4376 matches found
Code injection
Transient DOS in WLAN Host when an invalid channel like channel out of range is received in STA during CSA IE...
Memory corruption
Memory corruption in WLAN HAL while processing Tx/Rx commands from QDART...
Memory corruption
Memory corruption due to improper validation of array index in WLAN HAL when received lmitemNum is out of range...
Code injection
Transient DOS in WLAN Host while doing channel switch announcement CSA, when a mobile station receives invalid channel in CSA IE...
Memory corruption
Memory corruption in WLAN HAL while processing devIndex from untrusted WMI payload...
Memory corruption
Memory corruption in WLAN while sending transmit command from HLOS to UTF handlers...
Code injection
Transient DOS in WLAN Host when a mobile station receives invalid channel in CSA IE while doing channel switch announcement CSA...
Memory corruption
Memory corruption in WLAN HAL while passing command parameters through WMI interfaces...
CVE-2023-33020
CVE-2023-33020 corresponds to a transient denial-of-service in WLAN Hosts when an invalid channel (e.g., channel out of range) is received in STA during a Channel Switch Announcement (CSA) Information Element. The CVE is rated CVSS v3.1 base score 7.5 (HIGH) with NETWORK attack vector, LOW attack...
CVE-2023-33020 Improper Authorization in WLAN Host
Transient DOS in WLAN Host when an invalid channel like channel out of range is received in STA during CSA IE...
CVE-2023-33019 Improper Authorization in WLAN Host
Transient DOS in WLAN Host while doing channel switch announcement CSA, when a mobile station receives invalid channel in CSA IE...
CVE-2023-33019
CVE-2023-33019 describes a Transient Denial of Service in the WLAN Host when a mobile station processes a Channel Switch Announcement (CSA) with an invalid channel. Public sources associate this CVE with Qualcomm WLAN components (high severity, CVSSv3.1: 7.5; network attack vector, no user intera...
CVE-2023-33019 Improper Authorization in WLAN Host
Transient DOS in WLAN Host while doing channel switch announcement CSA, when a mobile station receives invalid channel in CSA IE...
CVE-2023-33016
CVE-2023-33016 corresponds to a transient Denial of Service affecting Qualcomm WLAN firmware during parsing of MLO (multi-link operation). Several sources label the issue as a Buffer Over-read in WLAN firmware with a base CVSS v3.1 score of 7.5 (Network attack, no user interaction, low attack com...
CVE-2023-33016 Buffer Over-read in WLAN Firmware
Transient DOS in WLAN firmware while parsing MLO multi-link operation...
CVE-2023-33015 Buffer Over-read in WLAN Firmware
Transient DOS in WLAN Firmware while interpreting MBSSID IE of a received beacon frame...
CVE-2023-33015
The CVE-2023-33015 entry describes a transient DoS in Qualcomm WLAN firmware caused by how MBSSID Information Elements are interpreted in a received beacon frame. Affected component: Qualcomm WLAN firmware/driver stack within Qualcomm-based devices. Root cause: buffer/parsing issue when processin...
CVE-2023-28584 Improper Authorization in WLAN Host
Transient DOS in WLAN Host when a mobile station receives invalid channel in CSA IE while doing channel switch announcement CSA...
CVE-2023-28584
CVE-2023-28584 describes a transient DoS in Qualcomm WLAN Host when a mobile station receives an invalid channel in the Channel Switch Announcement (CSA) Information Element during a CSA. Affected component: Qualcomm WLAN/closed‑source WLAN stack in Qualcomm chipsets mentioned in multiple records...