CVE-2022-33243

The CVE-2022-33243 entry describes memory corruption due to improper access control in Qualcomm IPC. Public records in this set identify Qualcomm IPC as the affected component and characterize the vulnerability as memory corruption arising from access-control weaknesses, with high impact on confi...

CVE-2023-22387

CVE-2023-22387 describes an arbitrary memory overwrite when a VM is compromised during a TX write, causing memory corruption. The most concrete details in the connected docs are: (1) it is listed under Qualcomm components, specifically in the Qualcomm kernel area, with a high impact and Local att...

CVE-2021-1976

CVE-2021-1976 is a Qualcomm WLAN use-after-free vulnerability caused by improper validation of a P2P device address in PD Request frames. It affects Qualcomm/ Snapdragon WLAN components; exploited via network, with a CVSS v3.1 base score of 9.8 (CRITICAL). Public details reference Qualcomm’s Augu...

CVE-2021-1972

CVE-2021-1972 is a Qualcomm WLAN host vulnerability described as a buffer overflow caused by improper validation of device types during P2P search in Snapdragon platforms (Auto/Compute/Connectivity/…/Wired Networking). Affected products are Qualcomm/Snapdragon WLAN components; CVSS v3.1 base scor...

CVE-2021-30325

CVE-2021-30325 is a Qualcomm/Qualcomm-derived vulnerability affecting Snapdragon family components (Auto, Compute, Consumer IoT, Industrial IoT, Mobile, Voice & Music, Wearables, Wired Infrastructure and Networking). The root cause is an input validation/resource allocation flaw leading to out-of...

CVE-2020-11301

CVE-2020-11301 describes improper authentication of unencrypted plaintext Wi‑Fi frames within encrypted networks, enabling information disclosure in Snapdragon platforms (Snapdragon Auto, Compute, Connectivity, Consumer Electronics Connectivity, Consumer IOT, Industrial IOT, IoT, Mobile, Voice & ...

CVE-2023-33028

CVE-2023-33028 describes a memory corruption vulnerability in Qualcomm WLAN firmware during a pmk cache memory copy, classified as buffer copy without checking size. Public records indicate potential remote code execution with high impact on confidentiality, integrity, and availability (CVSS 3.1:...

CVE-2020-11267

CVE-2020-11267 involves a stack out-of-bounds write during the setup of a cipher device when the IV length exceeds the maximum limit on Qualcomm/Snapdragon devices (Auto/Compute/Connectivity/Consumer IoT/Industrial IOT/Mobile/Voice & Music/Wearables/Wired Infrastructure). The vulnerability affect...

CVE-2023-21628

CVE-2023-21628 describes a memory corruption (classic buffer overflow) in the WLAN HAL of Qualcomm chipsets when processing WMI-UTF or FTM TLV1 commands. The CVE is listed as a buffer copy without checking input size, leading to potential data corruption and high impact. Connected sources identif...

CVE-2023-28563

CVE-2023-28563 affects IOE Firmware in Qualcomm chipsets. The root cause is information disclosure when processing WMI commands in the firmware, leading to potentially exposed data (confidentiality impact high). The issue is listed in Android Pixel bulletin as a closed‑source component vulnerabil...

CVE-2023-33082

CVE-2023-33082 describes memory corruption when a WLAN Assoc Request includes a BTM Query or BTM Response that contains an MBO IE, affecting Qualcomm chipsets per multiple sources. The CVSS v3.1 base score is 9.8 (CRITICAL), with network attack vector, no user interaction, and high impact to conf...

CVE-2022-40514

CVE-2022-40514 concerns memory corruption in WLAN firmware when processing the CCKM IE in a reassoc response frame, caused by a buffer copy that does not validate input size. The vulnerability is associated with Qualcomm’s WLAN firmware; CVSS v3.1 base score is PRACTICALLY high: 9.8 (Network atta...

CVE-2022-40532

CVE-2022-40532 affects Qualcomm WLAN/WMI command handling, where memory corruption can occur due to an integer overflow or wraparound when sending a WMI command from the host to the target. The issue is tied to Qualcomm chipset/WLAN firmware and is described as memory corruption with potential hi...

