CVE-2024-33014 Buffer Over-read in WLAN Host

Transient DOS while parsing ESP IE from beacon/probe response frame...

CVE-2024-33014

CVE-2024-33014 affects Qualcomm WLAN components; description: Transient Denial of Service occurs while parsing ESP Information Elements from beacon/probe response frames. CVSS v3.1 base score 7.5 (Network, Low complexity, No privileges, User interaction none; AvailabilityImpact: High). Connected ...

CVE-2024-33014 Buffer Over-read in WLAN Host

Transient DOS while parsing ESP IE from beacon/probe response frame...

CVE-2024-33013

CVE-2024-33013 describes a transient denial-of-service affecting Qualcomm WLAN-related components. Public records here indicate the vulnerability occurs when a driver accesses ML IE memory and the offset is incremented beyond the ML IE length, potentially causing a DoS condition. Affected items i...

CVE-2024-33013 Buffer Over-read in WLAN Host

Transient DOS when driver accesses the ML IE memory and offset value is incremented beyond ML IE length...

CVE-2024-33013 Buffer Over-read in WLAN Host

Transient DOS when driver accesses the ML IE memory and offset value is incremented beyond ML IE length...

CVE-2024-33012

CVE-2024-33012 describes a transient Denial of Service affecting Qualcomm WLAN Host code, triggered while parsing multiple MBSSID IEs in beacon frames when a tag length is non-zero and the beacon ends. The CVSS v3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) yields a base score of 7.5 (HIGH) wi...

CVE-2024-33012 Buffer Over-read in WLAN Host

Transient DOS while parsing the multiple MBSSID IEs from the beacon, when the tag length is non-zero value but with end of beacon...

CVE-2024-33012 Buffer Over-read in WLAN Host

Transient DOS while parsing the multiple MBSSID IEs from the beacon, when the tag length is non-zero value but with end of beacon...

CVE-2024-33011 Buffer Over-read in WLAN Host

Transient DOS while parsing the MBSSID IE from the beacons, when the MBSSID IE length is zero...

CVE-2024-33011 Buffer Over-read in WLAN Host

Transient DOS while parsing the MBSSID IE from the beacons, when the MBSSID IE length is zero...

CVE-2024-33011

CVE-2024-33011 is described as a transient Denial-of-Service condition in the WLAN Host module (Qualcomm) when parsing the MBSSID Information Element (IE) from beacon frames with a zero-length MBSSID IE. Public sources in the provided documents identify the issue as related to Qualcomm WLAN, with...

CVE-2024-23353 Buffer Over-read in Multi Mode Call Processor

Transient DOS while decoding attach reject message received by UE, when IEI is set to ESMIEI...

CVE-2024-23353 Buffer Over-read in Multi Mode Call Processor

Transient DOS while decoding attach reject message received by UE, when IEI is set to ESMIEI...

CVE-2024-23353

CVE-2024-23353 affects Qualcomm components (Multi Mode Call Processor) and describes a transient denial-of-service during decoding an attach reject message received by UE when IEI is set to ESM_IEI. CVSSv3.1 base score 7.5 (High) with network attack vector, no user interaction, and impact limited...

CVE-2024-21479 Buffer Over-read in Audio

Transient DOS during music playback of ALAC content...

CVE-2024-21479 Buffer Over-read in Audio

Transient DOS during music playback of ALAC content...

CVE-2024-21479

Technical details for CVE-2024-21479 are not publicly available in the provided documents. Monitor for updates from sources in the Connected documents; currently no specific affected products, root cause, impact, or fixes are disclosed here.

CVE-2024-21467 Buffer Over-read in WLAN Host Communication

Information disclosure while handling beacon probe frame during scan entry generation in client side...

CVE-2024-21467

CVE-2024-21467 is a WLAN information-disclosure issue arising from how beacon probe frames are processed during scan entry generation on the client side. Affected component: Qualcomm WLAN/host stack; root cause: out-of-bounds beacon probe frame handling leading to information disclosure with pote...