CVE-2024-49847 Buffer Over-read in Multi-Mode Call Processor

Transient DOS while processing of a registration acceptance OTA due to incorrect ciphering key data IE...

CVE-2025-21435 Buffer Over-read in WLAN Host Communication

Transient DOS may occur while parsing extended IE in beacon...

CVE-2025-21430 Buffer Over-read in WLAN Host

Transient DOS while connecting STA to AP and initiating ADD TS request from AP to establish TSpec session...

PT-2025-23584 · Qualcomm · Snapdragon

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue is related to a Transient DOS that occurs while processing the tone measurement response buffer when the response buffer is out of range. Recommendations: At the moment, there is n...

CVE-2024-33063

Transient DOS while parsing the ML IE when a beacon with common info length of the ML IE greater than the ML IE inside which this element is present...

CVE-2024-38404

Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in modem...

CVE-2024-45559 Buffer Over-read in Automotive OS Platform

Transient DOS can occur when GVM sends a specific message type to the Vdev-FastRPC backend...

CVE-2024-45558 Buffer Over-read in WLAN Host Cmn

Transient DOS can occur when the driver parses the per STA profile IE and tries to access the EXTN element ID without checking the IE length...

CVE-2024-33063 Integer Overflow or Wraparound in WLAN Host Communication

Transient DOS while parsing the ML IE when a beacon with common info length of the ML IE greater than the ML IE inside which this element is present...

CVE-2024-33063 Integer Overflow or Wraparound in WLAN Host Communication

Transient DOS while parsing the ML IE when a beacon with common info length of the ML IE greater than the ML IE inside which this element is present...

CVE-2024-33063

CVE-2024-33063 affects Qualcomm Snapdragon Auto components. The issue arises during ML IE parsing: a beacon with a common info length greater than the ML IE interior triggers a transient DoS due to an out-of-bounds read/write in util_add_mlie_for_prb_rsp_gen(). Connected sources (PT-2024-25101) d...

CVE-2024-33068

Transient DOS while parsing fragments of MBSSID IE from beacon frame...

CVE-2024-38403

Transient DOS while parsing BTM ML IE when per STA profile is not included...

CVE-2024-38405 Buffer Over-read in WLAN Host

Transient DOS while processing the CU information from RNR IE...

CVE-2024-38405

CVE-2024-38405 is a Qualcomm WLAN component vulnerability causing a transient denial-of-service when processing the CU information from the RNR IE. The issue is documented with a high impact in Qualcomm’s security context and is indicated in accompanying Android bulletins as part of patch levels ...

CVE-2024-38405 Buffer Over-read in WLAN Host

Transient DOS while processing the CU information from RNR IE...

CVE-2024-38403

CVE-2024-38403 affects Qualcomm closed‑source WLAN firmware components. It describes a transient denial‑of‑service that occurs when parsing the BTM ML IE if the per‑STA profile is not included. The entry assigns a high impact and network‑level exposure with low attack complexity and no user inter...

CVE-2024-38403 Buffer Over-read in WLAN Firmware

Transient DOS while parsing BTM ML IE when per STA profile is not included...

CVE-2024-33068 Use After Free in WLAN Host Communication

Transient DOS while parsing fragments of MBSSID IE from beacon frame...

CVE-2024-33068

CVE-2024-33068 is a vulnerability described as a transient DoS during parsing of MBSSID IE fragments in beacon frames. Public sources (NVD, Red Hat, CVE list) tie it to WLAN host communication and a use-after-free style issue in Qualcomm chipsets, with base scores: NVD 6.5 (MEDIUM) and CNA 7.5 (H...