CVE-2024-45569

CVE-2024-45569 describes memory corruption when parsing the ML IE caused by invalid frame content in Qualcomm chipsets (Qualcomm Snapdragon Auto related). Connected sources corroborate a memory corruption condition with potential remote impact stemming from malformed ML Information Elements. Conc...

CVE-2024-33063

CVE-2024-33063 affects Qualcomm Snapdragon Auto components. The issue arises during ML IE parsing: a beacon with a common info length greater than the ML IE interior triggers a transient DoS due to an out-of-bounds read/write in util_add_mlie_for_prb_rsp_gen(). Connected sources (PT-2024-25101) d...

CVE-2024-21457

CVE-2024-21457 corresponds to a buffer over-read causing information disclosure in WLAN host communication when handling Multi-link IE in beacon frames. Multiple connected sources tie it to Qualcomm WLAN components and Qualcomm/Pixel advisories. The Pixel bulletin lists CVE-2024-21457 under Qualc...

CVE-2024-45558

The CVE-2024-45558 entry describes a Transient Denial of Service in Qualcomm WLAN components. The vulnerability arises when the driver parses the per-STA profile Information Element and accesses the EXTN element ID without validating the IE length, enabling a DoS condition. Sources across multipl...

CVE-2024-45571

CVE-2024-45571 affects Qualcomm WLAN components. The issue is memory corruption that occurs when stopping the WLAN interface after processing a WMI command, enabling local attacker with low privileges and no user interaction to impact confidentiality, integrity, and availability (all High). No pu...

CVE-2024-23368

CVE-2024-23368 is a memory corruption issue in Qualcomm’s embedded platform concerning the SMEM Partition Handler. The vulnerability arises when allocating and accessing an entry in an SMEM partition, effectively a classic buffer copy without proper input size checking, which can lead to memory c...

CVE-2024-33050

CVE-2024-33050 affects Qualcomm WLAN host components and describes a Transient Denial of Service during MBSSID processing when constructing new Information Elements in beacon/probe frames. Root cause is a missing/improper IE length check; impact is DoS with network access, no confidentiality/inte...

CVE-2024-49839

CVE-2024-49839 - Summary (mode C) Root cause: Memory corruption during management frame processing caused by a mismatch in the T2LM information element, affecting Qualcomm WLAN/capability elements. What is affected: Qualcomm chipsets with WLAN functionality that process management frames incorpor...

CVE-2025-21435

CVE-2025-21435 : Qualcomm WLAN/ Snapdragon component vulnerability causing a transient Denial-of-Service while parsing extended Information Elements in a beacon. The issue is described as a transient DoS that can occur during beacon IE parsing; exploitation status is not detailed in the provided ...

CVE-2024-33048

Technical details about CVE-2024-33048 are not provided in the supplied documents. The records only reiterate a transient DOS during TID-to-link mapping parsing. Monitor for updates from Qualcomm/Red Hat/Android advisories.

CVE-2024-21458

CVE-2024-21458 affects Qualcomm WLAN/embedded platform software and is described as information disclosure due to a buffer over-read in handling the SA query action frame (Qualcomm WLAN component). Public references identify it as a WLAN HOST buffer over-read with potential information disclosure...

CVE-2024-33049

CVE-2024-33049 is a Qualcomm WLAN vulnerability described as a transient Denial of Service caused by a buffer over-read when parsing a noninheritance IE of an Extension element in a beacon frame with IE length 2. Public sources classify the issue as a WLAN-related vulnerability with High severity...

CVE-2024-33057

CVE-2024-33057 concerns Qualcomm WLAN components and describes a Transient Denial of Service caused by parsing the multi-link element Control field when a common information length check is missing before updating the location. The primary documentation lists a High impact (CVSSv3.1: 7.5) with a ...

CVE-2024-21466

CVE-2024-21466 refers to an information-disclosure vulnerability in Qualcomm WLAN host communication. Affected: Qualcomm chipsets with WLAN subcomponents; issue arises while parsing the length of sub-IE during new IE generation, enabling partial information disclosure. Public sources (including N...

CVE-2024-33016

CVE-2024-33016 pertains to Siemens SCALANCE W700, where the vulnerability is described as memory corruption that occurs when an invalid firehose patch command is invoked. The Tenable Nessus plugin explicitly identifies this CVE in the context of Siemens SCALANCE W700 and notes the affected asset ...

CVE-2024-33015

CVE-2024-33015 describes a transient DoS in the WLAN host stack during parsing of a SCAN RNR Information Element. Root cause: when bytes from the AP cause the size of the last IE parameter to be smaller than the neighboring report, a DoS can occur. Documented references indicate this affects Qual...

CVE-2024-33025

CVE-2024-33025 is a Transient Denial of Service in the WLAN Host path affecting Qualcomm WLAN components, triggered while parsing the BSS parameter change count or MLD capabilities fields within the ML Information Element. The NVD entry notes a Network attack vector with CVSS v3.1 base score 7.5 ...

