1379 matches found
CVE-2024-49838 Buffer Over-read in WLAN HOST
Information disclosure while parsing the OCI IE with invalid length...
CVE-2024-49838 Buffer Over-read in WLAN HOST
Information disclosure while parsing the OCI IE with invalid length...
CVE-2024-49838
CVE-2024-49838 is an information disclosure vulnerability in Qualcomm WLAN components (Qualcomm closed- and open-source areas) caused by parsing an OCI IE with invalid length. Connected sources indicate this CVE is tracked in Qualcomm security advisories and appears in the Android March 2025 bull...
CVE-2024-33063
Transient DOS while parsing the ML IE when a beacon with common info length of the ML IE greater than the ML IE inside which this element is present...
CVE-2024-33063 Integer Overflow or Wraparound in WLAN Host Communication
Transient DOS while parsing the ML IE when a beacon with common info length of the ML IE greater than the ML IE inside which this element is present...
CVE-2024-33063 Integer Overflow or Wraparound in WLAN Host Communication
Transient DOS while parsing the ML IE when a beacon with common info length of the ML IE greater than the ML IE inside which this element is present...
CVE-2024-33063
CVE-2024-33063 affects Qualcomm Snapdragon Auto components. The issue arises during ML IE parsing: a beacon with a common info length greater than the ML IE interior triggers a transient DoS due to an out-of-bounds read/write in util_add_mlie_for_prb_rsp_gen(). Connected sources (PT-2024-25101) d...
CVE-2024-24450
Stack-based memcpy buffer overflow in the ngaphandlepdusessionresourcesetupresponse routine in OpenAirInterface CN5G AMF = 2.0.0 allows a remote attacker with access to the N2 interface to carry out denial of service against the AMF and potentially execute code by sending a PDU Session Resource...
CVE-2024-38403
Transient DOS while parsing BTM ML IE when per STA profile is not included...
CVE-2024-33068
Transient DOS while parsing fragments of MBSSID IE from beacon frame...
CVE-2024-38405
Transient DOS while processing the CU information from RNR IE...
CVE-2024-38405 Buffer Over-read in WLAN Host
Transient DOS while processing the CU information from RNR IE...
CVE-2024-38405
CVE-2024-38405 is a Qualcomm WLAN component vulnerability causing a transient denial-of-service when processing the CU information from the RNR IE. The issue is documented with a high impact in Qualcomm’s security context and is indicated in accompanying Android bulletins as part of patch levels ...
CVE-2024-38405 Buffer Over-read in WLAN Host
Transient DOS while processing the CU information from RNR IE...
CVE-2024-38403 Buffer Over-read in WLAN Firmware
Transient DOS while parsing BTM ML IE when per STA profile is not included...
CVE-2024-38403
CVE-2024-38403 affects Qualcomm closed‑source WLAN firmware components. It describes a transient denial‑of‑service that occurs when parsing the BTM ML IE if the per‑STA profile is not included. The entry assigns a high impact and network‑level exposure with low attack complexity and no user inter...
CVE-2024-38403 Buffer Over-read in WLAN Firmware
Transient DOS while parsing BTM ML IE when per STA profile is not included...
CVE-2024-33068
CVE-2024-33068 is a vulnerability described as a transient DoS during parsing of MBSSID IE fragments in beacon frames. Public sources (NVD, Red Hat, CVE list) tie it to WLAN host communication and a use-after-free style issue in Qualcomm chipsets, with base scores: NVD 6.5 (MEDIUM) and CNA 7.5 (H...