CVE-2023-28564 Use of Out-of-range Pointer Offset in WLAN HAL

Memory corruption in WLAN HAL while passing command parameters through WMI interfaces...

CVE-2023-28564

CVE-2023-28564 is a memory-corruption vulnerability in the WLAN HAL when passing command parameters through WMI interfaces. Documented as high-severity (CVSS v3.1: 7.8; LOCAL, LOW privileges required, no user interaction) with potential impact on confidentiality, integrity, and availability. Publ...

CVE-2023-28560 Buffer Copy Without Checking Size of Input in WLAN HAL

Memory corruption in WLAN HAL while processing devIndex from untrusted WMI payload...

CVE-2023-28560 Buffer Copy Without Checking Size of Input in WLAN HAL

Memory corruption in WLAN HAL while processing devIndex from untrusted WMI payload...

CVE-2023-28560

Summary (CVE-2023-28560): Memory corruption in the WLAN HAL of Qualcomm chipsets triggered while processing the devIndex from an untrusted WMI payload. This affects WLAN HAL code paths and can impact confidentiality, integrity, and availability as indicated by the CVSS vector (Local access, Low c...

CVE-2023-28559

CVE-2023-28559: Memory corruption in WLAN firmware when processing command parameters from untrusted WMI payload. Affected: Qualcomm WLAN FW components (WLAN HAL). Root cause evidenced by multiple sources describing a WLAN firmware memory corruption issue; CVSS v3.1 base score 7.8 (High) with LOC...

CVE-2023-28559 Buffer Copy Without Checking Size of Input in WLAN HAL

Memory corruption in WLAN FW while processing command parameters from untrusted WMI payload...

CVE-2023-28559 Buffer Copy Without Checking Size of Input in WLAN HAL

Memory corruption in WLAN FW while processing command parameters from untrusted WMI payload...

CVE-2023-28558

CVE-2023-28558 reports memory corruption in the WLAN HAL when processing PhyID in the Tx status path, affecting Qualcomm closed-source components. The vulnerability has a high impact profile (C/H/I/A) with local attack vector, low attack complexity, and no user interaction required, according to ...

CVE-2023-28558 Improper Validation of Array Index in WLAN HAL

Memory corruption in WLAN handler while processing PhyID in Tx status handler...

CVE-2023-28558 Improper Validation of Array Index in WLAN HAL

Memory corruption in WLAN handler while processing PhyID in Tx status handler...

CVE-2023-28557 Improper Validation of Array Index in WLAN HAL

Memory corruption in WLAN HAL while processing command parameters from untrusted WMI payload...

CVE-2023-28557 Improper Validation of Array Index in WLAN HAL

Memory corruption in WLAN HAL while processing command parameters from untrusted WMI payload...

CVE-2023-28557

CVE-2023-28557 affects Qualcomm WLAN HAL, causing memory corruption when processing command parameters from an untrusted WMI payload. The issue is described as a local vulnerability with low attack complexity and exploit prerequisites, but with high impact to confidentiality, integrity, and avail...

CVE-2023-28549

CVE-2023-28549 describes memory corruption in the Qualcomm WLAN HAL while parsing a TLV payload in the Rx path. The vulnerability affects Qualcomm WLAN components (closed-source) and is rated with CVSSv3.1: Local attack, Low privileges required, no user interaction, with high impact on confidenti...

CVE-2023-28549 Improper Restriction of Operations within the Bounds of a Memory Buffer in WLAN HAL

Memory corruption in WLAN HAL while parsing Rx buffer in processing TLV payload...

CVE-2023-28549 Improper Restriction of Operations within the Bounds of a Memory Buffer in WLAN HAL

Memory corruption in WLAN HAL while parsing Rx buffer in processing TLV payload...

CVE-2023-28548 Improper Validation of Array Index in WLAN HAL

Memory corruption in WLAN HAL while processing Tx/Rx commands from QDART...

CVE-2023-28548 Improper Validation of Array Index in WLAN HAL

Memory corruption in WLAN HAL while processing Tx/Rx commands from QDART...

CVE-2023-28548

CVE-2023-28548 describes memory corruption in the WLAN HAL when processing Tx/Rx commands from QDART. The entry identifies the affected component as Qualcomm closed-source WLAN HAL and attributes the issue to a faulty handling path in QDART Tx/Rx processing, with a CVSSv3.1 base score of 7.8 (Att...