CVE-2024-35851

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: qca: fix NULL-deref on non-serdev suspend Qualcomm ROME controllers can be registered from the Bluetooth line discipline and in this case the HCI UART serdev pointer is NULL. Add the missing sanity check to prevent a...

DEBIAN-CVE-2023-23002

In the Linux kernel before 5.16.3, drivers/bluetooth/hciqca.c misinterprets the devmgpiodgetindexoptional return value expects it to be NULL in the error case, whereas it is actually an error pointer...

AZL-25610 CVE-2023-23002 affecting package kernel for versions less than 5.15.102.1-1

In the Linux kernel before 5.16.3, drivers/bluetooth/hciqca.c misinterprets the devmgpiodgetindexoptional return value expects it to be NULL in the error case, whereas it is actually an error pointer...

PT-2023-35189 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.90 Description: A potential security issue has been identified in the Linux Kernel, related to the hci qca driver shutdown on closed serdev. The actual impact and attack plausibility have not yet been...

PT-2023-9333 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.1.0-rt5-00325-g8a5f56bcfcca 8 Description: The issue is related to a use-after-free vulnerability in the Linux kernel, specifically in the hci qca driver. This vulnerability occurs when the driver shutdown...

Qualcomm多款产品 代码问题漏洞

The Qualcomm QCA chip and the Qualcomm AR8035 are both products of Qualcomm Incorporated.The Qualcomm QCA chip is a Bluetooth module chip.The Qualcomm AR8035 is an integrated 10/100/1000 Gigabit Ethernet transceiver. A code issue vulnerability exists in multiple Qualcomm products that stems from...

Qualcomm多款产品 授权问题漏洞

The Qualcomm QCA chip and Qualcomm AQT1000 are both products of Qualcomm Incorporated Qualcomm.The Qualcomm QCA chip is a Bluetooth module chip.The Qualcomm AQT1000 is a highly stripped down version of the WCD9341 Aqstic audio codec.The Qualcomm AQT1000 is a highly stripped down version of the...

PT-2022-6417 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.16.3 Description: The issue is related to the misinterpretation of the devm gpiod get index optional return value in the drivers/bluetooth/hci qca.c file of the Linux kernel, which can lead to a denial of...

多款Qualcomm产品资源管理错误漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuits mainly semiconductor devices, but also passive components, etc. and are often manufactured on the surface of semiconductor wafers. A resource management error vulnerability exists in Qualcomm chips that stems...

qca.co.kr Cross Site Scripting vulnerability OBB-1486860

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

CVE-2019-14026

CVE-2019-14026 describes a possible buffer overflow in the WLAN WMI handler caused by missing SSID length checks during data copy on Qualcomm Snapdragon platforms (e.g., APQ80xx, SDM/SM series, QCA devices, and others listed). Root cause: insufficient length validation for SSID data before copyin...

CVE-2018-11934

Possible out of bounds write due to improper input validation while processing DOACS vendor command in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9150, MDM9206, MDM9607,...

CVE-2018-0249

A vulnerability when handling incoming 802.11 Association Requests for Cisco Aironet 1800 Series Access Point APs on Qualcomm Atheros QCA based hardware platforms could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected system. A successful explo...

CVE-2018-0249

CVE-2018-0249 describes a denial-of-service vulnerability in Cisco Aironet 1800 Series APs on Qualcomm Atheros (QCA) hardware. The issue stems from incorrect handling of malformed or invalid 802.11 Association Requests, which could be exploited by an unauthenticated, adjacent attacker to cause a ...

CVE-2016-10438

In Android before 2018-04-05 or earlier security patch level on Qualcomm Small Cell SoC, Snapdragon Mobile, and Snapdragon Wear FSM9055, IPQ4019, IPQ8064, MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, MSM8909W, QCA4531, QCA9980, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD...

CVE-2017-9694

While parsing Netlink attributes in QCAWLANVENDORATTREXTSCANBSSIDHOTLISTPARAMSLOSTAPSAMPLESIZE in qcacld 2.0 before 2017-05-16, a buffer overread could occur...

Fedora Update for qca FEDORA-2016-1

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 22 Update: qca-2.1.1-4.fc22

Taking a hint from the similarly-named Java Cryptography Architecture, QCA aims to provide a straightforward and cross-platform crypto API, using Qt datatypes and conventions. QCA separates the API from the implementation, using plugins known as Providers. The advantage of this model is to allow...

[SECURITY] Fedora 23 Update: qca-2.1.1-4.fc23

Taking a hint from the similarly-named Java Cryptography Architecture, QCA aims to provide a straightforward and cross-platform crypto API, using Qt datatypes and conventions. QCA separates the API from the implementation, using plugins known as Providers. The advantage of this model is to allow...

Fedora Update for psi FEDORA-2011-16476

Check for the Version of psi OpenVAS Vulnerability Test Fedora Update for psi FEDORA-2011-16476 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...