Vulnerabilities > Qualcomm > Qcn6023 Firmware > High
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-02-12 | CVE-2022-34145 | Out-of-bounds Read vulnerability in Qualcomm products Transient DOS due to buffer over-read in WLAN Host while parsing frame information. | 7.5 |
| 2023-02-12 | CVE-2022-34146 | Improper Input Validation vulnerability in Qualcomm products Transient DOS due to improper input validation in WLAN Host while parsing frame during defragmentation. | 7.5 |
| 2023-02-12 | CVE-2022-40502 | Improper Input Validation vulnerability in Qualcomm products Transient DOS due to improper input validation in WLAN Host. | 7.5 |
| 2023-02-12 | CVE-2022-40512 | Out-of-bounds Read vulnerability in Qualcomm products Transient DOS in WLAN Firmware due to buffer over-read while processing probe response or beacon. | 7.5 |
| 2023-02-12 | CVE-2022-40513 | Resource Exhaustion vulnerability in Qualcomm products Transient DOS due to uncontrolled resource consumption in WLAN firmware when peer is freed in non qos state. | 7.5 |
| 2023-01-09 | CVE-2022-33276 | Classic Buffer Overflow vulnerability in Qualcomm products Memory corruption due to buffer copy without checking size of input in modem while receiving WMI_REQUEST_STATS_CMDID command. | 7.8 |
| 2023-01-09 | CVE-2022-40516 | Out-of-bounds Write vulnerability in Qualcomm products Memory corruption in Core due to stack-based buffer overflow. | 7.8 |
| 2023-01-09 | CVE-2022-40517 | Out-of-bounds Write vulnerability in Qualcomm products Memory corruption in core due to stack-based buffer overflow | 7.8 |
| 2022-12-13 | CVE-2022-25677 | Use After Free vulnerability in Qualcomm products Memory corruption in diag due to use after free while processing dci packet in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking | 7.8 |
| 2022-12-13 | CVE-2022-33235 | Out-of-bounds Read vulnerability in Qualcomm products Information disclosure due to buffer over-read in WLAN firmware while parsing security context info attributes. | 7.5 |