4366 matches found
Qualcomm Releases Patch for 3 new Zero-Days Under Active Exploitation
Chipmaker Qualcomm has released security updates to address 17 vulnerabilities in various components, while warning that three other zero-days have come under active exploitation. Of the 17 flaws, three are rated Critical, 13 are rated High, and one is rated Medium in severity. "There are...
CVE-2023-33028
Memory corruption in WLAN Firmware while doing a memory copy of pmk cache...
CVE-2023-33027
Transient DOS in WLAN Firmware while parsing rsn ies...
CVE-2023-33026
Transient DOS in WLAN Firmware while parsing a NAN management frame...
CVE-2023-28539
Memory corruption in WLAN Host when the firmware invokes multiple WMI Service Available command...
CVE-2023-28571
Information disclosure in WLAN HOST while processing the WLAN scan descriptor list during roaming scan...
Memory corruption
Memory corruption in WLAN Host when the firmware invokes multiple WMI Service Available command...
Information disclosure
Information disclosure in WLAN HOST while processing the WLAN scan descriptor list during roaming scan...
Code injection
Transient DOS in WLAN Firmware while parsing rsn ies...
Memory corruption
Memory corruption in WLAN Firmware while doing a memory copy of pmk cache...
CVE-2023-33028 Buffer Copy without Checking Size of Input in WLAN Firmware
Memory corruption in WLAN Firmware while doing a memory copy of pmk cache...
CVE-2023-33028 Buffer Copy without Checking Size of Input in WLAN Firmware
Memory corruption in WLAN Firmware while doing a memory copy of pmk cache...
CVE-2023-33028
CVE-2023-33028 describes a memory corruption vulnerability in Qualcomm WLAN firmware during a pmk cache memory copy, classified as buffer copy without checking size. Public records indicate potential remote code execution with high impact on confidentiality, integrity, and availability (CVSS 3.1:...
CVE-2023-33027 Buffer Over-read in WLAN Firmware
Transient DOS in WLAN Firmware while parsing rsn ies...
CVE-2023-33027 Buffer Over-read in WLAN Firmware
Transient DOS in WLAN Firmware while parsing rsn ies...
CVE-2023-33027
CVE-2023-33027 denotes a transient Denial of Service in WLAN firmware when parsing RSN IEs. Affected are Qualcomm WLAN components and related closed-source firmware; the NVD entry lists Network attack vector, no user interaction, low attack complexity, but availability impact is high (CVE-2023-33...
CVE-2023-33026 Buffer over-read in WLAN Firmware
Transient DOS in WLAN Firmware while parsing a NAN management frame...
CVE-2023-33026 Buffer over-read in WLAN Firmware
Transient DOS in WLAN Firmware while parsing a NAN management frame...
CVE-2023-33026
CVE-2023-33026 describes a Transient Denial of Service in WLAN firmware when parsing a NAN management frame. The CVE entry lists a high severity (CVSS 7.5) with network access and low attack complexity. Public references show the issue is discussed across multiple feeds (NVD, Red Hat, PRION/Qualc...