Vulnerabilities > Qualcomm > Qca6391 Firmware > High

DATE CVE VULNERABILITY TITLE RISK
2023-12-05 CVE-2023-33041 Reachable Assertion vulnerability in Qualcomm products
Under certain scenarios the WLAN Firmware will reach an assertion due to state confusion while looking up peer ids.
network
low complexity
qualcomm CWE-617
7.5
2023-12-05 CVE-2023-33042 Improper Input Validation vulnerability in Qualcomm products
Transient DOS in Modem after RRC Setup message is received.
network
low complexity
qualcomm CWE-20
7.5
2023-12-05 CVE-2023-33043 Reachable Assertion vulnerability in Qualcomm products
Transient DOS in Modem when a Beam switch request is made with a non-configured BWP.
network
low complexity
qualcomm CWE-617
7.5
2023-12-05 CVE-2023-33044 Reachable Assertion vulnerability in Qualcomm products
Transient DOS in Data modem while handling TLB control messages from the Network.
network
low complexity
qualcomm CWE-617
7.5
2023-12-05 CVE-2023-33063 Use After Free vulnerability in Qualcomm products
Memory corruption in DSP Services during a remote call from HLOS to DSP.
local
low complexity
qualcomm CWE-416
7.8
2023-12-05 CVE-2023-33079 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Qualcomm products
Memory corruption in Audio while running invalid audio recording from ADSP.
local
low complexity
qualcomm CWE-119
7.8
2023-12-05 CVE-2023-33080 Out-of-bounds Read vulnerability in Qualcomm products
Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame.
network
low complexity
qualcomm CWE-125
7.5
2023-12-05 CVE-2023-33081 Out-of-bounds Read vulnerability in Qualcomm products
Transient DOS while converting TWT (Target Wake Time) frame parameters in the OTA broadcast.
network
low complexity
qualcomm CWE-125
7.5
2023-12-05 CVE-2023-33087 Classic Buffer Overflow vulnerability in Qualcomm products
Memory corruption in Core while processing RX intent request.
local
low complexity
qualcomm CWE-120
7.8
2023-12-05 CVE-2023-33088 NULL Pointer Dereference vulnerability in Qualcomm products
Memory corruption when processing cmd parameters while parsing vdev.
local
low complexity
qualcomm CWE-476
7.8