Design/Logic Flaw

Transient DOS in Data modem while handling TLB control messages from the Network...

Authentication flaw

Transient DOS in Automotive OS due to improper authentication to the secure IO calls...

Information disclosure

Transient DOS while converting TWT Target Wake Time frame parameters in the OTA broadcast...

Information disclosure

Transient DOS while parsing a vender specific IE Information Element of reassociation response management frame...

Code injection

Transient DOS while parsing WPA IES, when it is passed with length more than expected size...

CVE-2023-33098 Buffer Over-read in WLAN Firmware

Transient DOS while parsing WPA IES, when it is passed with length more than expected size...

CVE-2023-33098

CVE-2023-33098 describes a transient Denial of Service in WLAN firmware when parsing WPA IES with length exceeding the expected size. The root cause is a buffer over-read in Qualcomm WLAN firmware (Qualcomm components; closed-source) leading to DoS with no user interaction and network-based explo...

CVE-2023-33097

CVE-2023-33097 is described as a Transient DOS in WLAN Firmware when processing a FTMR frame. Connected sources (e.g., CVE List entry) indicate the root cause as a Buffer Over-read in the WLAN Firmware. Public records in this set reference Qualcomm chipset components and denote a High severity (C...

CVE-2023-33097 Buffer Over-read in WLAN Firmware

Transient DOS in WLAN Firmware while processing a FTMR frame...

CVE-2023-33089

CVE-2023-33089 describes a Transient DoS in Qualcomm WLAN firmware caused by processing a NULL buffer during WLAN vdev parsing. The vulnerability is tracked across multiple feeds, with a CVSS v3.1 base score of 7.5 (High) and network attack vector without required user interaction. Connected docu...

CVE-2023-33089 NULL Pointer Dereference in WLAN Firmware

Transient DOS when processing a NULL buffer while parsing WLAN vdev...

CVE-2023-33081 Buffer over-read in WLAN Firmware

Transient DOS while converting TWT Target Wake Time frame parameters in the OTA broadcast...

CVE-2023-33081

CVE-2023-33081 is a Qualcomm WLAN firmware issue described as a buffer over-read in a closed-source WLAN component, causing a transient Denial of Service during OTA broadcast when converting Target Wake Time (TWT) frame parameters. The impact is a DoS that is transient and tied to the OTA TWT par...

CVE-2023-33080 Buffer over-read in WLAN Firmware

Transient DOS while parsing a vender specific IE Information Element of reassociation response management frame...

CVE-2023-33080 Buffer over-read in WLAN Firmware

Transient DOS while parsing a vender specific IE Information Element of reassociation response management frame...

CVE-2023-33070 Improper Authentication in Automotive OS

Transient DOS in Automotive OS due to improper authentication to the secure IO calls...

CVE-2023-33070

CVE-2023-33070 describes a Transient DOS in Automotive OS caused by improper authentication to secure IO calls. Affected component: Automotive OS' secure IO interface; root cause is improper authentication enabling local access to IO calls, leading to availability impact (DoS). According to conne...

CVE-2023-33044 Reachable Assertion in Data Modem

Transient DOS in Data modem while handling TLB control messages from the Network...

CVE-2023-33044

CVE-2023-33044 affects Qualcomm Data Modem. The issue is a transient Denial of Service in the data modem when handling TLB control messages from the network, caused by incorrect buffer clearance. Impact is DoS with availability loss (CVSS: Network attack, low complexity, no user interaction; Avai...

CVE-2023-33043

The CVE-2023-33043 issue affects Qualcomm embedded platform modem code and causes a transient DoS when a Beam switch request occurs with a non-configured BWP. Root cause per PT-2023-7611 is an incorrect channel division and sub-band switching implementation during a Beam Switching connection, tri...