Vulnerabilities > Qualcomm > Qca9994 Firmware
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-02-12 | CVE-2022-33279 | Out-of-bounds Write vulnerability in Qualcomm products Memory corruption due to stack based buffer overflow in WLAN having invalid WNM frame length. | 9.8 |
| 2023-02-12 | CVE-2022-33306 | Out-of-bounds Read vulnerability in Qualcomm products Transient DOS due to buffer over-read in WLAN while processing an incoming management frame with incorrectly filled IEs. | 7.5 |
| 2023-02-12 | CVE-2022-40512 | Out-of-bounds Read vulnerability in Qualcomm products Transient DOS in WLAN Firmware due to buffer over-read while processing probe response or beacon. | 7.5 |
| 2023-02-12 | CVE-2022-40514 | Out-of-bounds Write vulnerability in Qualcomm products Memory corruption due to buffer copy without checking the size of input in WLAN Firmware while processing CCKM IE in reassoc response frame. | 9.8 |
| 2023-01-09 | CVE-2022-25722 | Use After Free vulnerability in Qualcomm products Information exposure in DSP services due to improper handling of freeing memory | 5.5 |
| 2023-01-09 | CVE-2022-33252 | Out-of-bounds Read vulnerability in Qualcomm products Information disclosure due to buffer over-read in WLAN while handling IBSS beacons frame. | 5.5 |
| 2023-01-09 | CVE-2022-33253 | Out-of-bounds Read vulnerability in Qualcomm products Transient DOS due to buffer over-read in WLAN while parsing corrupted NAN frames. | 5.5 |
| 2023-01-09 | CVE-2022-33276 | Classic Buffer Overflow vulnerability in Qualcomm products Memory corruption due to buffer copy without checking size of input in modem while receiving WMI_REQUEST_STATS_CMDID command. | 7.8 |
| 2023-01-09 | CVE-2022-33283 | Out-of-bounds Read vulnerability in Qualcomm products Information disclosure due to buffer over-read in WLAN while WLAN frame parsing due to missing frame length check. | 6.5 |
| 2023-01-09 | CVE-2022-33284 | Out-of-bounds Read vulnerability in Qualcomm products Information disclosure due to buffer over-read in WLAN while parsing BTM action frame. | 6.5 |