CVE-2024-45569

CVE-2024-45569 describes memory corruption when parsing the ML IE caused by invalid frame content in Qualcomm chipsets (Qualcomm Snapdragon Auto related). Connected sources corroborate a memory corruption condition with potential remote impact stemming from malformed ML Information Elements. Conc...

CVE-2024-21457

CVE-2024-21457 corresponds to a buffer over-read causing information disclosure in WLAN host communication when handling Multi-link IE in beacon frames. Multiple connected sources tie it to Qualcomm WLAN components and Qualcomm/Pixel advisories. The Pixel bulletin lists CVE-2024-21457 under Qualc...

CVE-2023-43552

CVE-2023-43552 corresponds to a memory corruption flaw in Qualcomm WLAN chipsets when processing MBSSID beacons that contain multiple IE subelements. The vulnerability affects the WLAN subsystem and is rooted in memory handling during MBSSID beacon processing, with CVSS v3.1 base metrics (Network...

CVE-2023-43553

CVE-2023-43553 is a memory corruption issue in Qualcomm WLAN related to parsing beacon/probe frames when an AP sends more supported links in the MLIE. The vulnerability affects the WLAN stack (Qualcomm components) and is listed with a high severity (CVSS 9.8) and network attack vector, with no ex...

CVE-2024-45558

The CVE-2024-45558 entry describes a Transient Denial of Service in Qualcomm WLAN components. The vulnerability arises when the driver parses the per-STA profile Information Element and accesses the EXTN element ID without validating the IE length, enabling a DoS condition. Sources across multipl...

CVE-2024-45571

CVE-2024-45571 affects Qualcomm WLAN components. The issue is memory corruption that occurs when stopping the WLAN interface after processing a WMI command, enabling local attacker with low privileges and no user interaction to impact confidentiality, integrity, and availability (all High). No pu...

CVE-2024-23368

CVE-2024-23368 is a memory corruption issue in Qualcomm’s embedded platform concerning the SMEM Partition Handler. The vulnerability arises when allocating and accessing an entry in an SMEM partition, effectively a classic buffer copy without proper input size checking, which can lead to memory c...

CVE-2024-33050

CVE-2024-33050 affects Qualcomm WLAN host components and describes a Transient Denial of Service during MBSSID processing when constructing new Information Elements in beacon/probe frames. Root cause is a missing/improper IE length check; impact is DoS with network access, no confidentiality/inte...

CVE-2024-49839

CVE-2024-49839 - Summary (mode C) Root cause: Memory corruption during management frame processing caused by a mismatch in the T2LM information element, affecting Qualcomm WLAN/capability elements. What is affected: Qualcomm chipsets with WLAN functionality that process management frames incorpor...

CVE-2025-21435

CVE-2025-21435 : Qualcomm WLAN/ Snapdragon component vulnerability causing a transient Denial-of-Service while parsing extended Information Elements in a beacon. The issue is described as a transient DoS that can occur during beacon IE parsing; exploitation status is not detailed in the provided ...

CVE-2024-33048

Technical details about CVE-2024-33048 are not provided in the supplied documents. The records only reiterate a transient DOS during TID-to-link mapping parsing. Monitor for updates from Qualcomm/Red Hat/Android advisories.

CVE-2024-21458

CVE-2024-21458 affects Qualcomm WLAN/embedded platform software and is described as information disclosure due to a buffer over-read in handling the SA query action frame (Qualcomm WLAN component). Public references identify it as a WLAN HOST buffer over-read with potential information disclosure...

CVE-2024-33049

CVE-2024-33049 is a Qualcomm WLAN vulnerability described as a transient Denial of Service caused by a buffer over-read when parsing a noninheritance IE of an Extension element in a beacon frame with IE length 2. Public sources classify the issue as a WLAN-related vulnerability with High severity...

CVE-2024-33057

CVE-2024-33057 concerns Qualcomm WLAN components and describes a Transient Denial of Service caused by parsing the multi-link element Control field when a common information length check is missing before updating the location. The primary documentation lists a High impact (CVSSv3.1: 7.5) with a ...

CVE-2024-21466

CVE-2024-21466 refers to an information-disclosure vulnerability in Qualcomm WLAN host communication. Affected: Qualcomm chipsets with WLAN subcomponents; issue arises while parsing the length of sub-IE during new IE generation, enabling partial information disclosure. Public sources (including N...

CVE-2023-33072

CVE-2023-33072 is a memory corruption issue affecting Core when processing control functions, with concrete mappings in connected records to Qualcomm closed‑source components and related “Core” memory‑corruption vectors. Public references describe the issue as memory corruption in Core and, in so...

CVE-2024-33016

CVE-2024-33016 pertains to Siemens SCALANCE W700, where the vulnerability is described as memory corruption that occurs when an invalid firehose patch command is invoked. The Tenable Nessus plugin explicitly identifies this CVE in the context of Siemens SCALANCE W700 and notes the affected asset ...

