|
2024-12-02
|
CVE-2024-33063
|
Transient DOS while parsing the ML IE when a beacon with common info length of the ML IE greater than the ML IE inside which this element is present.
|
Ar8035_firmware, Fastconnect_6900_firmware, Fastconnect_7800_firmware, Immersive_home_3210_platform_firmware, Immersive_home_326_platform_firmware, Ipq5300_firmware, Ipq5312_firmware, Ipq5332_firmware, Ipq9008_firmware, Ipq9554_firmware, Ipq9570_firmware, Ipq9574_firmware, Qam8255p_firmware, Qam8295p_firmware, Qam8650p_firmware, Qam8775p_firmware, Qamsrv1h_firmware, Qamsrv1m_firmware, Qca0000_firmware, Qca6391_firmware, Qca6554a_firmware, Qca6564au_firmware, Qca6574_firmware, Qca6574a_firmware, Qca6574au_firmware, Qca6584au_firmware, Qca6595_firmware, Qca6595au_firmware, Qca6678aq_firmware, Qca6688aq_firmware, Qca6696_firmware, Qca6698aq_firmware, Qca6777aq_firmware, Qca6787aq_firmware, Qca6797aq_firmware, Qca8075_firmware, Qca8081_firmware, Qca8082_firmware, Qca8084_firmware, Qca8085_firmware, Qca8337_firmware, Qca8386_firmware, Qcc710_firmware, Qcf8000_firmware, Qcf8001_firmware, Qcm8550_firmware, Qcn5124_firmware, Qcn6224_firmware, Qcn6274_firmware, Qcn6402_firmware, Qcn6412_firmware, Qcn6422_firmware, Qcn6432_firmware, Qcn9000_firmware, Qcn9024_firmware, Qcn9074_firmware, Qcn9274_firmware, Qcs6490_firmware, Qcs7230_firmware, Qcs8250_firmware, Qcs8550_firmware, Qfw7114_firmware, Qfw7124_firmware, Sa6155p_firmware, Sa7255p_firmware, Sa7775p_firmware, Sa8155p_firmware, Sa8195p_firmware, Sa8255p_firmware, Sa8295p_firmware, Sa8620p_firmware, Sa8650p_firmware, Sa8770p_firmware, Sa8775p_firmware, Sa9000p_firmware, Sdm429w_firmware, Sdx65m_firmware, Sg8275p_firmware, Sm8550p_firmware, Sm8635_firmware, Sm8750_firmware, Sm8750p_firmware, Snapdragon_429_mobile_platform_firmware, Snapdragon_8\+_gen_2_mobile_platform_firmware, Snapdragon_8_gen_2_mobile_platform_firmware, Snapdragon_8_gen_3_mobile_platform_firmware, Snapdragon_ar2_gen_1_platform_firmware, Snapdragon_auto_5g_modem\-Rf_gen_2_firmware, Snapdragon_x65_5g_modem\-Rf_system_firmware, Snapdragon_x72_5g_modem\-Rf_system_firmware, Snapdragon_x75_5g_modem\-Rf_system_firmware, Srv1h_firmware, Srv1m_firmware, Ssg2115p_firmware, Ssg2125p_firmware, Sxr1230p_firmware, Sxr2230p_firmware, Sxr2250p_firmware, Video_collaboration_vc3_platform_firmware, Video_collaboration_vc5_platform_firmware, Vision_intelligence_400_platform_firmware, Wcd9335_firmware, Wcd9340_firmware, Wcd9341_firmware, Wcd9370_firmware, Wcd9375_firmware, Wcd9380_firmware, Wcd9385_firmware, Wcd9390_firmware, Wcd9395_firmware, Wcn3620_firmware, Wcn3660b_firmware, Wcn3990_firmware, Wcn6755_firmware, Wcn7860_firmware, Wcn7861_firmware, Wcn7880_firmware, Wcn7881_firmware, Wsa8830_firmware, Wsa8832_firmware, Wsa8835_firmware, Wsa8840_firmware, Wsa8845_firmware, Wsa8845h_firmware
|
N/A
|
|
|
|
2024-12-02
|
CVE-2024-33053
|
Memory corruption when multiple threads try to unregister the CVP buffer at the same time.
