Vulnerabilities > Qualcomm > Qcn9022 Firmware
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-11-04 | CVE-2024-38408 | Unspecified vulnerability in Qualcomm products Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions. | 9.1 |
| 2024-10-07 | CVE-2024-33049 | Out-of-bounds Read vulnerability in Qualcomm products Transient DOS while parsing noninheritance IE of Extension element when length of IE is 2 of beacon frame. | 7.5 |
| 2024-10-07 | CVE-2024-33066 | Unspecified vulnerability in Qualcomm products Memory corruption while redirecting log file to any file location with any file name. | 9.8 |
| 2024-10-07 | CVE-2024-33073 | Out-of-bounds Read vulnerability in Qualcomm products Information disclosure while parsing the BSS parameter change count or MLD capabilities fields of the ML IE. | 8.2 |
| 2024-09-02 | CVE-2024-33048 | Out-of-bounds Read vulnerability in Qualcomm products Transient DOS while parsing the received TID-to-link mapping element of beacon/probe response frame. | 7.5 |
| 2024-09-02 | CVE-2024-33050 | Out-of-bounds Read vulnerability in Qualcomm products Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper. | 7.5 |
| 2024-09-02 | CVE-2024-33057 | Out-of-bounds Read vulnerability in Qualcomm products Transient DOS while parsing the multi-link element Control field when common information length check is missing before updating the location. | 7.5 |
| 2024-08-05 | CVE-2024-33014 | Out-of-bounds Read vulnerability in Qualcomm products Transient DOS while parsing ESP IE from beacon/probe response frame. | 7.5 |
| 2024-08-05 | CVE-2024-33015 | Out-of-bounds Read vulnerability in Qualcomm products Transient DOS while parsing SCAN RNR IE when bytes received from AP is such that the size of the last param of IE is less than neighbor report. | 7.5 |
| 2024-08-05 | CVE-2024-33018 | Out-of-bounds Read vulnerability in Qualcomm products Transient DOS while parsing the received TID-to-link mapping element of the TID-to-link mapping action frame. | 7.5 |