CVE-2024-33015

CVE-2024-33015 describes a transient DoS in the WLAN host stack during parsing of a SCAN RNR Information Element. Root cause: when bytes from the AP cause the size of the last IE parameter to be smaller than the neighboring report, a DoS can occur. Documented references indicate this affects Qual...

CVE-2023-43533

CVE-2023-43533 concerns a transient DoS in WLAN firmware on Qualcomm chipsets when a received beacon’s length is shorter than the 802.11 beacon frame. Multiple sources document the issue with the same description, indicating the WLAN firmware is the affected component and the root cause relates t...

CVE-2024-33025

CVE-2024-33025 is a Transient Denial of Service in the WLAN Host path affecting Qualcomm WLAN components, triggered while parsing the BSS parameter change count or MLD capabilities fields within the ML Information Element. The NVD entry notes a Network attack vector with CVSS v3.1 base score 7.5 ...

CVE-2024-33012

CVE-2024-33012 describes a transient Denial of Service affecting Qualcomm WLAN Host code, triggered while parsing multiple MBSSID IEs in beacon frames when a tag length is non-zero and the beacon ends. The CVSS v3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) yields a base score of 7.5 (HIGH) wi...

CVE-2024-33013

CVE-2024-33013 describes a transient denial-of-service affecting Qualcomm WLAN-related components. Public records here indicate the vulnerability occurs when a driver accesses ML IE memory and the offset is incremented beyond the ML IE length, potentially causing a DoS condition. Affected items i...

CVE-2024-33026

CVE-2024-33026 is a WLAN/Qualcomm-related issue described as a transient DoS when parsing probe and association response frames, triggered when the received frame length is less than the maximum size of the timestamp. The CVE entry lists a base score of 7.5 (Network attack, Low complexity, No use...

CVE-2024-33066

CVE-2024-33066 is described in connected sources as a memory corruption flaw caused by improper input validation in the WLAN Resource Manager. Affected component: WLAN Resource Manager on Qualcomm chipsets. The provided documents do not specify affected products/versions, exploitation status, or ...

CVE-2023-43536

Technical details for CVE-2023-43536 are not publicly provided in the supplied documents. No confirmed affected products, versions, or fixes are disclosed here; monitor official advisories for updates.

CVE-2024-33024

CVE-2024-33024 affects Qualcomm WLAN/ML IE parsing. A beacon’s ML Information Element length field can exceed the ML IE length, triggering a transient Denial of Service during parsing. Documented impact is a DoS with CVSSv3.1 base score 7.5 (High). Exploitation is network-based but details on aff...

CVE-2024-33011

CVE-2024-33011 is described as a transient Denial-of-Service condition in the WLAN Host module (Qualcomm) when parsing the MBSSID Information Element (IE) from beacon frames with a zero-length MBSSID IE. Public sources in the provided documents identify the issue as related to Qualcomm WLAN, with...

CVE-2024-33018

CVE-2024-33018 affects Qualcomm WLAN components. It describes a transient Denial of Service when parsing the received TID-to-link mapping element in the TID-to-link mapping action frame. Affected product family/integration is Qualcomm WLAN; base CVSS v3.1 is 7.5 (High), Network attack vector, low...

CVE-2025-59609

The CVE-2025-59609 issue is a disclosure vulnerability affecting how advertisement frames are processed when MBSSID elements are malformed or too short. The root cause is in the processing path that handles MBSSID elements, which may allow information exposure. The CVSS 3.1 vector indicates netwo...

CVE-2023-28578

CVE-2023-28578 involves memory corruption in Core Services during the removal of a single event listener. Connected sources reference Siemens SCALANCE W700 through the Nessus plugin stating this CVE maps to that product and describing the memory corruption in Core Services when removing an event ...

CVE-2024-43057

CVE-2024-43057 describes a memory corruption issue in Glink Linux when processing commands, affecting Qualcomm chipsets with a kernel component. The CVSS data indicates a HIGH impact with local access, low privileges required, and no user interaction. Connected sources corroborate a memory corrup...

CVE-2023-33105

CVE-2023-33105 describes a transient DoS in Qualcomm WLAN Host and Firmware when a large number of open authentication frames with an invalid transaction sequence number are sent. The primary documents confirm affected component as WLAN Host and Firmware and note the DoS impact; an exploit reposi...

CVE-2024-33019

CVE-2024-33019 is described as a Transient DoS in the WLAN host code when parsing the received TID-to-link mapping action frame. The vulnerability is listed under Qualcomm WLAN components with High severity (CVSS: 7.5, Network attack vector, low complexity, no privileges, no user interaction; imp...

CVE-2024-21473

CVE-2024-21473 affects Qualcomm chipsets via the Wi‑Fi SON LDB Service. The issue is memory corruption triggered while redirecting a log file to any location/name, due to improper input handling in the LDB service. Documented sources describe potential to execute code in the context of the device...

