CVE-2023-33083 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Host

Memory corruption in WLAN Host while processing RRM beacon on the AP...

CVE-2023-33083 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Host

Memory corruption in WLAN Host while processing RRM beacon on the AP...

CVE-2023-33082 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Host

Memory corruption while sending an Assoc Request having BTM Query or BTM Response containing MBO IE...

CVE-2023-33082 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Host

Memory corruption while sending an Assoc Request having BTM Query or BTM Response containing MBO IE...

CVE-2023-33081 Buffer over-read in WLAN Firmware

Transient DOS while converting TWT Target Wake Time frame parameters in the OTA broadcast...

CVE-2023-33080 Buffer over-read in WLAN Firmware

Transient DOS while parsing a vender specific IE Information Element of reassociation response management frame...

CVE-2023-33080 Buffer over-read in WLAN Firmware

Transient DOS while parsing a vender specific IE Information Element of reassociation response management frame...

CVE-2023-33041 Reachable assertion in WLAN Firmware

Under certain scenarios the WLAN Firmware will reach an assertion due to state confusion while looking up peer ids...

CVE-2023-33041

Summary: CVE-2023-33041 describes a WLAN Firmware assertion caused by state confusion when looking up peer IDs. Impact: Availability loss (NVD metrics: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). Root cause: assertion due to state confusion in peer-id lookup. Affected component: WLAN Firmware; no expli...

CVE-2023-28580

CVE-2023-28580 concerns Qualcomm chipsets’ WLAN Host memory corruption when setting the PMK length in the internal cache. The vulnerability description across sources consistently states memory corruption in the WLAN Host related to PMK length handling in the internal cache, with CVSS signals ind...

CVE-2023-28580 Buffer Copy Without Checking Size of Input in WLAN Host

Memory corruption in WLAN Host while setting the PMK length in PMK length in internal cache...

CVE-2023-28580 Buffer Copy Without Checking Size of Input in WLAN Host

Memory corruption in WLAN Host while setting the PMK length in PMK length in internal cache...

CVE-2023-28579 Buffer Copy Without Checking Size of Input in WLAN Host

Memory Corruption in WLAN Host while deserializing the input PMK bytes without checking the input PMK length...

CVE-2023-28579

CVE-2023-28579 corresponds to a memory corruption flaw in Qualcomm chipsets’ WLAN host, triggered when deserializing input PMK bytes without validating PMK length. Connected sources confirm the issue within Qualcomm WLAN components, affecting WLAN host processing, with potential impact on integri...

CVE-2023-28579 Buffer Copy Without Checking Size of Input in WLAN Host

Memory Corruption in WLAN Host while deserializing the input PMK bytes without checking the input PMK length...

Qualcomm Chipsets Security Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from a NULL pointer dereference in the WLAN Firmware...

Qualcomm Chipsets Security Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from a NULL pointer dereference in the WLAN Firmware...

Qualcomm Chipsets Security Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from a buffer over-read in the WLAN Firmware...

PT-2023-24157 · Unknown · Wlan Firmware

Name of the Vulnerable Software and Affected Versions: WLAN Firmware affected versions not specified Description: The issue arises under certain scenarios where the WLAN Firmware reaches an assertion due to state confusion while looking up peer ids. There is no information provided about the...

PT-2023-21827 · Qualcomm · Qualcomm Chipsets

Name of the Vulnerable Software and Affected Versions: Qualcomm Chipsets affected versions not specified Description: The issue is related to memory corruption in the WLAN host, which occurs when deserializing input PMK bytes without checking the input PMK length. This can potentially lead to cod...