Design/Logic Flaw

Transient DOS in WLAN Firmware while processing a FTMR frame...

Design/Logic Flaw

Under certain scenarios the WLAN Firmware will reach an assertion due to state confusion while looking up peer ids...

Memory corruption

Memory Corruption in WLAN Host while deserializing the input PMK bytes without checking the input PMK length...

Memory corruption

Memory corruption in WLAN Host while setting the PMK length in PMK length in internal cache...

CVE-2023-33098 Buffer Over-read in WLAN Firmware

Transient DOS while parsing WPA IES, when it is passed with length more than expected size...

CVE-2023-33097 Buffer Over-read in WLAN Firmware

Transient DOS in WLAN Firmware while processing a FTMR frame...

CVE-2023-33097

CVE-2023-33097 is described as a Transient DOS in WLAN Firmware when processing a FTMR frame. Connected sources (e.g., CVE List entry) indicate the root cause as a Buffer Over-read in the WLAN Firmware. Public records in this set reference Qualcomm chipset components and denote a High severity (C...

CVE-2023-33089

CVE-2023-33089 describes a Transient DoS in Qualcomm WLAN firmware caused by processing a NULL buffer during WLAN vdev parsing. The vulnerability is tracked across multiple feeds, with a CVSS v3.1 base score of 7.5 (High) and network attack vector without required user interaction. Connected docu...

CVE-2023-33089 NULL Pointer Dereference in WLAN Firmware

Transient DOS when processing a NULL buffer while parsing WLAN vdev...

CVE-2023-33088 NULL pointer dereference in WLAN Firmware

Memory corruption when processing cmd parameters while parsing vdev...

CVE-2023-33083

CVE-2023-33083 concerns memory corruption in the WLAN Host when processing RRM beacons on the AP, attributed to a classic buffer overflow (buffer copy without checking size). Reported across multiple sources tied to Qualcomm chipsets, with CVSSv3.1 base score 9.8 (CRITICAL), indicating network-le...

CVE-2023-33083 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Host

Memory corruption in WLAN Host while processing RRM beacon on the AP...

CVE-2023-33083 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Host

Memory corruption in WLAN Host while processing RRM beacon on the AP...

CVE-2023-33082 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Host

Memory corruption while sending an Assoc Request having BTM Query or BTM Response containing MBO IE...

CVE-2023-33082 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Host

Memory corruption while sending an Assoc Request having BTM Query or BTM Response containing MBO IE...

CVE-2023-33081 Buffer over-read in WLAN Firmware

Transient DOS while converting TWT Target Wake Time frame parameters in the OTA broadcast...

CVE-2023-33080 Buffer over-read in WLAN Firmware

Transient DOS while parsing a vender specific IE Information Element of reassociation response management frame...

CVE-2023-33080 Buffer over-read in WLAN Firmware

Transient DOS while parsing a vender specific IE Information Element of reassociation response management frame...

CVE-2023-33041 Reachable assertion in WLAN Firmware

Under certain scenarios the WLAN Firmware will reach an assertion due to state confusion while looking up peer ids...

CVE-2023-33041

Summary: CVE-2023-33041 describes a WLAN Firmware assertion caused by state confusion when looking up peer IDs. Impact: Availability loss (NVD metrics: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). Root cause: assertion due to state confusion in peer-id lookup. Affected component: WLAN Firmware; no expli...