PT-2023-24184 · Qualcomm · 315 5G Iot Modem Firmware +236

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a transient Denial of Service DOS that occurs while parsing WPA IES when it is passed with a length more than the expected size...

PT-2023-21829 · Qualcomm · Qualcomm Chipsets

Name of the Vulnerable Software and Affected Versions: Qualcomm Chipsets affected versions not specified Description: The issue is related to memory corruption in the WLAN Host while setting the PMK length in the internal cache. Recommendations: At the moment, there is no information about a newe...

PT-2023-21834 · Qualcomm · Qualcomm Chipsets

Name of the Vulnerable Software and Affected Versions: Qualcomm Chipsets affected versions not specified Description: The issue is related to memory corruption in the BT controller when parsing debug commands with specific sub-opcodes at the HCI interface level. Recommendations: At the moment,...

PT-2023-24146 · Qualcomm · 315 5G Iot Modem Firmware +171

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption in HLOS when IOCTL calls are invoked from user-space. This can potentially lead to unintended system behavior or...

PT-2023-21833 · Qualcomm · Qualcomm Chipsets

Name of the Vulnerable Software and Affected Versions: Qualcomm Chipsets affected versions not specified Description: The issue concerns information disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE. Recommendations: At the moment, there is...

kernel: wifi: ath10k: Delay the unmapping of the buffer

In the Linux kernel, the following vulnerability has been resolved: wifi: ath10k: Delay the unmapping of the buffer On WCN3990, we are seeing a rare scenario where copy engine hardware is sending a copy complete interrupt to the host driver while still processing the buffer that the driver has...

kernel: net: qcom/emac: race condition leading to use-after-free in emac_remove()

A race condition vulnerability was found in the Linux kernel's Qualcomm EMAC Gigabit Ethernet Controller when the user physically removes the device before cleanup in the emacremove function. This flaw can eventually result in a use-after-free issue, possibly leading to a system crash or other...

kernel: net: qrtr: Fix an uninit variable access bug in qrtr_tx_resume()

An uninitialized memory access flaw was found in the Linux kernel's QRTR Qualcomm IPC Router protocol in the transmit resume handling. When processing RESUMETX messages, if the packet size is smaller than the expected control structure, the qrtrtxresume function reads uninitialized memory from th...

kernel: net: qcom/emac: race condition leading to use-after-free in emac_remove()

A race condition vulnerability was found in the Linux kernel's Qualcomm EMAC Gigabit Ethernet Controller when the user physically removes the device before cleanup in the emacremove function. This flaw can eventually result in a use-after-free issue, possibly leading to a system crash or other...

CVE-2023-46772

Vulnerability of parameters being out of the value range in the QMI service module. Successful exploitation of this vulnerability may cause errors in reading file data...

Huawei EMUI Security Vulnerability

Huawei EMUI is an Android-based mobile operating system developed by China's Huawei Huawei. A security vulnerability exists in Huawei EMUI version 11.0.1, which originates from a parameter in the QMI service module that is out of range, resulting in an error when reading file data...

kernel: dmaengine: qcom-adm: fix wrong sizeof config in slave_config

A logic error was found in the Linux kernel Qualcomm ADM DMA engine driver's slave configuration handling. A local user with privileges to configure DMA operations can trigger DMA slave setup on Qualcomm ADM hardware, causing the driver to use an incorrect size comparison pointer size instead of...

kernel: usb: dwc3: qcom: Fix memory leak in dwc3_qcom_interconnect_init

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: qcom: Fix memory leak in dwc3qcominterconnectinit oficcget alloc resources for path handle, we should release it when not need anymore. Like the release in dwc3qcominterconnectexit function. Add iccput in error handlin...

kernel: dmaengine: qcom-adm: fix wrong calling convention for prep_slave_sg

A flaw was found in the Linux kernel’s dmaengine qcom-adm implementation where the function prepslavesg did not adhere to the documented error return convention. On error, it returned an error pointer instead of NULL, which can cause consumers that check only for non-NULL to assume success and...

kernel: net: qcom/emac: race condition leading to use-after-free in emac_remove()

A race condition vulnerability was found in the Linux kernel's Qualcomm EMAC Gigabit Ethernet Controller when the user physically removes the device before cleanup in the emacremove function. This flaw can eventually result in a use-after-free issue, possibly leading to a system crash or other...

kernel: cpufreq: qcom: fix memory leak in error path

A memory leak vulnerability was found in the Qualcomm cpufreq driver in the Linux kernel. When the speedbin length is incorrect, the error handling path fails to free the allocated speedbin buffer, leading to a memory leak. Over time, this can cause resource exhaustion and system instability...

kernel: net: qrtr: Fix an uninit variable access bug in qrtr_tx_resume()

An uninitialized memory access flaw was found in the Linux kernel's QRTR Qualcomm IPC Router protocol in the transmit resume handling. When processing RESUMETX messages, if the packet size is smaller than the expected control structure, the qrtrtxresume function reads uninitialized memory from th...

CVE-2023-28554

Information Disclosure in Qualcomm IPC while reading values from shared memory in VM...

Information disclosure

Information Disclosure in Qualcomm IPC while reading values from shared memory in VM...

CVE-2023-28554

CVE-2023-28554 concerns Qualcomm IPC. Connected sources describe an information-disclosure vulnerability arising when reading values from shared memory inside a VM, attributed to a buffer over-read in the Qualcomm IPC path. The issue impacts confidentiality and is characterized with local access ...