CVE-2024-45569

CVE-2024-45569 describes memory corruption when parsing the ML IE caused by invalid frame content in Qualcomm chipsets (Qualcomm Snapdragon Auto related). Connected sources corroborate a memory corruption condition with potential remote impact stemming from malformed ML Information Elements. Conc...

CVE-2024-33063

CVE-2024-33063 affects Qualcomm Snapdragon Auto components. The issue arises during ML IE parsing: a beacon with a common info length greater than the ML IE interior triggers a transient DoS due to an out-of-bounds read/write in util_add_mlie_for_prb_rsp_gen(). Connected sources (PT-2024-25101) d...

CVE-2023-33053

CVE-2023-33053 maps to a kernel memory corruption issue in Qualcomm components caused by a lack of bounds checking in qcom mdt read metadata() within the Qualcomm driver. The vulnerability is described as memory corruption during metadata parsing with authoritative entries from PT-2023-7826 and r...

CVE-2024-21457

CVE-2024-21457 corresponds to a buffer over-read causing information disclosure in WLAN host communication when handling Multi-link IE in beacon frames. Multiple connected sources tie it to Qualcomm WLAN components and Qualcomm/Pixel advisories. The Pixel bulletin lists CVE-2024-21457 under Qualc...

CVE-2024-23368

CVE-2024-23368 is a memory corruption issue in Qualcomm’s embedded platform concerning the SMEM Partition Handler. The vulnerability arises when allocating and accessing an entry in an SMEM partition, effectively a classic buffer copy without proper input size checking, which can lead to memory c...

CVE-2024-45558

The CVE-2024-45558 entry describes a Transient Denial of Service in Qualcomm WLAN components. The vulnerability arises when the driver parses the per-STA profile Information Element and accesses the EXTN element ID without validating the IE length, enabling a DoS condition. Sources across multipl...

CVE-2024-45571

CVE-2024-45571 affects Qualcomm WLAN components. The issue is memory corruption that occurs when stopping the WLAN interface after processing a WMI command, enabling local attacker with low privileges and no user interaction to impact confidentiality, integrity, and availability (all High). No pu...

CVE-2024-49839

CVE-2024-49839 - Summary (mode C) Root cause: Memory corruption during management frame processing caused by a mismatch in the T2LM information element, affecting Qualcomm WLAN/capability elements. What is affected: Qualcomm chipsets with WLAN functionality that process management frames incorpor...

CVE-2024-33048

Technical details about CVE-2024-33048 are not provided in the supplied documents. The records only reiterate a transient DOS during TID-to-link mapping parsing. Monitor for updates from Qualcomm/Red Hat/Android advisories.

CVE-2024-33050

CVE-2024-33050 affects Qualcomm WLAN host components and describes a Transient Denial of Service during MBSSID processing when constructing new Information Elements in beacon/probe frames. Root cause is a missing/improper IE length check; impact is DoS with network access, no confidentiality/inte...

CVE-2025-21435

CVE-2025-21435 : Qualcomm WLAN/ Snapdragon component vulnerability causing a transient Denial-of-Service while parsing extended Information Elements in a beacon. The issue is described as a transient DoS that can occur during beacon IE parsing; exploitation status is not detailed in the provided ...

CVE-2024-21458

CVE-2024-21458 affects Qualcomm WLAN/embedded platform software and is described as information disclosure due to a buffer over-read in handling the SA query action frame (Qualcomm WLAN component). Public references identify it as a WLAN HOST buffer over-read with potential information disclosure...

CVE-2023-33028

CVE-2023-33028 describes a memory corruption vulnerability in Qualcomm WLAN firmware during a pmk cache memory copy, classified as buffer copy without checking size. Public records indicate potential remote code execution with high impact on confidentiality, integrity, and availability (CVSS 3.1:...

CVE-2024-33049

CVE-2024-33049 is a Qualcomm WLAN vulnerability described as a transient Denial of Service caused by a buffer over-read when parsing a noninheritance IE of an Extension element in a beacon frame with IE length 2. Public sources classify the issue as a WLAN-related vulnerability with High severity...

CVE-2024-33057

CVE-2024-33057 concerns Qualcomm WLAN components and describes a Transient Denial of Service caused by parsing the multi-link element Control field when a common information length check is missing before updating the location. The primary documentation lists a High impact (CVSSv3.1: 7.5) with a ...

CVE-2023-33082

CVE-2023-33082 describes memory corruption when a WLAN Assoc Request includes a BTM Query or BTM Response that contains an MBO IE, affecting Qualcomm chipsets per multiple sources. The CVSS v3.1 base score is 9.8 (CRITICAL), with network attack vector, no user interaction, and high impact to conf...

CVE-2024-21466

CVE-2024-21466 refers to an information-disclosure vulnerability in Qualcomm WLAN host communication. Affected: Qualcomm chipsets with WLAN subcomponents; issue arises while parsing the length of sub-IE during new IE generation, enabling partial information disclosure. Public sources (including N...