|
C\-V2x_9150_firmware, Fastconnect_6200_firmware, Fastconnect_6800_firmware, Fastconnect_6900_firmware, Qam8295p_firmware, Qca6391_firmware, Qca6426_firmware, Qca6436_firmware, Qca6574au_firmware, Qca6696_firmware, Qca8337_firmware, Qcn9074_firmware, Qcs410_firmware, Qcs610_firmware, Qsm8250_firmware, Sa6145p_firmware, Sa6150p_firmware, Sa6155p_firmware, Sa8145p_firmware, Sa8150p_firmware, Sa8155p_firmware, Sa8195p_firmware, Sa8295p_firmware, Sa8530p_firmware, Sa8540p_firmware, Sa9000p_firmware, Sd865_5g_firmware, Sdx55_firmware, Sm7250p_firmware, Snapdragon_690_5g_mobile_platform_firmware, Snapdragon_750g_5g_mobile_platform_firmware, Snapdragon_765_5g_mobile_platform_firmware, Snapdragon_765g_5g_mobile_platform_firmware, Snapdragon_768g_5g_mobile_platform_firmware, Snapdragon_865\+_5g_mobile_platform_firmware, Snapdragon_865_5g_mobile_platform_firmware, Snapdragon_870_5g_mobile_platform_firmware, Snapdragon_x55_5g_modem\-Rf_system_firmware, Snapdragon_xr2_5g_platform_firmware, Sxr2130_firmware, Video_collaboration_vc1_platform_firmware, Video_collaboration_vc3_platform_firmware, Wcd9341_firmware, Wcd9370_firmware, Wcd9375_firmware, Wcd9380_firmware, Wcd9385_firmware, Wcn3660b_firmware, Wcn3680b_firmware, Wcn3950_firmware, Wcn3980_firmware, Wcn3988_firmware, Wsa8810_firmware, Wsa8815_firmware, Wsa8830_firmware, Wsa8835_firmware
|
N/A
|
|
|
|
2024-12-02
|
CVE-2024-33037
|
Information disclosure as NPU firmware can send invalid IPC message to NPU driver as the driver doesn`t validate the IPC message received from the firmware.
|
C\-V2x_9150_firmware, Fastconnect_6800_firmware, Fastconnect_6900_firmware, Qam8295p_firmware, Qca6174a_firmware, Qca6391_firmware, Qca6426_firmware, Qca6436_firmware, Qca6574au_firmware, Qca6696_firmware, Qca8337_firmware, Qcn9074_firmware, Qcs410_firmware, Qcs610_firmware, Qsm8250_firmware, Sa6145p_firmware, Sa6150p_firmware, Sa6155p_firmware, Sa8145p_firmware, Sa8150p_firmware, Sa8155p_firmware, Sa8195p_firmware, Sa8295p_firmware, Sa8530p_firmware, Sa8540p_firmware, Sa9000p_firmware, Sd865_5g_firmware, Sdx55_firmware, Snapdragon_865\+_5g_mobile_platform_firmware, Snapdragon_865_5g_mobile_platform_firmware, Snapdragon_870_5g_mobile_platform_firmware, Snapdragon_w5\+_gen_1_wearable_platform_firmware, Snapdragon_x55_5g_modem\-Rf_system_firmware, Snapdragon_xr2_5g_platform_firmware, Sw5100_firmware, Sw5100p_firmware, Sxr2130_firmware, Video_collaboration_vc1_platform_firmware, Video_collaboration_vc3_platform_firmware, Wcd9341_firmware, Wcd9370_firmware, Wcd9380_firmware, Wcn3660b_firmware, Wcn3680b_firmware, Wcn3950_firmware, Wcn3980_firmware, Wcn3988_firmware, Wsa8810_firmware, Wsa8815_firmware, Wsa8830_firmware, Wsa8835_firmware
|
N/A
|
|
|
|
2024-12-02
|
CVE-2024-33036
|
Memory corruption while parsing sensor packets in camera driver, user-space variable is used while allocating memory in kernel and parsing which can lead to huge allocation or invalid memory access.
