2024-21462EPSS 0.09%

    Transient DOS while loading the TA ELF file.

  7. 7.5CVE-2024-21458EPSS 0.2%

    Information disclosure while handling SA query action frame.

  8. 7.5CVE-2024-21457EPSS 0.2%

    INformation disclosure while handling Multi-link IE in beacon frame.

  9. 7.5CVE-2024-23363EPSS 0.3%

    Transient DOS while processing an improperly formatted Fine Time Measurement (FTM) management frame.

  10. 7.5CVE-2023-43537EPSS 0.2%

    Information disclosure while handling T2LM Action Frame in WLAN Host.

  11. 7.5CVE-2024-21477EPSS 0.3%

    Transient DOS while parsing a protected 802.11az Fine Time Measurement (FTM) frame.

  12. 9.8CVE-2024-21473EPSS 0.7%

    Memory corruption while redirecting log file to any file location with any file name.

  13. 9.8CVE-2023-43553EPSS 0.4%

    Memory corruption while parsing beacon/probe response frame when AP sends more supported links in MLIE.

  14. 9.8CVE-2023-43552EPSS 0.4%

    Memory corruption while processing MBSSID beacon containing several subelement IE.

  15. 7.8CVE-2023-43549EPSS 0.1%

    Memory corruption while processing TPC target power table in FTM TPC.

  16. 7.5CVE-2023-43539EPSS 0.3%

    Transient DOS while processing an improperly formatted 802.11az Fine Time Measurement protocol frame.

  17. 7.5CVE-2023-33105EPSS 0.8%

    Transient DOS in WLAN Host and Firmware when large number of open authentication frames are sent with an invalid transaction sequence number.

  18. 7.8CVE-2023-28578EPSS 0.1%

    Memory corruption in Core Services while executing the command for removing a single event listener.

  19. 7.5CVE-2023-43536EPSS 0.3%

    Transient DOS while parse fils IE with length equal to 1.

  20. 7.5CVE-2023-43523EPSS 0.3%

    Transient DOS while processing 11AZ RTT management action frame received through OTA.

  21. 7.5CVE-2023-43522EPSS 0.3%

    Transient DOS while key unwrapping process, when the given encrypted key is empty or NULL.

  22. 7.5CVE-2023-43511EPSS 0.3%

    Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header.

  23. 7.5CVE-2023-33116EPSS 0.3%

    Transient DOS while parsing ieee80211_parse_mscs_ie in WIN WLAN driver.

  24. 7.5CVE-2023-33109EPSS 0.3%

    Transient DOS while processing a WMI P2P listen start command (0xD00A) sent from host.

  25. 7.5CVE-2023-33062EPSS 0.3%

    Transient DOS in WLAN Firmware while parsing a BTM request.

  26. 7.8CVE-2023-33032EPSS 0.1%

    Memory corruption in TZ Secure OS while requesting a memory allocation from TA region.

  27. 7.8CVE-2023-33030EPSS 0.1%

    Memory corruption in HLOS while running playready use-case.

  28. 7.5CVE-2023-33098EPSS 0.5%

    Transient DOS while parsing WPA IES, when it is passed with length more than expected size.

  29. 7.5CVE-2023-33097EPSS 0.5%

    Transient DOS in WLAN Firmware while processing a FTMR frame.

  30. 7.5CVE-2023-33089EPSS 0.5%

    Transient DOS when processing a NULL buffer while parsing WLAN vdev.

  31. 7.8CVE-2023-33088EPSS 0.2%

    Memory corruption when processing cmd parameters while parsing vdev.

  32. 9.8CVE-2023-33083EPSS 0.6%

    Memory corruption in WLAN Host while processing RRM beacon on the AP.

  33. 9.8CVE-2023-33082EPSS 0.5%

    Memory corruption while sending an Assoc Request having BTM Query or BTM Response containing MBO IE.

  34. 7.5CVE-2023-33081EPSS 0.5%

    Transient DOS while converting TWT (Target Wake Time) frame parameters in the OTA broadcast.

  35. 7.5CVE-2023-33080EPSS 0.3%

    Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame.

  36. 7.8CVE-2023-33063KEVEPSS 0.7%

    Memory corruption in DSP Services during a remote call from HLOS to DSP.

  37. 7.8CVE-2023-33053EPSS 0.1%

    Memory corruption in Kernel while parsing metadata.

  38. 7.5CVE-2023-33041EPSS 0.5%

    Under certain scenarios the WLAN Firmware will reach an assertion due to state confusion while looking up peer ids.

  39. 6.5CVE-2023-28586EPSS 0.1%

    Information disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE.

  40. 8.8CVE-2023-28585EPSS 0.1%

    Memory corruption while loading an ELF segment in TEE Kernel.

  41. 7.8CVE-2023-28550EPSS 0.1%

    Memory corruption in MPP performance while accessing DSM watermark using external memory address.

  42. 7.5CVE-2023-33061EPSS 0.4%

    Transient DOS in WLAN Firmware while parsing WLAN beacon or probe-response frame.

  43. 7.5CVE-2023-33056EPSS 0.4%

    Transient DOS in WLAN Firmware when firmware receives beacon including T2LM IE.

  44. 7.5CVE-2023-33048EPSS 0.4%

    Transient DOS in WLAN Firmware while parsing t2lm buffers.

  45. 7.5CVE-2023-33047EPSS 0.4%

    Transient DOS in WLAN Firmware while parsing no-inherit IES.

  46. 9.8CVE-2023-33045EPSS 0.5%

    Memory corruption in WLAN Firmware while parsing a NAN management frame carrying a S3 attribute.

  47. 5.5CVE-2023-28569EPSS 0.1%

    Information disclosure in WLAN HAL while handling command through WMI interfaces.

  48. 5.5CVE-2023-28563EPSS 0.1%

    Information disclosure in IOE Firmware while handling WMI command.

  49. 5.5CVE-2023-28554EPSS 0.1%

    Information Disclosure in Qualcomm IPC while reading values from shared memory in VM.

  50. 5.5CVE-2023-28553EPSS 0.1%

    Information Disclosure in WLAN Host when processing WMI event command.