CVE-2024-45571

Memory corruption may occour occur when stopping the WLAN interface after processing a WMI command from the interface...

CVE-2024-45571

CVE-2024-45571 affects Qualcomm WLAN components. The issue is memory corruption that occurs when stopping the WLAN interface after processing a WMI command, enabling local attacker with low privileges and no user interaction to impact confidentiality, integrity, and availability (all High). No pu...

CVE-2024-45571 Use After Free in WLAN Host Communication

Memory corruption may occour occur when stopping the WLAN interface after processing a WMI command from the interface...

CVE-2024-38410

Memory corruption while IOCLT is called when device is in invalid state and the WMI command buffer may be freed twice...

CVE-2024-38410 Stack-based Buffer Overflow in WLAN Windows Host

Memory corruption while IOCLT is called when device is in invalid state and the WMI command buffer may be freed twice...

CVE-2024-38410

CVE-2024-38410 involves memory corruption from calling IOCLT when a device is in an invalid state, with the WMI command buffer potentially freed twice. The issue is described across sources as a stack/heap memory corruption scenario affecting Qualcomm chipsets (notably WLAN-related) and is classi...

Command injection

Information disclosure in IOE Firmware while handling WMI command...

CVE-2023-28563 Buffer Over-read in IOE Firmware

Information disclosure in IOE Firmware while handling WMI command...

CVE-2023-28563

CVE-2023-28563 affects IOE Firmware in Qualcomm chipsets. The root cause is information disclosure when processing WMI commands in the firmware, leading to potentially exposed data (confidentiality impact high). The issue is listed in Android Pixel bulletin as a closed‑source component vulnerabil...

CVE-2023-28573

Memory corruption in WLAN HAL while parsing WMI command parameters...

CVE-2023-28573

CVE-2023-28573 : Memory corruption in the WLAN HAL while parsing WMI command parameters. Affected software: Qualcomm WLAN HAL/Qualcomm components (Qualcomm closed‑source). Root cause: memory corruption within WLAN HAL during WMI parameter parsing. Impact: high, with local attack vector and impact...

CVE-2023-28573 Improper Validation of Array Index in WLAN HAL

Memory corruption in WLAN HAL while parsing WMI command parameters...

CVE-2022-40532

Memory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target...

SUSE CVE-2019-19074

A memory leak in the ath9kwmicmd function in drivers/net/wireless/ath/ath9k/wmi.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service memory consumption, aka CID-728c1e2a05e4...

CVE-2022-33277

Memory corruption in modem due to buffer copy without checking size of input while receiving WMI command...

Memory corruption

Memory corruption in modem due to buffer copy without checking size of input while receiving WMI command...

CVE-2022-33277

CVE-2022-33277 is a memory corruption issue in the Qualcomm modem component caused by copying input to a buffer without validating its size when handling WMI commands. The vulnerability is documented across multiple feeds (NVD, Red Hat, CVE listing) with a Qualcomm-specific bulletin reference. Ex...

CVE-2022-33277 Buffer copy without checking size of input in modem

Memory corruption in modem due to buffer copy without checking size of input while receiving WMI command...

WARNING: New Unpatched Microsoft Exchange Zero-Day Under Active Exploitation

Security researchers are warning of previously undisclosed flaws in fully patched Microsoft Exchange servers being exploited by malicious actors in real-world attacks to achieve remote code execution on affected systems. The advisory comes from Vietnamese cybersecurity company GTSC, which...

CVE-2021-30319

Possible integer overflow due to improper validation of command length parameters while processing WMI command in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,...