|
C\-V2x_9150_firmware, Fastconnect_6800_firmware, Fastconnect_6900_firmware, Fastconnect_7800_firmware, Qam8295p_firmware, Qca6391_firmware, Qca6426_firmware, Qca6436_firmware, Qca6574au_firmware, Qca6696_firmware, Qca8337_firmware, Qcn9074_firmware, Qcs410_firmware, Qcs610_firmware, Qsm8250_firmware, Sa6145p_firmware, Sa6150p_firmware, Sa6155p_firmware, Sa8145p_firmware, Sa8150p_firmware, Sa8155p_firmware, Sa8195p_firmware, Sa8295p_firmware, Sa8530p_firmware, Sa8540p_firmware, Sa9000p_firmware, Sd865_5g_firmware, Sdx55_firmware, Snapdragon_865\+_5g_mobile_platform_firmware, Snapdragon_865_5g_mobile_platform_firmware, Snapdragon_870_5g_mobile_platform_firmware, Snapdragon_8_gen_1_mobile_platform_firmware, Snapdragon_w5\+_gen_1_wearable_platform_firmware, Snapdragon_x55_5g_modem\-Rf_system_firmware, Snapdragon_xr2_5g_platform_firmware, Sw5100_firmware, Sw5100p_firmware, Sxr2130_firmware, Video_collaboration_vc1_platform_firmware, Video_collaboration_vc3_platform_firmware, Wcd9341_firmware, Wcd9370_firmware, Wcd9380_firmware, Wcn3660b_firmware, Wcn3680b_firmware, Wcn3950_firmware, Wcn3980_firmware, Wcn3988_firmware, Wsa8810_firmware, Wsa8815_firmware, Wsa8830_firmware, Wsa8835_firmware
|
N/A
|
|
|
|
2020-04-16
|
CVE-2020-3651
|
Active command timeout since WM status change cmd is not removed from active queue if peer sends multiple deauth frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, QCA6174A,...
|
Apq8009_firmware, Apq8017_firmware, Apq8053_firmware, Apq8096au_firmware, Mdm9206_firmware, Mdm9207c_firmware, Mdm9607_firmware, Mdm9640_firmware, Mdm9650_firmware, Msm8905_firmware, Msm8909w_firmware, Msm8917_firmware, Msm8920_firmware, Msm8937_firmware, Msm8940_firmware, Msm8953_firmware, Msm8996au_firmware, Qca6174a_firmware, Qca6574au_firmware, Qca9377_firmware, Qca9379_firmware, Qcm2150_firmware, Qcn7605_firmware, Qcs605_firmware, Qm215_firmware, Sc8180x_firmware, Sdm429_firmware, Sdm429w_firmware, Sdm439_firmware, Sdm450_firmware, Sdm630_firmware, Sdm632_firmware, Sdm636_firmware, Sdm660_firmware, Sdm845_firmware, Sdx20_firmware, Sdx24_firmware, Sdx55_firmware, Sm8150_firmware, Sxr1130_firmware
|
7.5
|
|
|
|
2020-06-02
|
CVE-2020-3615
|
Valid deauth/disassoc frames is dropped in case if RMF is enabled and some rouge peer keep on sending rogue deauth/disassoc frames due to improper enum values used to check the frame subtype in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in APQ8009, APQ8053, APQ8096AU, MDM9150, MDM9206, MDM9207C, MDM9607, MDM9650, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCN7605, QCS605,...
|
Apq8009_firmware, Apq8053_firmware, Apq8096au_firmware, Mdm9150_firmware, Mdm9206_firmware, Mdm9207c_firmware, Mdm9607_firmware, Mdm9650_firmware, Msm8996au_firmware, Qca6174a_firmware, Qca6574au_firmware, Qca9377_firmware, Qca9379_firmware, Qcn7605_firmware, Qcs605_firmware, Sc8180x_firmware, Sdm630_firmware, Sdm636_firmware, Sdm660_firmware, Sdm845_firmware, Sdx20_firmware, Sdx24_firmware, Sdx55_firmware, Sm8150_firmware, Sxr1130_firmware
|
9.8
|
|
|
|
2020-06-02
|
CVE-2020-3641
|
Integer overflow may occur if atom size is less than atom offset as there is improper validation of atom size in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8053, APQ8096AU, APQ8098, Kamorta, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909W, MSM8917, MSM8953, MSM8996AU, MSM8998, QCA6574AU, QCM2150, QCS405, QCS605, QM215, Rennell, SA6155P, Saipan, SDA660, SDM429, SDM429W,...
|
Apq8009_firmware, Apq8053_firmware, Apq8096au_firmware, Apq8098_firmware, Kamorta_firmware, Mdm9206_firmware, Mdm9207c_firmware, Mdm9607_firmware, Msm8905_firmware, Msm8909w_firmware, Msm8917_firmware, Msm8953_firmware, Msm8996au_firmware, Msm8998_firmware, Qca6574au_firmware, Qcm2150_firmware, Qcs405_firmware, Qcs605_firmware, Qm215_firmware, Rennell_firmware, Sa6155p_firmware, Saipan_firmware, Sda660_firmware, Sdm429_firmware, Sdm429w_firmware, Sdm439_firmware, Sdm450_firmware, Sdm630_firmware, Sdm632_firmware, Sdm636_firmware, Sdm660_firmware, Sdm845_firmware, Sdx20_firmware, Sm6150_firmware, Sm7150_firmware, Sm8150_firmware, Sm8250_firmware, Sxr2130_firmware
|
9.8
|
|
|
|
2020-06-22
|
CVE-2020-3614
|
Possible buffer overflow while copying the frame to local buffer due to lack of check of length before copying in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8076, APQ8096, APQ8096AU, APQ8098, IPQ6018, IPQ8074,...