CVE-2024-33010

CVE-2024-33010 is a Use-After-Free in the WLAN Host path that causes a transient Denial of Service when parsing MBSSID IE fragments in beacon frames on Qualcomm chipsets. Affected component is WLAN in Qualcomm WLAN/Host stack; root cause is a use-after-free condition. Impact is Denial of Service ...

CVE-2024-33014

CVE-2024-33014 affects Qualcomm WLAN components; description: Transient Denial of Service occurs while parsing ESP Information Elements from beacon/probe response frames. CVSS v3.1 base score 7.5 (Network, Low complexity, No privileges, User interaction none; AvailabilityImpact: High). Connected ...

CVE-2023-43549

CVE-2023-43549 describes memory corruption in FTM TPC when processing the TPC target power table. Multiple entries (NVD, Qualcomm bulletins, CVE lists, and third‑party advisories) link this to Qualcomm chipsets and the WLAN/FTM TPC stack, with the issue categorized under a stack-based overflow in...

CVE-2023-43523

CVE-2023-43523 relates to a transient Denial of Service in Qualcomm WLAN firmware when processing 11AZ RTT management action frames received over OTA. Affected are Qualcomm closed‑source WLAN components; CVSSv3.1 base score 7.5 (Network, Low attack complexity, No privileges, High impact on availa...

CVE-2024-23363

CVE-2024-23363 describes a transient Denial of Service in WLAN firmware when processing an improperly formatted Fine Time Measurement (FTM) management frame. The vulnerability is associated with Qualcomm closed‑source WLAN components and is rated CVSS v3.1 base 7.5 (Network attack, low complexity...

CVE-2024-33056

CVE-2024-33056 describes a memory corruption issue in Qualcomm components involving sequential allocation/access of an entry in the SMEM partition. Affected are Qualcomm closed‑source components and related security processor context; root cause is memory corruption from continuous SMEM entry han...

CVE-2023-43539

CVE-2023-43539 describes a transient Denial of Service in WLAN firmware when processing an improperly formatted 802.11az Fine Time Measurement frame. Likely affects Qualcomm WLAN firmware components; root cause is a buffer over-read/processing error in FTM frame handling. Impact is DoS (availabil...

CVE-2023-43522

CVE-2023-43522 is linked to Siemens SCALANCE W700: a NULL pointer dereference in the key unwrapping routine when the encrypted key is empty or NULL, causing a transient denial of service (crash). Details in connected plugin/NVD entries show a HIGH severity (CVSS v3.1: 7.5) with network attack vec...

CVE-2024-38397

CVE-2024-38397 describes a transient denial-of-service in Qualcomm WLAN chipsets during parsing probe response and association response frames. Affected component is Qualcomm embedded/wireless chipset software handling WLAN host communications. Root cause is a parsing/buffer issue (buffer over-re...

CVE-2024-21482

CVE-2024-21482 : Memory corruption during the secure boot process in the Linux boot loader when the bootm command is used, bypassing authentication of the kernel/rootfs image. Affected component is the boot loader used in Qualcomm/Linux environments; the vulnerability enables potential unauthoriz...

CVE-2026-25289

CVE-2026-25289 describes memory corruption/stack-based overflow when processing Device Capability Extended attributes in NAN Service Discovery Frames with invalid length values in WLAN firmware. The issue is tied to the firmware image referenced in the August 2026 Qualcomm security bulletin; no e...

CVE-2024-33073

CVE-2024-33073 corresponds to a Buffer Over-read in WLAN Host Communication affecting Qualcomm chipsets. The vulnerability causes information disclosure during parsing of the BSS parameter change count and MLD capabilities fields within the ML IE. Affected product scope is not exhaustively listed...

CVE-2024-21467

CVE-2024-21467 is a WLAN information-disclosure issue arising from how beacon probe frames are processed during scan entry generation on the client side. Affected component: Qualcomm WLAN/host stack; root cause: out-of-bounds beacon probe frame handling leading to information disclosure with pote...

CVE-2024-21477

CVE-2024-21477 is linked to Qualcomm WLAN firmware with a Transient DoS issue that occurs while parsing a protected 802.11az FTM frame. Connected sources describe a concrete technical detail: a Buffer Over-read in WLAN firmware related to FTM frame parsing. The vulnerability is associated with Qu...

CVE-2025-27029

CVE-2025-27029 affects Qualcomm WLAN HAL (closed-source Qualcomm components). The issue is a transient Denial of Service caused by processing a tone measurement response buffer that is out of range. Metrics indicate network attack vector, low complexity, no privileges required, no user interactio...

CVE-2024-21459

CVE-2024-21459 impacts Qualcomm WLAN HOST circuitry (Qualcomm WLAN component) and is a information-disclosure flaw triggered by handling beacon or probe response frames in a Station (STA). The issue is categorized under WLAN with network attack vector and low complexity; CVSS metrics show confide...