Vulnerabilities > Qualcomm > Wsa8835 Firmware
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2025-05-06 | CVE-2024-49847 | Buffer Over-read vulnerability in Qualcomm products Transient DOS while processing of a registration acceptance OTA due to incorrect ciphering key data IE. | 7.5 |
| 2025-05-06 | CVE-2025-21453 | Use After Free vulnerability in Qualcomm products Memory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential failures occur. | 7.8 |
| 2025-05-06 | CVE-2025-21459 | Buffer Over-read vulnerability in Qualcomm products Transient DOS while parsing per STA profile in ML IE. | 7.5 |
| 2025-05-06 | CVE-2025-21467 | Out-of-bounds Write vulnerability in Qualcomm products Memory corruption while reading the FW response from the shared queue. | 7.8 |
| 2025-05-06 | CVE-2025-21468 | Out-of-bounds Write vulnerability in Qualcomm products Memory corruption while reading response from FW, when buffer size is changed by FW while driver is using this size to write null character at the end of buffer. | 7.8 |
| 2025-05-06 | CVE-2025-21469 | Improper Access Control vulnerability in Qualcomm products Memory corruption while processing image encoding, when input buffer length is 0 in IOCTL call. | 7.8 |
| 2025-05-06 | CVE-2025-21470 | Improper Access Control vulnerability in Qualcomm products Memory corruption while processing image encoding, when configuration is NULL in IOCTL parameter. | 7.8 |
| 2025-05-06 | CVE-2025-21475 | Buffer Over-read vulnerability in Qualcomm products Memory corruption while processing escape code, when DisplayId is passed with large unsigned value. | 7.8 |
| 2025-03-03 | CVE-2024-38426 | Improper Authentication vulnerability in Qualcomm products While processing the authentication message in UE, improper authentication may lead to information disclosure. | 5.3 |
| 2025-03-03 | CVE-2024-43051 | Improper Authorization vulnerability in Qualcomm products Information disclosure while deriving keys for a session for any Widevine use case. | 5.5 |