9581 matches found
CVE-2024-33019 Buffer Over-read in WLAN Host
Transient DOS while parsing the received TID-to-link mapping action frame...
CVE-2024-33019
CVE-2024-33019 is described as a Transient DoS in the WLAN host code when parsing the received TID-to-link mapping action frame. The vulnerability is listed under Qualcomm WLAN components with High severity (CVSS: 7.5, Network attack vector, low complexity, no privileges, no user interaction; imp...
CVE-2024-33018 Buffer Over-read in WLAN Host
Transient DOS while parsing the received TID-to-link mapping element of the TID-to-link mapping action frame...
CVE-2024-33018 Buffer Over-read in WLAN Host
Transient DOS while parsing the received TID-to-link mapping element of the TID-to-link mapping action frame...
CVE-2024-33014 Buffer Over-read in WLAN Host
Transient DOS while parsing ESP IE from beacon/probe response frame...
CVE-2024-33010 Use After Free in WLAN Host
Transient DOS while parsing fragments of MBSSID IE from beacon frame...
CVE-2024-33010 Use After Free in WLAN Host
Transient DOS while parsing fragments of MBSSID IE from beacon frame...
CVE-2024-21467 Buffer Over-read in WLAN Host Communication
Information disclosure while handling beacon probe frame during scan entry generation in client side...
CVE-2024-21467
CVE-2024-21467 is a WLAN information-disclosure issue arising from how beacon probe frames are processed during scan entry generation on the client side. Affected component: Qualcomm WLAN/host stack; root cause: out-of-bounds beacon probe frame handling leading to information disclosure with pote...
CVE-2024-21467 Buffer Over-read in WLAN Host Communication
Information disclosure while handling beacon probe frame during scan entry generation in client side...
CVE-2024-21459
CVE-2024-21459 impacts Qualcomm WLAN HOST circuitry (Qualcomm WLAN component) and is a information-disclosure flaw triggered by handling beacon or probe response frames in a Station (STA). The issue is categorized under WLAN with network attack vector and low complexity; CVSS metrics show confide...
CVE-2024-21459 Buffer Over-read in WLAN HOST
Information disclosure while handling beacon or probe response frame in STA...
A DMA reentrancy issue was found in the Tulip device emulation in QEMU. When Tulip reads or writes to the rx/tx descriptor or copies the rx/tx frame it doesn't check whether the destination address is its own MMIO address. This can cause the device to trigger MMIO handlers multiple times possibly leading to a stack or heap overflow. A malicious guest could use this flaw to crash the QEMU process on the host resulting in a denial of service condition.
...
PT-2024-25056 · Qualcomm · Snapdragon +232
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a Transient Denial of Service DOS that occurs while parsing fragments of the Multiple BSSID Information Element MBSSID IE from a...
CVE-2024-33010: Use After Free
Transient DOS while parsing fragments of MBSSID IE from beacon frame...
PT-2024-25063 · Qualcomm · Snapdragon +140
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves a transient Denial of Service DOS that occurs while parsing the received TID-to-link mapping element of the TID-to-link mapping actio...
CVE-2024-33019: Buffer Over-read
Transient DOS while parsing the received TID-to-link mapping action frame...
CVE-2024-33026: Buffer Over-read
Transient DOS while parsing probe response and assoc response frame when received frame length is less than max size of timestamp...