Memory corruption

Memory corruption in WLAN Firmware while doing a memory copy of pmk cache...

CVE-2023-33028 Buffer Copy without Checking Size of Input in WLAN Firmware

Memory corruption in WLAN Firmware while doing a memory copy of pmk cache...

CVE-2023-33028 Buffer Copy without Checking Size of Input in WLAN Firmware

Memory corruption in WLAN Firmware while doing a memory copy of pmk cache...

CVE-2023-33028

CVE-2023-33028 describes a memory corruption vulnerability in Qualcomm WLAN firmware during a pmk cache memory copy, classified as buffer copy without checking size. Public records indicate potential remote code execution with high impact on confidentiality, integrity, and availability (CVSS 3.1:...

CVE-2023-33027 Buffer Over-read in WLAN Firmware

Transient DOS in WLAN Firmware while parsing rsn ies...

CVE-2023-33027 Buffer Over-read in WLAN Firmware

Transient DOS in WLAN Firmware while parsing rsn ies...

CVE-2023-33027

CVE-2023-33027 denotes a transient Denial of Service in WLAN firmware when parsing RSN IEs. Affected are Qualcomm WLAN components and related closed-source firmware; the NVD entry lists Network attack vector, no user interaction, low attack complexity, but availability impact is high (CVE-2023-33...

CVE-2023-33026 Buffer over-read in WLAN Firmware

Transient DOS in WLAN Firmware while parsing a NAN management frame...

CVE-2023-33026 Buffer over-read in WLAN Firmware

Transient DOS in WLAN Firmware while parsing a NAN management frame...

CVE-2023-33026

CVE-2023-33026 describes a Transient Denial of Service in WLAN firmware when parsing a NAN management frame. The CVE entry lists a high severity (CVSS 7.5) with network access and low attack complexity. Public references show the issue is discussed across multiple feeds (NVD, Red Hat, PRION/Qualc...

CVE-2023-28571 Buffer Over-read in WLAN HOST

Information disclosure in WLAN HOST while processing the WLAN scan descriptor list during roaming scan...

CVE-2023-28571

CVE-2023-28571 describes an information-disclosure flaw in WLAN HOST while processing the WLAN scan descriptor list during roaming scans. Public documents (NVD, Red Hat, PRION, vuln enrichment) consistently refer to information disclosure with CVSS metrics indicating a local attacker with low com...

CVE-2023-28571 Buffer Over-read in WLAN HOST

Information disclosure in WLAN HOST while processing the WLAN scan descriptor list during roaming scan...

CVE-2023-28539 Buffer Copy Without Checking Size of Input in WLAN Host

Memory corruption in WLAN Host when the firmware invokes multiple WMI Service Available command...

CVE-2023-28539 Buffer Copy Without Checking Size of Input in WLAN Host

Memory corruption in WLAN Host when the firmware invokes multiple WMI Service Available command...

CVE-2023-28539

CVE-2023-28539 is a memory corruption in the WLAN Host when the firmware invokes multiple WMI Service Available commands. Documented across multiple sources (NVD/NVD.org, Red Hat, Qualcomm bulletins, and Android Pixel security bulletin) as a WLAN/firmware issue impacting Qualcomm components. The ...

CVE-2023-41086

CVE-2023-41086 affects Furuno SYSTEMS wireless LAN APs running in ST (Standalone) mode. A CSRF vulnerability may allow unintended operations when a logged-in user views a malicious page. Affected firmware: ACERA 1210 (≤02.36), 1150i (≤01.35), 1150w (≤01.35), 1110 (≤01.76), 1020 (≤01.86), 1010 (≤0...

CVE-2023-39429

CVE-2023-39429 affects Furuno SYSTEMS WAP devices (ACERA series) running in ST (Standalone) mode. The vulnerability is a cross-site scripting flaw where an authenticated user can inject arbitrary script through a crafted configuration, impacting multiple firmware versions listed in the connected ...

Qualcomm Chip Security Breach

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuits mainly semiconductor devices, but also passive components, etc., and from time to time are manufactured on the surface of semiconductor wafers. The Qualcomm chip has a security vulnerability that stems from...

Input validation

In wlan firmware, there is a possible firmware assertion due to improper input handling. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07932637; Issue ID: ALPS07932637...