Vulnerabilities > Qualcomm > Immersive Home 318 Platform Firmware > High

DATE CVE VULNERABILITY TITLE RISK
2023-09-05 CVE-2023-28549 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Qualcomm products
Memory corruption in WLAN HAL while parsing Rx buffer in processing TLV payload.
local
low complexity
qualcomm CWE-119
7.8
2023-09-05 CVE-2023-28557 Improper Validation of Array Index vulnerability in Qualcomm products
Memory corruption in WLAN HAL while processing command parameters from untrusted WMI payload.
local
low complexity
qualcomm CWE-129
7.8
2023-09-05 CVE-2023-28559 Out-of-bounds Write vulnerability in Qualcomm products
Memory corruption in WLAN FW while processing command parameters from untrusted WMI payload.
local
low complexity
qualcomm CWE-787
7.8
2023-09-05 CVE-2023-28560 Out-of-bounds Write vulnerability in Qualcomm products
Memory corruption in WLAN HAL while processing devIndex from untrusted WMI payload.
local
low complexity
qualcomm CWE-787
7.8
2023-06-06 CVE-2023-21628 Out-of-bounds Write vulnerability in Qualcomm products
Memory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command.
local
low complexity
qualcomm CWE-787
7.8
2023-06-06 CVE-2023-21658 Out-of-bounds Read vulnerability in Qualcomm products
Transient DOS in WLAN Firmware while processing the received beacon or probe response frame.
network
low complexity
qualcomm CWE-125
7.5
2023-06-06 CVE-2023-21659 Out-of-bounds Read vulnerability in Qualcomm products
Transient DOS in WLAN Firmware while processing frames with missing header fields.
network
low complexity
qualcomm CWE-125
7.5
2023-06-06 CVE-2023-21660 Out-of-bounds Read vulnerability in Qualcomm products
Transient DOS in WLAN Firmware while parsing FT Information Elements.
network
low complexity
qualcomm CWE-125
7.5
2023-06-06 CVE-2023-21661 Out-of-bounds Read vulnerability in Qualcomm products
Transient DOS while parsing WLAN beacon or probe-response frame.
network
low complexity
qualcomm CWE-125
7.5
2023-04-13 CVE-2022-40532 Integer Overflow or Wraparound vulnerability in Qualcomm products
Memory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target.
local
low complexity
qualcomm CWE-190
7.8