CVE-2024-33012

CVE-2024-33012 describes a transient Denial of Service affecting Qualcomm WLAN Host code, triggered while parsing multiple MBSSID IEs in beacon frames when a tag length is non-zero and the beacon ends. The CVSS v3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) yields a base score of 7.5 (HIGH) wi...

CVE-2024-33013

CVE-2024-33013 describes a transient denial-of-service affecting Qualcomm WLAN-related components. Public records here indicate the vulnerability occurs when a driver accesses ML IE memory and the offset is incremented beyond the ML IE length, potentially causing a DoS condition. Affected items i...

CVE-2024-33026

CVE-2024-33026 is a WLAN/Qualcomm-related issue described as a transient DoS when parsing probe and association response frames, triggered when the received frame length is less than the maximum size of the timestamp. The CVE entry lists a base score of 7.5 (Network attack, Low complexity, No use...

CVE-2024-33066

CVE-2024-33066 is described in connected sources as a memory corruption flaw caused by improper input validation in the WLAN Resource Manager. Affected component: WLAN Resource Manager on Qualcomm chipsets. The provided documents do not specify affected products/versions, exploitation status, or ...

CVE-2024-33024

CVE-2024-33024 affects Qualcomm WLAN/ML IE parsing. A beacon’s ML Information Element length field can exceed the ML IE length, triggering a transient Denial of Service during parsing. Documented impact is a DoS with CVSSv3.1 base score 7.5 (High). Exploitation is network-based but details on aff...

CVE-2024-33011

CVE-2024-33011 is described as a transient Denial-of-Service condition in the WLAN Host module (Qualcomm) when parsing the MBSSID Information Element (IE) from beacon frames with a zero-length MBSSID IE. Public sources in the provided documents identify the issue as related to Qualcomm WLAN, with...

CVE-2024-33018

CVE-2024-33018 affects Qualcomm WLAN components. It describes a transient Denial of Service when parsing the received TID-to-link mapping element in the TID-to-link mapping action frame. Affected product family/integration is Qualcomm WLAN; base CVSS v3.1 is 7.5 (High), Network attack vector, low...

CVE-2025-59609

The CVE-2025-59609 issue is a disclosure vulnerability affecting how advertisement frames are processed when MBSSID elements are malformed or too short. The root cause is in the processing path that handles MBSSID elements, which may allow information exposure. The CVSS 3.1 vector indicates netwo...

CVE-2024-43057

CVE-2024-43057 describes a memory corruption issue in Glink Linux when processing commands, affecting Qualcomm chipsets with a kernel component. The CVSS data indicates a HIGH impact with local access, low privileges required, and no user interaction. Connected sources corroborate a memory corrup...

CVE-2024-33019

CVE-2024-33019 is described as a Transient DoS in the WLAN host code when parsing the received TID-to-link mapping action frame. The vulnerability is listed under Qualcomm WLAN components with High severity (CVSS: 7.5, Network attack vector, low complexity, no privileges, no user interaction; imp...

CVE-2024-21473

CVE-2024-21473 affects Qualcomm chipsets via the Wi‑Fi SON LDB Service. The issue is memory corruption triggered while redirecting a log file to any location/name, due to improper input handling in the LDB service. Documented sources describe potential to execute code in the context of the device...

CVE-2024-33010

CVE-2024-33010 is a Use-After-Free in the WLAN Host path that causes a transient Denial of Service when parsing MBSSID IE fragments in beacon frames on Qualcomm chipsets. Affected component is WLAN in Qualcomm WLAN/Host stack; root cause is a use-after-free condition. Impact is Denial of Service ...

CVE-2024-33014

CVE-2024-33014 affects Qualcomm WLAN components; description: Transient Denial of Service occurs while parsing ESP Information Elements from beacon/probe response frames. CVSS v3.1 base score 7.5 (Network, Low complexity, No privileges, User interaction none; AvailabilityImpact: High). Connected ...

CVE-2024-33056

CVE-2024-33056 describes a memory corruption issue in Qualcomm components involving sequential allocation/access of an entry in the SMEM partition. Affected are Qualcomm closed‑source components and related security processor context; root cause is memory corruption from continuous SMEM entry han...

CVE-2024-38397

CVE-2024-38397 describes a transient denial-of-service in Qualcomm WLAN chipsets during parsing probe response and association response frames. Affected component is Qualcomm embedded/wireless chipset software handling WLAN host communications. Root cause is a parsing/buffer issue (buffer over-re...

CVE-2026-25289

CVE-2026-25289 describes memory corruption/stack-based overflow when processing Device Capability Extended attributes in NAN Service Discovery Frames with invalid length values in WLAN firmware. The issue is tied to the firmware image referenced in the August 2026 Qualcomm security bulletin; no e...