CVE-2024-33016

CVE-2024-33016 pertains to Siemens SCALANCE W700, where the vulnerability is described as memory corruption that occurs when an invalid firehose patch command is invoked. The Tenable Nessus plugin explicitly identifies this CVE in the context of Siemens SCALANCE W700 and notes the affected asset ...

CVE-2023-33072

CVE-2023-33072 is a memory corruption issue affecting Core when processing control functions, with concrete mappings in connected records to Qualcomm closed‑source components and related “Core” memory‑corruption vectors. Public references describe the issue as memory corruption in Core and, in so...

CVE-2024-33015

CVE-2024-33015 describes a transient DoS in the WLAN host stack during parsing of a SCAN RNR Information Element. Root cause: when bytes from the AP cause the size of the last IE parameter to be smaller than the neighboring report, a DoS can occur. Documented references indicate this affects Qual...

CVE-2024-33066

CVE-2024-33066 is described in connected sources as a memory corruption flaw caused by improper input validation in the WLAN Resource Manager. Affected component: WLAN Resource Manager on Qualcomm chipsets. The provided documents do not specify affected products/versions, exploitation status, or ...

CVE-2024-33013

CVE-2024-33013 describes a transient denial-of-service affecting Qualcomm WLAN-related components. Public records here indicate the vulnerability occurs when a driver accesses ML IE memory and the offset is incremented beyond the ML IE length, potentially causing a DoS condition. Affected items i...

CVE-2024-33026

CVE-2024-33026 is a WLAN/Qualcomm-related issue described as a transient DoS when parsing probe and association response frames, triggered when the received frame length is less than the maximum size of the timestamp. The CVE entry lists a base score of 7.5 (Network attack, Low complexity, No use...

CVE-2023-43536

Technical details for CVE-2023-43536 are not publicly provided in the supplied documents. No confirmed affected products, versions, or fixes are disclosed here; monitor official advisories for updates.

CVE-2023-33045

CVE-2023-33045 refers to a memory corruption vulnerability in WLAN firmware when parsing a NAN management frame carrying an S3 attribute, affecting Qualcomm WLAN firmware components. The issue is specified as a memory corruption failure in the firmware during NAN frame handling, with a CVSS v3.1 ...

CVE-2024-33012

CVE-2024-33012 describes a transient Denial of Service affecting Qualcomm WLAN Host code, triggered while parsing multiple MBSSID IEs in beacon frames when a tag length is non-zero and the beacon ends. The CVSS v3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) yields a base score of 7.5 (HIGH) wi...

CVE-2024-33024

CVE-2024-33024 affects Qualcomm WLAN/ML IE parsing. A beacon’s ML Information Element length field can exceed the ML IE length, triggering a transient Denial of Service during parsing. Documented impact is a DoS with CVSSv3.1 base score 7.5 (High). Exploitation is network-based but details on aff...

CVE-2023-43511

CVE-2023-43511 describes a transient DoS in WLAN firmware when parsing an IPv6 extension header for a packet whose next header is IPPROTO_NONE. The issue is reported across multiple sources (Qualcomm advisory context, Red Hat, NVD) and is associated with Qualcomm/WLAN firmware components; the vul...

CVE-2023-33027

CVE-2023-33027 denotes a transient Denial of Service in WLAN firmware when parsing RSN IEs. Affected are Qualcomm WLAN components and related closed-source firmware; the NVD entry lists Network attack vector, no user interaction, low attack complexity, but availability impact is high (CVE-2023-33...

CVE-2023-28578

CVE-2023-28578 involves memory corruption in Core Services during the removal of a single event listener. Connected sources reference Siemens SCALANCE W700 through the Nessus plugin stating this CVE maps to that product and describing the memory corruption in Core Services when removing an event ...

CVE-2024-33010

CVE-2024-33010 is a Use-After-Free in the WLAN Host path that causes a transient Denial of Service when parsing MBSSID IE fragments in beacon frames on Qualcomm chipsets. Affected component is WLAN in Qualcomm WLAN/Host stack; root cause is a use-after-free condition. Impact is Denial of Service ...

CVE-2024-33019

CVE-2024-33019 is described as a Transient DoS in the WLAN host code when parsing the received TID-to-link mapping action frame. The vulnerability is listed under Qualcomm WLAN components with High severity (CVSS: 7.5, Network attack vector, low complexity, no privileges, no user interaction; imp...

CVE-2024-33025

CVE-2024-33025 is a Transient Denial of Service in the WLAN Host path affecting Qualcomm WLAN components, triggered while parsing the BSS parameter change count or MLD capabilities fields within the ML Information Element. The NVD entry notes a Network attack vector with CVSS v3.1 base score 7.5 ...

CVE-2024-43057

CVE-2024-43057 describes a memory corruption issue in Glink Linux when processing commands, affecting Qualcomm chipsets with a kernel component. The CVSS data indicates a HIGH impact with local access, low privileges required, and no user interaction. Connected sources corroborate a memory corrup...

