CVE-2019-14135: Buffer Copy without Checking Size of Input

Possible integer overflow to buffer overflow in WLAN while parsing nonstandard NAN IE messages. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice &...

CVE-2019-14113: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow can occur in In WLAN firmware while unwraping data using CCMP cipher suite during parsing of EAPOL handshake frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,...

CVE-2019-14114: Integer Overflow or Wraparound

Buffer overflow in WLAN firmware while parsing GTK IE containing GTK key having length more than the buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT,...

PT-2020-17661

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon versions affected versions not specified Description The issue is related to a possible buffer over-read in the Windows WLAN driver function. This occurs due to the lack of a check on the length of a variable received from...

PT-2020-9528

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon Auto versions APQ8009 through SDX24 Qualcomm Snapdragon Compute versions APQ8009 through SDX24 Qualcomm Snapdragon Connectivity versions APQ8009 through SDX24 Qualcomm Snapdragon Consumer Electronics Connectivity versions...

CVE-2019-14110: Buffer Copy without Checking Size of Input

Buffer overflow can occur in function wlan firmware while copying association frame content if frame length is more than the maximum buffer size in case of SAP mode in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer...

PT-2020-9542

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon versions affected versions not specified Description: The issue is related to a possible integer overflow to buffer overflow in WLAN while parsing nonstandard NAN IE messages. This affects various Qualcomm Snapdragon...

PT-2020-9525

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon Auto versions APQ8009 through APQ8098 Qualcomm Snapdragon Compute versions APQ8009 through APQ8098 Qualcomm Snapdragon Connectivity versions APQ8009 through APQ8098 Qualcomm Snapdragon Consumer Electronics Connectivity...

CVE-2019-10575: Improper Verification of Cryptographic Signature

Wlan binary which is not signed with OEMs RoT is working on secure device without authentication failure in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in SDA845, SDM845, SDM850...

CVE-2019-14134: Out-of-bounds Read

Possible out of bound access in WLAN handler when the received value of length in rx path is shorter than the expected value of country IE in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in IPQ8074,...

PT-2020-9080

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon versions prior to the fixed version affected versions not specified Description The issue concerns a Wlan binary that is not signed with OEMs Root of Trust RoT, allowing it to work on a secure device without authentication...

CVE-2020-3652: Improper Input Validation

Possible buffer over-read issue in windows x86 wlan driver function while processing beacon or request frame due to lack of check of length of variable received. in Snapdragon Compute, Snapdragon Connectivity in MSM8998, QCA6390, SC7180, SC8180X, SDM850...

PT-2020-9541

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon versions affected versions not specified Description: The issue concerns a possible out of bound access in the WLAN handler. This occurs when the received value of length in the rx path is shorter than the expected value o...

PT-2020-17660

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon versions affected versions not specified Description A buffer over-read issue may occur in the Windows x86 WLAN driver function when processing beacon or request frames. This is due to the lack of a check on the length of t...

CVE-2020-3273

A vulnerability in the 802.11 Generic Advertisement Service GAS frame processing function of Cisco Wireless LAN Controller WLC Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service DoS. The vulnerability is due to incomple...

PT-2020-7980

Name of the Vulnerable Software and Affected Versions: Samsung mobile devices with J4.2 Qualcomm Wi-Fi chipsets software Description: An issue was discovered in the Qualcomm WLAN Driver, which is affected by a buffer overflow. This issue is related to Samsung mobile devices. Recommendations: For...

CVE-2019-2300

Possible buffer overflow in WLAN handler due to lack of validation of destination buffer size before copying into it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2019-2311

Possible buffer overflow in WLAN handler due to lack of validation of destination buffer size before copying it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,...

CVE-2019-14081

Buffer Over-read when WLAN module gets a WMI message for SAR limits with invalid number of limits to be enforced in Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networki...

CVE-2019-14085

Possible Integer underflow in WLAN function due to lack of check of data received from user side in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in QCN7605, QCS605, SDA845, SDM670, SDM710,...