Vulnerabilities > Qualcomm > Fastconnect 6700 Firmware
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-10-07 | CVE-2024-38397 | Out-of-bounds Read vulnerability in Qualcomm products Transient DOS while parsing probe response and assoc response frame. | 7.5 |
| 2024-10-07 | CVE-2024-43047 | Use After Free vulnerability in Qualcomm products Memory corruption while maintaining memory maps of HLOS memory. | 7.8 |
| 2024-09-02 | CVE-2024-33038 | Out-of-bounds Write vulnerability in Qualcomm products Memory corruption while passing untrusted/corrupted pointers from DSP to EVA. | 7.8 |
| 2024-09-02 | CVE-2024-33042 | Out-of-bounds Write vulnerability in Qualcomm products Memory corruption when Alternative Frequency offset value is set to 255. | 7.8 |
| 2024-09-02 | CVE-2024-33043 | Out-of-bounds Read vulnerability in Qualcomm products Transient DOS while handling PS event when Program Service name length offset value is set to 255. | 5.5 |
| 2024-09-02 | CVE-2024-33045 | Out-of-bounds Write vulnerability in Qualcomm products Memory corruption when BTFM client sends new messages over Slimbus to ADSP. | 7.8 |
| 2024-09-02 | CVE-2024-33047 | Out-of-bounds Read vulnerability in Qualcomm products Memory corruption when the captureRead QDCM command is invoked from user-space. | 7.8 |
| 2024-09-02 | CVE-2024-33048 | Out-of-bounds Read vulnerability in Qualcomm products Transient DOS while parsing the received TID-to-link mapping element of beacon/probe response frame. | 7.5 |
| 2024-09-02 | CVE-2024-33050 | Out-of-bounds Read vulnerability in Qualcomm products Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper. | 7.5 |
| 2024-09-02 | CVE-2024-33051 | Out-of-bounds Read vulnerability in Qualcomm products Transient DOS while processing TIM IE from beacon frame as there is no check for IE length. | 7.5 |