CVE-2024-21473

CVE-2024-21473 affects Qualcomm chipsets via the Wi‑Fi SON LDB Service. The issue is memory corruption triggered while redirecting a log file to any location/name, due to improper input handling in the LDB service. Documented sources describe potential to execute code in the context of the device...

CVE-2023-33105

CVE-2023-33105 describes a transient DoS in Qualcomm WLAN Host and Firmware when a large number of open authentication frames with an invalid transaction sequence number are sent. The primary documents confirm affected component as WLAN Host and Firmware and note the DoS impact; an exploit reposi...

CVE-2024-33011

CVE-2024-33011 is described as a transient Denial-of-Service condition in the WLAN Host module (Qualcomm) when parsing the MBSSID Information Element (IE) from beacon frames with a zero-length MBSSID IE. Public sources in the provided documents identify the issue as related to Qualcomm WLAN, with...

CVE-2024-33014

CVE-2024-33014 affects Qualcomm WLAN components; description: Transient Denial of Service occurs while parsing ESP Information Elements from beacon/probe response frames. CVSS v3.1 base score 7.5 (Network, Low complexity, No privileges, User interaction none; AvailabilityImpact: High). Connected ...

CVE-2024-33018

CVE-2024-33018 affects Qualcomm WLAN components. It describes a transient Denial of Service when parsing the received TID-to-link mapping element in the TID-to-link mapping action frame. Affected product family/integration is Qualcomm WLAN; base CVSS v3.1 is 7.5 (High), Network attack vector, low...

CVE-2023-43549

CVE-2023-43549 describes memory corruption in FTM TPC when processing the TPC target power table. Multiple entries (NVD, Qualcomm bulletins, CVE lists, and third‑party advisories) link this to Qualcomm chipsets and the WLAN/FTM TPC stack, with the issue categorized under a stack-based overflow in...

CVE-2023-33026

CVE-2023-33026 describes a Transient Denial of Service in WLAN firmware when parsing a NAN management frame. The CVE entry lists a high severity (CVSS 7.5) with network access and low attack complexity. Public references show the issue is discussed across multiple feeds (NVD, Red Hat, PRION/Qualc...

CVE-2023-24852

CVE-2023-24852 describes memory corruption in the Core component when a user performs secure memory access during modem image loading. The vulnerability is local and impacts confidentiality, integrity, and availability (per CVSS metrics with LOCAL access, LOW attack complexity, NONE user interact...

CVE-2023-28585

CVE-2023-28585 is a memory corruption issue in the TZ Secure OS/Tee Kernel triggered when loading an ELF segment. Multiple connected sources identify the root cause as memory corruption within the TEE Kernel during ELF segment loading, with the TZ Secure OS context (Qualcomm components) cited in ...

CVE-2023-33056

CVE-2023-33056 is a Transient Denial of Service in Qualcomm WLAN firmware. The root cause is a fault in the WLAN firmware when processing a beacon containing the T2LM Information Element, leading to an unreliable DoS condition. The impact is high availability disruption (DoS) on affected WLAN fir...

CVE-2023-33109

CVE-2023-33109 affects Qualcomm chipsets (and likely WLAN-related components) and describes a transient Denial of Service when processing a WMI P2P listen start command (0xD00A) issued from the host. The entry is corroborated by NVD/Red Hat/Android bulletin references; CVSS v3.1 vector is AV:N/AC...

CVE-2023-43523

CVE-2023-43523 relates to a transient Denial of Service in Qualcomm WLAN firmware when processing 11AZ RTT management action frames received over OTA. Affected are Qualcomm closed‑source WLAN components; CVSSv3.1 base score 7.5 (Network, Low attack complexity, No privileges, High impact on availa...

CVE-2023-33062

CVE-2023-33062 covers a Transient DoS in Qualcomm WLAN firmware when parsing a BTM request. Affected component is Qualcomm WLAN firmware (closed‑source) in Qualcomm chipsets. The CVE is documented with a CVSS v3.1 base score of 7.5 (High) with network attack vector and low attack complexity, no p...

CVE-2023-33097

CVE-2023-33097 is described as a Transient DOS in WLAN Firmware when processing a FTMR frame. Connected sources (e.g., CVE List entry) indicate the root cause as a Buffer Over-read in the WLAN Firmware. Public records in this set reference Qualcomm chipset components and denote a High severity (C...

CVE-2024-23363

CVE-2024-23363 describes a transient Denial of Service in WLAN firmware when processing an improperly formatted Fine Time Measurement (FTM) management frame. The vulnerability is associated with Qualcomm closed‑source WLAN components and is rated CVSS v3.1 base 7.5 (Network attack, low complexity...

CVE-2023-33081

CVE-2023-33081 is a Qualcomm WLAN firmware issue described as a buffer over-read in a closed-source WLAN component, causing a transient Denial of Service during OTA broadcast when converting Target Wake Time (TWT) frame parameters. The impact is a DoS that is transient and tied to the OTA TWT par...