Vulnerabilities > Qualcomm > Qca8386 Firmware > High

DATE CVE VULNERABILITY TITLE RISK
2024-08-05 CVE-2024-33024 Integer Overflow or Wraparound vulnerability in Qualcomm products
Transient DOS while parsing the ML IE when a beacon with length field inside the common info of ML IE greater than the ML IE length.
network
low complexity
qualcomm CWE-190
7.5
2024-08-05 CVE-2024-33025 Out-of-bounds Read vulnerability in Qualcomm products
Transient DOS while parsing the BSS parameter change count or MLD capabilities fields of the ML IE.
network
low complexity
qualcomm CWE-125
7.5
2024-08-05 CVE-2024-33026 Out-of-bounds Read vulnerability in Qualcomm products
Transient DOS while parsing probe response and assoc response frame when received frame length is less than max size of timestamp.
network
low complexity
qualcomm CWE-125
7.5
2024-07-01 CVE-2024-21457 Out-of-bounds Read vulnerability in Qualcomm products
INformation disclosure while handling Multi-link IE in beacon frame.
network
low complexity
qualcomm CWE-125
7.5
2024-07-01 CVE-2024-21458 Out-of-bounds Read vulnerability in Qualcomm products
Information disclosure while handling SA query action frame.
network
low complexity
qualcomm CWE-125
7.5
2024-07-01 CVE-2024-21466 Integer Underflow (Wrap or Wraparound) vulnerability in Qualcomm products
Information disclosure while parsing sub-IE length during new IE generation.
network
low complexity
qualcomm CWE-191
7.5
2024-07-01 CVE-2024-21482 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Qualcomm products
Memory corruption during the secure boot process, when the `bootm` command is used, it bypasses the authentication of the kernel/rootfs image.
local
low complexity
qualcomm CWE-119
7.8
2024-07-01 CVE-2024-23368 Classic Buffer Overflow vulnerability in Qualcomm products
Memory corruption when allocating and accessing an entry in an SMEM partition.
local
low complexity
qualcomm CWE-120
7.8
2024-02-06 CVE-2023-33072 Classic Buffer Overflow vulnerability in Qualcomm products
Memory corruption in Core while processing control functions.
local
low complexity
qualcomm CWE-120
7.8
2024-02-06 CVE-2023-43522 NULL Pointer Dereference vulnerability in Qualcomm products
Transient DOS while key unwrapping process, when the given encrypted key is empty or NULL.
network
low complexity
qualcomm CWE-476
7.5