Vulnerabilities > Qualcomm > Qcn6024 Firmware

DATE CVE VULNERABILITY TITLE RISK
2024-01-02 CVE-2023-33085 Classic Buffer Overflow vulnerability in Qualcomm products
Memory corruption in wearables while processing data from AON.
local
low complexity
qualcomm CWE-120
7.8
2024-01-02 CVE-2023-33094 Use After Free vulnerability in Qualcomm products
Memory corruption while running VK synchronization with KASAN enabled.
local
low complexity
qualcomm CWE-416
7.8
2024-01-02 CVE-2023-33109 NULL Pointer Dereference vulnerability in Qualcomm products
Transient DOS while processing a WMI P2P listen start command (0xD00A) sent from host.
network
low complexity
qualcomm CWE-476
7.5
2024-01-02 CVE-2023-33112 Unspecified vulnerability in Qualcomm products
Transient DOS when WLAN firmware receives "reassoc response" frame including RIC_DATA element.
network
low complexity
qualcomm
7.5
2024-01-02 CVE-2023-33113 Out-of-bounds Write vulnerability in Qualcomm products
Memory corruption when resource manager sends the host kernel a reply message with multiple fragments.
local
low complexity
qualcomm CWE-787
7.8
2024-01-02 CVE-2023-33116 Out-of-bounds Read vulnerability in Qualcomm products
Transient DOS while parsing ieee80211_parse_mscs_ie in WIN WLAN driver.
network
low complexity
qualcomm CWE-125
7.5
2024-01-02 CVE-2023-43511 Infinite Loop vulnerability in Qualcomm products
Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header.
network
low complexity
qualcomm CWE-835
7.5
2023-12-05 CVE-2023-28546 Classic Buffer Overflow vulnerability in Qualcomm products
Memory Corruption in SPS Application while exporting public key in sorter TA.
local
low complexity
qualcomm CWE-120
7.8
2023-12-05 CVE-2023-28550 Out-of-bounds Write vulnerability in Qualcomm products
Memory corruption in MPP performance while accessing DSM watermark using external memory address.
local
low complexity
qualcomm CWE-787
7.8
2023-12-05 CVE-2023-28551 Out-of-bounds Write vulnerability in Qualcomm products
Memory corruption in UTILS when modem processes memory specific Diag commands having arbitrary address values as input arguments.
local
low complexity
qualcomm CWE-787
7.8