509 matches found
Design/Logic Flaw
Transient DOS in Modem when a Beam switch request is made with a non-configured BWP...
Authentication flaw
Transient DOS in Automotive OS due to improper authentication to the secure IO calls...
CVE-2023-33098
CVE-2023-33098 describes a transient Denial of Service in WLAN firmware when parsing WPA IES with length exceeding the expected size. The root cause is a buffer over-read in Qualcomm WLAN firmware (Qualcomm components; closed-source) leading to DoS with no user interaction and network-based explo...
CVE-2023-33098 Buffer Over-read in WLAN Firmware
Transient DOS while parsing WPA IES, when it is passed with length more than expected size...
CVE-2023-33097 Buffer Over-read in WLAN Firmware
Transient DOS in WLAN Firmware while processing a FTMR frame...
CVE-2023-33089
CVE-2023-33089 describes a Transient DoS in Qualcomm WLAN firmware caused by processing a NULL buffer during WLAN vdev parsing. The vulnerability is tracked across multiple feeds, with a CVSS v3.1 base score of 7.5 (High) and network attack vector without required user interaction. Connected docu...
CVE-2023-33089 NULL Pointer Dereference in WLAN Firmware
Transient DOS when processing a NULL buffer while parsing WLAN vdev...
CVE-2023-33081 Buffer over-read in WLAN Firmware
Transient DOS while converting TWT Target Wake Time frame parameters in the OTA broadcast...
CVE-2023-33081
CVE-2023-33081 is a Qualcomm WLAN firmware issue described as a buffer over-read in a closed-source WLAN component, causing a transient Denial of Service during OTA broadcast when converting Target Wake Time (TWT) frame parameters. The impact is a DoS that is transient and tied to the OTA TWT par...
CVE-2023-33080 Buffer over-read in WLAN Firmware
Transient DOS while parsing a vender specific IE Information Element of reassociation response management frame...
CVE-2023-33080 Buffer over-read in WLAN Firmware
Transient DOS while parsing a vender specific IE Information Element of reassociation response management frame...
CVE-2023-33070
CVE-2023-33070 describes a Transient DOS in Automotive OS caused by improper authentication to secure IO calls. Affected component: Automotive OS' secure IO interface; root cause is improper authentication enabling local access to IO calls, leading to availability impact (DoS). According to conne...
CVE-2023-33070 Improper Authentication in Automotive OS
Transient DOS in Automotive OS due to improper authentication to the secure IO calls...
CVE-2023-33044 Reachable Assertion in Data Modem
Transient DOS in Data modem while handling TLB control messages from the Network...
CVE-2023-33043
The CVE-2023-33043 issue affects Qualcomm embedded platform modem code and causes a transient DoS when a Beam switch request occurs with a non-configured BWP. Root cause per PT-2023-7611 is an incorrect channel division and sub-band switching implementation during a Beam Switching connection, tri...
CVE-2023-33042 Improper Input Validation in Modem
Transient DOS in Modem after RRC Setup message is received...
CVE-2023-33042
CVE-2023-33042 describes a DoS in Qualcomm/X55/X60 modem firmware triggered by malformed RRC frames after an RRC Setup message. Connected sources confirm the issue is tied to 5G modem behavior and improper input handling, with exploitation potentially limited to proximity (radio range). Patches h...
CVE-2023-28588
CVE-2023-28588 (Qualcomm Bluetooth) : A transient DoS in the Bluetooth Host during RFC slot allocation affects Qualcomm Chipsets’ Bluetooth component. Public records describe an integer overflow/wraparound issue in the Bluetooth Host as the root cause. The CVSSv3.1 base score is 7.5 (High) with n...
