Qcn6422 Firmware Security Vulnerabilities

CVE-2023-33072

Memory corruption in Core while processing control functions.

CVE-2023-43522

Transient DOS while key unwrapping process, when the given encrypted key is empty or NULL.

CVE-2023-43523

Transient DOS while processing 11AZ RTT management action frame received through OTA.

CVE-2023-43533

Transient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame.

CVE-2023-43536

Transient DOS while parse fils IE with length equal to 1.

CVE-2024-21457

INformation disclosure while handling Multi-link IE in beacon frame.

CVE-2024-21458

Information disclosure while handling SA query action frame.

CVE-2024-21462

Transient DOS while loading the TA ELF file.

CVE-2024-21466

Information disclosure while parsing sub-IE length during new IE generation.

CVE-2024-21482

Memory corruption during the secure boot process, when the bootm command is used, it bypasses the authentication of the kernel/rootfs image.

CVE-2024-23368

Memory corruption when allocating and accessing an entry in an SMEM partition.

CVE-2024-33048

Transient DOS while parsing the received TID-to-link mapping element of beacon/probe response frame.

CVE-2024-33050

Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper.

CVE-2024-33057

Transient DOS while parsing the multi-link element Control field when common information length check is missing before updating the location.