CVE-2022-34146

Transient DOS due to improper input validation in WLAN Host while parsing frame during defragmentation...

CVE-2022-22065

Out of bound read in WLAN HOST due to improper length check can lead to DOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon...

CVE-2022-40502

Transient DOS due to improper input validation in WLAN Host...

CVE-2024-49839

CVE-2024-49839 - Summary (mode C) Root cause: Memory corruption during management frame processing caused by a mismatch in the T2LM information element, affecting Qualcomm WLAN/capability elements. What is affected: Qualcomm chipsets with WLAN functionality that process management frames incorpor...

CVE-2024-49839 Buffer Over-read in WLAN Host Cmn

Memory corruption during management frame processing due to mismatch in T2LM info element...

CVE-2024-49839 Buffer Over-read in WLAN Host Cmn

Memory corruption during management frame processing due to mismatch in T2LM info element...

CVE-2024-49838 Buffer Over-read in WLAN HOST

Information disclosure while parsing the OCI IE with invalid length...

CVE-2024-49838 Buffer Over-read in WLAN HOST

Information disclosure while parsing the OCI IE with invalid length...

CVE-2024-49838

CVE-2024-49838 is an information disclosure vulnerability in Qualcomm WLAN components (Qualcomm closed- and open-source areas) caused by parsing an OCI IE with invalid length. Connected sources indicate this CVE is tracked in Qualcomm security advisories and appears in the Android March 2025 bull...

CVE-2024-45571

CVE-2024-45571 affects Qualcomm WLAN components. The issue is memory corruption that occurs when stopping the WLAN interface after processing a WMI command, enabling local attacker with low privileges and no user interaction to impact confidentiality, integrity, and availability (all High). No pu...

CVE-2024-45571 Use After Free in WLAN Host Communication

Memory corruption may occour occur when stopping the WLAN interface after processing a WMI command from the interface...

CVE-2024-45561 Use After Free in Windows WLAN Host

Memory corruption while handling IOCTL call from user-space to set latency level...

CVE-2024-45561 Use After Free in Windows WLAN Host

Memory corruption while handling IOCTL call from user-space to set latency level...

CVE-2024-45561

CVE-2024-45561 corresponds to a memory corruption issue observed when handling an IOCTL call from user-space to set latency level on Qualcomm chipsets. Affected component/behavior: IOCTL latency-level handling in kernel/user-space interface; root cause described as memory corruption. Impact as st...

CVE-2024-45558 Buffer Over-read in WLAN Host Cmn

Transient DOS can occur when the driver parses the per STA profile IE and tries to access the EXTN element ID without checking the IE length...

CVE-2024-45558

The CVE-2024-45558 entry describes a Transient Denial of Service in Qualcomm WLAN components. The vulnerability arises when the driver parses the per-STA profile Information Element and accesses the EXTN element ID without validating the IE length, enabling a DoS condition. Sources across multipl...

CVE-2024-45558 Buffer Over-read in WLAN Host Cmn

Transient DOS can occur when the driver parses the per STA profile IE and tries to access the EXTN element ID without checking the IE length...

PT-2025-28448 · Wlan Host · Wlan Host

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: Memory corruption occurs while processing a command message in the WLAN Host. Recommendations: At the moment, there is no information about a newer version that contains a fix for this issue...

CVE-2024-33063 Integer Overflow or Wraparound in WLAN Host Communication

Transient DOS while parsing the ML IE when a beacon with common info length of the ML IE greater than the ML IE inside which this element is present...

CVE-2024-33063 Integer Overflow or Wraparound in WLAN Host Communication

Transient DOS while parsing the ML IE when a beacon with common info length of the ML IE greater than the ML IE inside which this element is present...