CVE-2022-40503

Information disclosure due to buffer over-read in Bluetooth Host while A2DP streaming...

CVE-2022-40505

Information disclosure due to buffer over-read in Modem while parsing DNS hostname...

CVE-2020-11285

Buffer over-read while unpacking the RTCP packet we may read extra byte if wrong length is provided in RTCP packets in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music,...

CVE-2024-38373

FreeRTOS-Plus-TCP is a lightweight TCP/IP stack for FreeRTOS. FreeRTOS-Plus-TCP versions 4.0.0 through 4.1.0 contain a buffer over-read issue in the DNS Response Parser when parsing domain names in a DNS response. A carefully crafted DNS response with domain name length value greater than the...

Medium: python3

Issue Overview: CPython 3.9 and earlier doesn't disallow configuring an empty list for SSLContext.setnpnprotocols which is an invalid value for the underlying OpenSSL API. This results in a buffer over-read when NPN is used see CVE-2024-5535 for OpenSSL. This vulnerability is of low severity due ...

Amazon Linux 2 : python (ALAS-2025-2744)

The version of python installed on the remote host is prior to 2.7.18-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2744 advisory. CPython 3.9 and earlier doesn't disallow configuring an empty list for SSLContext.setnpnprotocols which is an invalid value for the...

Amazon Linux 2 : python3 (ALAS-2025-2743)

The version of python3 installed on the remote host is prior to 3.7.16-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2743 advisory. CPython 3.9 and earlier doesn't disallow configuring an empty list for SSLContext.setnpnprotocols which is an invalid value for th...

CVE-2024-49839

CVE-2024-49839 - Summary (mode C) Root cause: Memory corruption during management frame processing caused by a mismatch in the T2LM information element, affecting Qualcomm WLAN/capability elements. What is affected: Qualcomm chipsets with WLAN functionality that process management frames incorpor...

CVE-2024-49839 Buffer Over-read in WLAN Host Cmn

Memory corruption during management frame processing due to mismatch in T2LM info element...

CVE-2024-49839 Buffer Over-read in WLAN Host Cmn

Memory corruption during management frame processing due to mismatch in T2LM info element...

CVE-2024-49838 Buffer Over-read in WLAN HOST

Information disclosure while parsing the OCI IE with invalid length...

CVE-2024-49838

CVE-2024-49838 is an information disclosure vulnerability in Qualcomm WLAN components (Qualcomm closed- and open-source areas) caused by parsing an OCI IE with invalid length. Connected sources indicate this CVE is tracked in Qualcomm security advisories and appears in the Android March 2025 bull...

CVE-2024-49838 Buffer Over-read in WLAN HOST

Information disclosure while parsing the OCI IE with invalid length...

CVE-2024-38417

CVE-2024-38417 concerns information disclosure during IOCTL processing in Qualcomm embedded platform microcode used in Qualcomm chipsets (notably automotive multimedia). The root cause is a memory issue (buffer over-read) when handling IO control commands, enabling potential leakage of protected ...

CVE-2024-38417 Buffer Over-read in Automotive Multimedia

Information disclosure while processing IO control commands...

CVE-2024-38417 Buffer Over-read in Automotive Multimedia

Information disclosure while processing IO control commands...

CVE-2024-38416 Buffer Over-read in Audio

Information disclosure during audio playback...

CVE-2024-38416

CVE-2024-38416 is a buffer over-read vulnerability in audio processing on Qualcomm chipsets that leads to information disclosure during audio playback (local access; no explicit exploit details in the provided sources). The affected component is audio playback; root cause stated as a buffer over-...

CVE-2024-38416 Buffer Over-read in Audio

Information disclosure during audio playback...

CVE-2024-38414

CVE-2024-38414 affects Qualcomm chipsets. The issue is information disclosure that occurs while processing firmware image information during core initialization, indicating a confidentiality impact. CVSS metrics in the entry show a high confidentiality impact (C/H) with local attack vector and lo...