CVE-2025-21434 Buffer Over-read in WLAN Host

Transient DOS may occur while parsing EHT operation IE or EHT capability IE...

CVE-2025-21434

CVE-2025-21434 affects Qualcomm WLAN on Snapdragon platforms. The issue is a transient Denial of Service that can occur while parsing EHT operation IE or EHT capability IE, as described in Qualcomm’s security references (QC-CR#3918068) and linked CVE listings. Connected sources indicate a DoS imp...

CVE-2025-21430 Buffer Over-read in WLAN Host

Transient DOS while connecting STA to AP and initiating ADD TS request from AP to establish TSpec session...

CVE-2025-21430 Buffer Over-read in WLAN Host

Transient DOS while connecting STA to AP and initiating ADD TS request from AP to establish TSpec session...

CVE-2025-21430

CVE-2025-21430 is a Qualcomm WLAN (WLAN Host) vulnerability described as a transient Denial of Service during STA-to-AP connection and ADD TS request to establish a TSpec session. The CVSS 3.1 base score is 7.5 (Network, Low attack complexity, No privileges, No user interaction, Availability impa...

CVE-2025-21429 Buffer Over-read in WLAN Host

Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request...

CVE-2025-21429 Buffer Over-read in WLAN Host

Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request...

CVE-2025-21429

CVE-2025-21429 is a memory corruption issue in Qualcomm WLAN components triggered when a STA connects to an AP and an ADD TS request is initiated. Affected component: Qualcomm WLAN. Impact: memory corruption with high availability impact per CVSS. Public details consistently describe the issue; n...

CVE-2025-21428 Buffer Over-read in WLAN Host

Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request from the AP to establish a TSpec session...

CVE-2025-21428

CVE-2025-21428 relates to memory corruption in Qualcomm chipsets when a station (STA) connects to an access point (AP) and an ADD TS request is initiated to establish a TSpec session. The vulnerability affects the WLAN host/stack in affected Qualcomm products and is classified with CVSS v3.1 vect...

CVE-2025-21428 Buffer Over-read in WLAN Host

Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request from the AP to establish a TSpec session...

CVE-2025-20663

In wlan AP driver, there is a possible information disclosure due to an uncaught exception. This could lead to remote proximal/adjacent information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00408868; Issue ID: MSV-30...

CVE-2025-20664

In wlan AP driver, there is a possible information disclosure due to an uncaught exception. This could lead to remote proximal/adjacent information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00406217; Issue ID: MSV-27...

CVE-2025-20654

In wlan service, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00406897; Issue ID: MSV-2875...

CVE-2025-20654

In wlan service, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00406897; Issue ID: MSV-2875...

CVE-2025-20664

In wlan AP driver, there is a possible information disclosure due to an uncaught exception. This could lead to remote proximal/adjacent information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00406217; Issue ID: MSV-27...

CVE-2025-20664

CVE-2025-20664 affects the wlan AP driver (MediaTek-based) with an information disclosure due to an uncaught exception. The flaw could enable remote (proximal/adjacent) data leakage without extra execution privileges or user interaction. Impact is limited to confidentiality (no integrity/availabi...

CVE-2025-20663

In wlan AP driver, there is a possible information disclosure due to an uncaught exception. This could lead to remote proximal/adjacent information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00408868; Issue ID: MSV-30...

CVE-2025-20663

The CVE-2025-20663 entry affects the WLAN AP driver in MediaTek chipsets, with an information disclosure caused by an uncaught exception. Exploitation could occur remotely from nearby networks without user interaction and without additional execution privileges. The impact is confined to confiden...

CVE-2025-20654

CVE-2025-20654 affects the MediaTek WLAN service, where an incorrect bounds check enables an out-of-bounds write that could lead to remote code execution without user interaction. CVSS v3.1 base score 9.8 (CRITICAL; AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Patch WCNCR00406897 addresses this issue (M...