CVE-2025-21448

CVE-2025-21448 involves a transient Denial of Service in Qualcomm WLAN firmware when parsing SSIDs in action frames. Affected component: WLAN firmware; root cause: parsing SSIDs in action frames leading to DoS. Impact: availability loss (CVSSv3.1 base score 7.5, Network attack, no user interactio...

CVE-2025-21435

CVE-2025-21435 : Qualcomm WLAN/ Snapdragon component vulnerability causing a transient Denial-of-Service while parsing extended Information Elements in a beacon. The issue is described as a transient DoS that can occur during beacon IE parsing; exploitation status is not detailed in the provided ...

CVE-2025-21435 Buffer Over-read in WLAN Host Communication

Transient DOS may occur while parsing extended IE in beacon...

CVE-2025-21434 Buffer Over-read in WLAN Host

Transient DOS may occur while parsing EHT operation IE or EHT capability IE...

CVE-2025-21434 Buffer Over-read in WLAN Host

Transient DOS may occur while parsing EHT operation IE or EHT capability IE...

CVE-2025-21434

CVE-2025-21434 affects Qualcomm WLAN on Snapdragon platforms. The issue is a transient Denial of Service that can occur while parsing EHT operation IE or EHT capability IE, as described in Qualcomm’s security references (QC-CR#3918068) and linked CVE listings. Connected sources indicate a DoS imp...

CVE-2025-21430 Buffer Over-read in WLAN Host

Transient DOS while connecting STA to AP and initiating ADD TS request from AP to establish TSpec session...

CVE-2025-21430

CVE-2025-21430 is a Qualcomm WLAN (WLAN Host) vulnerability described as a transient Denial of Service during STA-to-AP connection and ADD TS request to establish a TSpec session. The CVSS 3.1 base score is 7.5 (Network, Low attack complexity, No privileges, No user interaction, Availability impa...

PT-2025-15205 · Qualcomm · Snapdragon

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue is related to a Transient Denial of Service DOS that occurs when connecting a Station STA to an Access Point AP and initiating an ADD TS request from the AP to establish a TSpec...

Linux Distros Unpatched Vulnerability : CVE-2024-50112

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - x86/lam: Disable ADDRESSMASKING in most cases Linear Address Masking LAM has a weakness related to transient execution as described in the SLAM paper1. Unless...

CVE-2024-43056

Transient DOS during hypervisor virtual I/O operation in a virtual machine...

CVE-2024-53025

Transient DOS can occur while processing UCI command...

CVE-2024-53027

Transient DOS may occur while processing the country IE...

Linux Distros Unpatched Vulnerability : CVE-2022-49540

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rcu-tasks: Fix race in schedule and flush work While booting secondary CPUs, cpusreadlock/unlock is not keeping online cpumask stable. The transient online mask...

CVE-2024-53025

Transient DOS can occur while processing UCI command...

CVE-2024-53027 Buffer Copy Without Checking Size of Input in WLAN Host

Transient DOS may occur while processing the country IE...

CVE-2024-53025 Integer Overflow or Wraparound in BT Controller

Transient DOS can occur while processing UCI command...

CVE-2024-43056 Buffer Over-read in Hypervisor

Transient DOS during hypervisor virtual I/O operation in a virtual machine...

PT-2025-23584 · Qualcomm · Snapdragon

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue is related to a Transient DOS that occurs while processing the tone measurement response buffer when the response buffer is out of range. Recommendations: At the moment, there is n...

CVE-2025-1717

The Login Me Now plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.7.2. This is due to insecure authentication based on an arbitrary transient name in the 'AutoLogin::listen' function. This makes it possible for unauthenticated attackers to log in an...