|
Apq8009_firmware, Apq8017_firmware, Apq8053_firmware, Apq8076_firmware, Apq8096_firmware, Apq8096au_firmware, Apq8098_firmware, Ipq6018_firmware, Ipq8074_firmware, Mdm9206_firmware, Mdm9207c_firmware, Mdm9607_firmware, Mdm9640_firmware, Mdm9650_firmware, Msm8905_firmware, Msm8909_firmware, Msm8909w_firmware, Msm8917_firmware, Msm8920_firmware, Msm8937_firmware, Msm8940_firmware, Msm8953_firmware, Msm8996au_firmware, Msm8998_firmware, Nicobar_firmware, Qca6174a_firmware, Qca6574au_firmware, Qca6584au_firmware, Qca9377_firmware, Qca9379_firmware, Qca9886_firmware, Qcm2150_firmware, Qcs405_firmware, Qcs605_firmware, Qm215_firmware, Rennell_firmware, Sc7180_firmware, Sc8180x_firmware, Sdm429_firmware, Sdm429w_firmware, Sdm439_firmware, Sdm450_firmware, Sdm630_firmware, Sdm632_firmware, Sdm636_firmware, Sdm660_firmware, Sdm670_firmware, Sdm710_firmware, Sdm845_firmware, Sdx20_firmware, Sdx24_firmware, Sm6150_firmware, Sm7150_firmware, Sm8150_firmware, Sxr1130_firmware
|
9.8
|
|
|
|
2020-06-22
|
CVE-2020-3658
|
Possible null-pointer dereference can occur while parsing mp4 clip with corrupted sample table atoms in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, Kamorta, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, QCA6574AU, QCS405, QCS605,...
|
Apq8009_firmware, Apq8017_firmware, Apq8053_firmware, Apq8096au_firmware, Apq8098_firmware, Kamorta_firmware, Mdm9206_firmware, Mdm9207c_firmware, Mdm9607_firmware, Msm8905_firmware, Msm8909w_firmware, Msm8917_firmware, Msm8920_firmware, Msm8937_firmware, Msm8940_firmware, Msm8953_firmware, Msm8996_firmware, Msm8996au_firmware, Msm8998_firmware, Qca6574au_firmware, Qcs405_firmware, Qcs605_firmware, Qm215_firmware, Rennell_firmware, Saipan_firmware, Sda660_firmware, Sdm429_firmware, Sdm429w_firmware, Sdm439_firmware, Sdm450_firmware, Sdm630_firmware, Sdm632_firmware, Sdm636_firmware, Sdm660_firmware, Sdm670_firmware, Sdm710_firmware, Sdm845_firmware, Sdx20_firmware, Sm6150_firmware, Sm7150_firmware, Sm8150_firmware, Sm8250_firmware, Sxr1130_firmware, Sxr2130_firmware
|
9.1
|
|
|
|
2020-06-22
|
CVE-2020-3663
|
Buffer over-write may occur during fetching track decoder specific information if cb size exceeds buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, Kamorta, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, QCA6574AU, QCS405,...
|
Apq8009_firmware, Apq8017_firmware, Apq8053_firmware, Apq8096au_firmware, Apq8098_firmware, Kamorta_firmware, Mdm9206_firmware, Mdm9207c_firmware, Mdm9607_firmware, Msm8905_firmware, Msm8909w_firmware, Msm8917_firmware, Msm8920_firmware, Msm8937_firmware, Msm8940_firmware, Msm8953_firmware, Msm8996_firmware, Msm8996au_firmware, Msm8998_firmware, Qca6574au_firmware, Qcs405_firmware, Qcs605_firmware, Qm215_firmware, Rennell_firmware, Saipan_firmware, Sda660_firmware, Sdm429_firmware, Sdm429w_firmware, Sdm439_firmware, Sdm450_firmware, Sdm630_firmware, Sdm632_firmware, Sdm636_firmware, Sdm660_firmware, Sdm670_firmware, Sdm710_firmware, Sdm845_firmware, Sdx20_firmware, Sm6150_firmware, Sm7150_firmware, Sm8150_firmware, Sm8250_firmware, Sxr1130_firmware, Sxr2130_firmware
|
9.8
|
|
|