CVE-2024-33073

CVE-2024-33073 corresponds to a Buffer Over-read in WLAN Host Communication affecting Qualcomm chipsets. The vulnerability causes information disclosure during parsing of the BSS parameter change count and MLD capabilities fields within the ML IE. Affected product scope is not exhaustively listed...

CVE-2024-21467

CVE-2024-21467 is a WLAN information-disclosure issue arising from how beacon probe frames are processed during scan entry generation on the client side. Affected component: Qualcomm WLAN/host stack; root cause: out-of-bounds beacon probe frame handling leading to information disclosure with pote...

CVE-2024-21477

CVE-2024-21477 is linked to Qualcomm WLAN firmware with a Transient DoS issue that occurs while parsing a protected 802.11az FTM frame. Connected sources describe a concrete technical detail: a Buffer Over-read in WLAN firmware related to FTM frame parsing. The vulnerability is associated with Qu...

CVE-2025-27029

CVE-2025-27029 affects Qualcomm WLAN HAL (closed-source Qualcomm components). The issue is a transient Denial of Service caused by processing a tone measurement response buffer that is out of range. Metrics indicate network attack vector, low complexity, no privileges required, no user interactio...

CVE-2024-21459

CVE-2024-21459 impacts Qualcomm WLAN HOST circuitry (Qualcomm WLAN component) and is a information-disclosure flaw triggered by handling beacon or probe response frames in a Station (STA). The issue is categorized under WLAN with network attack vector and low complexity; CVSS metrics show confide...

CVE-2024-21462

CVE-2024-21462 describes a Transient DoS issue when loading the TA ELF file in Qualcomm closed‑source components (TZ Secure OS). Public sources assign a Local attacker vector with Low complexity and Low privileges required, potentially causing an availability impact described as HIGH. The CVE is ...

CVE-2024-43046

CVE-2024-43046 describes an information disclosure vulnerability affecting TZ Secure OS on Qualcomm chipsets, triggered by memory re-allocation where sensitive memory content may be exposed. The CVE notes a memory re-allocation issue but the provided documents do not specify affected product vers...

CVE-2024-23364

The CVE-2024-23364 issue is a Transient DoS in WLAN where processing of non-transmitted BSSID profile sub-elements in the MBSSID Information Element (IE) of OTA beacon frames can cause Denial-of-Service. Public sources indicate this vulnerability concerns Qualcomm WLAN firmware components and rel...

CVE-2025-21463

CVE-2025-21463 affects Qualcomm Snapdragon WLAN hosts, with a buffer over-read causing a transient Denial of Service during processing of the EHT operation IE in received beacon frames. The vulnerability originates in WLAN host communication, leading to a DoS condition (availability impact) with ...

CVE-2024-45556

CVE-2024-45556 describes an improper access control issue in TZ (TrustZone) firmware affecting Qualcomm chipsets, where the access configuration permits Linux to read key registers in the TCSR. This cryptographic vulnerability exposes confidential data due to unauthorized access to critical key r...

CVE-2025-21464

CVE-2025-21464 is documented in multiple sources as an information-disclosure (out-of-bounds read) issue affecting Qualcomm closed-source components, with the core vulnerability described as an information disclosure when reading data from an image using a specified offset and size. The CVE is li...

CVE-2026-25268

The CVE-2026-25268 issue is a stack-based buffer overflow in WLAN Host caused by memory corruption when processing invalid HT40 channel layouts during dynamic channel switching. Affects WLAN Host with a Local attack vector, requiring Low privileges and no user interaction, and with a changed scop...

CVE-2025-27057

CVE-2025-27057 is a Qualcomm WLAN/IEEE 802.11-related issue where a transient Denial of Service can occur while processing beacon frames that contain an invalid Information Element header length. The CVE entry lists a network attack vector with no user interaction and a high availability impact, ...

CVE-2025-47326

CVE-2025-47326 is described in the CVE ecosystem as a Transient DoS issue related to processing of command data during power control, with the CVE-List entry specifically noting a Buffer Over-read in the WLAN HAL. The connected entries indicate this affects Qualcomm components (including WLAN HAL...

CVE-2025-27064

CVE-2025-27064 denotes an information-disclosure vulnerability tied to Qualcomm chipsets/ Core Services, caused by a buffer over-read when registering commands from clients via diagHal. The CVE is listed in multiple sources (NVD/NVD-derived entries, Red Hat, CVE List) with a Common exposure in Qu...

CVE-2025-21482

CVE-2025-21482 describes a cryptographic issue in Qualcomm closed‑source components related to RSA PKCS padding decoding. The CVE is listed as High severity with Local attack vector, Low attack complexity, Low privileges required, and no user interaction, with impacts on Confidentiality and Integ...

CVE-2025-27065

CVE-2025-27065 is described across multiple feeds as a transient DoS in WLAN firmware caused by a buffer over-read when processing a frame with a malformed shared-key descriptor. Affected component: Qualcomm closed‑source WLAN firmware. The CVE is listed with high severity and indicates a DoS out...