CVE-2023-28560

Summary (CVE-2023-28560): Memory corruption in the WLAN HAL of Qualcomm chipsets triggered while processing the devIndex from an untrusted WMI payload. This affects WLAN HAL code paths and can impact confidentiality, integrity, and availability as indicated by the CVSS vector (Local access, Low c...

CVE-2023-28559 Buffer Copy Without Checking Size of Input in WLAN HAL

Memory corruption in WLAN FW while processing command parameters from untrusted WMI payload...

CVE-2023-28558 Improper Validation of Array Index in WLAN HAL

Memory corruption in WLAN handler while processing PhyID in Tx status handler...

CVE-2023-28557 Improper Validation of Array Index in WLAN HAL

Memory corruption in WLAN HAL while processing command parameters from untrusted WMI payload...

CVE-2023-28557 Improper Validation of Array Index in WLAN HAL

Memory corruption in WLAN HAL while processing command parameters from untrusted WMI payload...

CVE-2023-28557

CVE-2023-28557 affects Qualcomm WLAN HAL, causing memory corruption when processing command parameters from an untrusted WMI payload. The issue is described as a local vulnerability with low attack complexity and exploit prerequisites, but with high impact to confidentiality, integrity, and avail...

CVE-2023-28549 Improper Restriction of Operations within the Bounds of a Memory Buffer in WLAN HAL

Memory corruption in WLAN HAL while parsing Rx buffer in processing TLV payload...

CVE-2023-28549

CVE-2023-28549 describes memory corruption in the Qualcomm WLAN HAL while parsing a TLV payload in the Rx path. The vulnerability affects Qualcomm WLAN components (closed-source) and is rated with CVSSv3.1: Local attack, Low privileges required, no user interaction, with high impact on confidenti...

CVE-2023-28548 Improper Validation of Array Index in WLAN HAL

Memory corruption in WLAN HAL while processing Tx/Rx commands from QDART...

CVE-2023-28548 Improper Validation of Array Index in WLAN HAL

Memory corruption in WLAN HAL while processing Tx/Rx commands from QDART...

CVE-2023-28548

CVE-2023-28548 describes memory corruption in the WLAN HAL when processing Tx/Rx commands from QDART. The entry identifies the affected component as Qualcomm closed-source WLAN HAL and attributes the issue to a faulty handling path in QDART Tx/Rx processing, with a CVSSv3.1 base score of 7.8 (Att...

CVE-2022-33275 Improper validation of array index in WLAN HAL

Memory corruption due to improper validation of array index in WLAN HAL when received lmitemNum is out of range...

CVE-2022-33275 Improper validation of array index in WLAN HAL

Memory corruption due to improper validation of array index in WLAN HAL when received lmitemNum is out of range...

CVE-2022-33275

CVE-2022-33275 describes memory corruption due to improper validation of an array index in the WLAN HAL when lm_itemNum is out of range. The issue affects Qualcomm chipsets’ WLAN HAL and is caused by out-of-bounds handling of item indices, leading to potential memory corruption. Public details in...

PT-2023-13281 · Wlan Hal · Wlan Hal

Name of the Vulnerable Software and Affected Versions: WLAN HAL affected versions not specified Description: The issue is caused by memory corruption due to improper validation of array index in WLAN HAL when the received lm itemNum is out of range. This can lead to potential exploits. There is n...

PT-2023-21808 · Wlan Hal · Wlan Hal

Name of the Vulnerable Software and Affected Versions: WLAN HAL affected versions not specified Description: The issue is related to memory corruption in the WLAN HAL when processing the devIndex from an untrusted WMI payload. This can lead to potential security risks. There is no information...

PT-2023-21812 · Qualcomm · Qualcomm Snapdragon Processors

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon Processors affected versions not specified Description: The issue is related to memory corruption in the WLAN HAL when passing command parameters through WMI interfaces. This can potentially lead to security risks. There i...

Out-of-bounds

In convertSubgraphFromHAL of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-30681

An improper input validation vulnerability within initialize function in HAL VaultKeeper prior to SMR Aug-2023 Release 1 allows attacker to cause out-of-bounds write...

CVE-2023-30681

An improper input validation vulnerability within initialize function in HAL VaultKeeper prior to SMR Aug-2023 Release 1 allows attacker to cause out-of-bounds write...