Vulnerabilities > Qualcomm > Critical

DATE CVE VULNERABILITY TITLE RISK
2025-02-03 CVE-2024-45569 Improper Validation of Array Index vulnerability in Qualcomm products
Memory corruption while parsing the ML IE due to invalid frame content.
network
low complexity
qualcomm CWE-129
critical
9.8
2025-02-03 CVE-2024-49839 Out-of-bounds Read vulnerability in Qualcomm products
Memory corruption during management frame processing due to mismatch in T2LM info element.
network
low complexity
qualcomm CWE-125
critical
9.8
2024-11-26 CVE-2017-11076 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Qualcomm products
On some hardware revisions where VP9 decoding is hardware-accelerated, the frame size is not programmed correctly into the decoder hardware which can lead to an invalid memory access by the decoder.
network
low complexity
qualcomm CWE-119
critical
9.8
2024-11-26 CVE-2017-17772 Out-of-bounds Read vulnerability in Qualcomm products
In multiple functions that process 802.11 frames, out-of-bounds reads can occur due to insufficient validation.
network
low complexity
qualcomm CWE-125
critical
9.8
2024-11-04 CVE-2024-38408 Unspecified vulnerability in Qualcomm products
Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.
network
low complexity
qualcomm
critical
9.1
2024-10-07 CVE-2024-33066 Unspecified vulnerability in Qualcomm products
Memory corruption while redirecting log file to any file location with any file name.
network
low complexity
qualcomm
critical
9.8
2024-07-01 CVE-2024-21456 Out-of-bounds Read vulnerability in Qualcomm products
Information Disclosure while parsing beacon frame in STA.
network
low complexity
qualcomm CWE-125
critical
9.1
2024-05-06 CVE-2024-21480 Classic Buffer Overflow vulnerability in Qualcomm products
Memory corruption while playing audio file having large-sized input buffer.
network
low complexity
qualcomm CWE-120
critical
9.8
2024-04-01 CVE-2024-21463 Classic Buffer Overflow vulnerability in Qualcomm products
Memory corruption while processing Codec2 during v13k decoder pitch synthesis.
network
low complexity
qualcomm CWE-120
critical
9.8
2024-03-04 CVE-2023-43548 Out-of-bounds Write vulnerability in Qualcomm products
Memory corruption while parsing qcp clip with invalid chunk data size.
network
low complexity
qualcomm CWE-787
critical
9.8