CVE-2022-40527 Reachable Assertion in WLAN Embedded SW

Transient DOS due to reachable assertion in WLAN while processing PEER ID populated by TQM...

CVE-2022-40527

CVE-2022-40527 is described as a Transient Denial of Service caused by a reachable assertion in WLAN when processing PEER ID populated by TQM. Multiple sources (NVD entry and various security catalogs) list a NETWORK attack vector with no required user interaction, and a high availability impact ...

CVE-2022-40527 Reachable Assertion in WLAN Embedded SW

Transient DOS due to reachable assertion in WLAN while processing PEER ID populated by TQM...

CVE-2022-33309 Buiffer over-read in WLAN Firmware.

Transient DOS due to buffer over-read in WLAN Firmware while parsing secure FTMR frame with size lesser than 39 Bytes...

CVE-2022-33309

CVE-2022-33309 is a Transient DoS caused by a buffer over-read in WLAN Firmware when parsing a secure FTMR frame smaller than 39 bytes. The vulnerability affects Qualcomm closed‑source WLAN Firmware components and is described in the CVE entries (NVD/Red Hat/PRION/CVEList) with a base score of 7....

CVE-2022-33245

CVE-2022-33245 is a memory corruption vulnerability in the WLAN component caused by a use-after-free condition. The CVE is documented for Qualcomm WLAN/SRAM related code, with the vulnerability described as memory corruption (CVE-2022-33245) and its CVSS metrics indicating Local access, Low attac...

CVE-2022-33245 Use after free in WLAN

Memory corruption in WLAN due to use after free...

CVE-2022-33245 Use after free in WLAN

Memory corruption in WLAN due to use after free...

CVE-2022-25655 Buffer copy without checking the size of input in WLAN HAL.

Memory corruption in WLAN HAL while arbitrary value is passed in WMI UTF command payload...

CVE-2022-25655

CVE-2022-25655 describes memory corruption in the WLAN HAL due to a buffer copy without size checking when a WMI UTF payload is processed. Connected sources indicate this involves Qualcomm closed‑source WLAN HAL components and that the issue is triggered by arbitrary input in the WMI UTF command ...

CVE-2022-47459

CVE-2022-47459 concerns a vulnerability in the WLAN driver where a missing parameter check can lead to a local denial of service in WLAN services. The concrete details across connected sources consistently identify the affected component as the WLAN driver and describe the root cause as an inadeq...

CVE-2022-47459

In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services...

CVE-2022-47459

In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services...

CVE-2022-47458

CVE-2022-47458 affects the UNISOC chipsets WLAN module (wlan driver) with a vulnerability caused by missing parameter checks. This can lead to local denial of service in the WLAN service. The connected documents confirm the root cause is parameter validation issues and indicate local exploitation...

CVE-2022-47458

In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services...

CVE-2022-47458

In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services...

CVE-2022-47457

CVE-2022-47457 concerns the wlan driver (UNISOC chipsets) with a missing parameters check in the WLAN module, enabling local denial of service in wlan services. The root cause is insufficient input validation in the driver; affected software is described as the wlan driver, with no specific versi...

CVE-2022-47457

In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services...

CVE-2022-47457

In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services...

CVE-2022-47456

CVE-2022-47456 concerns the UNISOC wlan driver: a missing parameter check in the WLAN module can cause a local denial of service. The NVD entry lists a CVSS v3.1 base score of 5.5 (Medium) with local attack vector and low privileges required, while exploitation details are not provided in the rec...