CVE-2022-40512

CVE-2022-40512 describes a transient DoS in WLAN firmware caused by a buffer over-read while processing probe responses or beacons. The vulnerability affects Qualcomm WLAN firmware/module (closed-source components) and is characterized by network-based exposure with no user interaction. The CVSS ...

CVE-2020-11280

Summary : CVE-2020-11280 describes a DoS vulnerability in Qualcomm/ Snapdragon components due to improper error handling when processing a Fine Timing Measurement (FTMR) frame with reserved bits in the FTM parameter IE. Affected products/areas : Snapdragon Auto, Snapdragon Compute, Snapdragon Con...

CVE-2022-40531

CVE-2022-40531: Memory corruption in WLAN due to an incorrect type cast when sending WMI_SCAN_SCH_PRIO_TBL_CMDID. Documented CVSSv3.1 base score 7.8 (NVD) / 8.4 (Qualcomm bulletin) with Local, Low-Privilege, No-User-Interaction access and High impact to confidentiality, integrity, and availabilit...

CVE-2020-11270

CVE-2020-11270 : A DoS condition in Qualcomm Snapdragon firmware (across Snapdragon Auto, Compute, Connectivity, and related Snapdragon platforms) arises when an RTT responder consistently rejects all FTMR by sending FTM1 with a failure status in the FTM parameter IE. This vulnerability is descri...

CVE-2021-30313

CVE-2021-30313 describes a use-after-free condition in Qualcomm Snapdragon firmware related to a race condition when creating and deleting folders, affecting multiple Snapdragon lines (Auto, Compute, Connectivity, Consumer IoT, Industrial IoT, Mobile, Voice & Music, Wearables, and related Wired I...

CVE-2023-21661

Technical details about CVE-2023-21661, including affected products, versions, and fixes, are not provided in the supplied documents. Monitor for updates in linked bulletins.

CVE-2022-25722

CVE-2022-25722 describes information exposure in DSP services due to improper handling of freeing memory. Affected: DSP-related components (Qualcomm/DP S services) as per CVE entry and Android Pixel bulletin referencing this CVE under Qualcomm kernel subcomponent. Root cause: improper memory mana...

CVE-2022-33271

CVE-2022-33271 describes an information disclosure caused by a buffer over-read in WLAN when parsing NMF frames. The vulnerability is associated with Qualcomm’s WLAN/NMF handling; the available sources in the provided documents do not specify affected product versions, exact user impact, or remed...

CVE-2023-28569

CVE-2023-28569 is described across multiple sources as an information disclosure in the WLAN HAL when commands are processed via WMI interfaces. The vulnerability is associated with Qualcomm WLAN HAL components and affects Qualcomm chipsets; the confidentiality impact is High, with an attacker re...

CVE-2020-11235

CVE-2020-11235 describes a buffer overflow that can occur while parsing a unified command due to insufficient input validation in Qualcomm Snapdragon components (Auto, Compute, Connectivity, etc.). The issue is triggered locally and can impact confidentiality, integrity, and availability, as indi...

CVE-2022-33275

CVE-2022-33275 describes memory corruption due to improper validation of an array index in the WLAN HAL when lm_itemNum is out of range. The issue affects Qualcomm chipsets’ WLAN HAL and is caused by out-of-bounds handling of item indices, leading to potential memory corruption. Public details in...

CVE-2023-28544

CVE-2023-28544: Memory corruption in WLAN while sending a transmit command from HLOS to UTF handlers. Documented as a Qualcomm closed‑source component issue with a high impact (CVSS 7.8, Local, Low-Privilege attacker, No user interaction). Connected sources confirm the vulnerability involves WLAN...

CVE-2022-33306

CVE-2022-33306 affects the WLAN/IEEE processing path in Qualcomm chipsets, where a transient DoS arises from a buffer over-read while handling an incoming management frame with incorrectly filled IEs. Public references consolidate this as a buffer-over-read in WLAN leading to Denial of Service. E...

CVE-2023-28578

CVE-2023-28578 involves memory corruption in Core Services during the removal of a single event listener. Connected sources reference Siemens SCALANCE W700 through the Nessus plugin stating this CVE maps to that product and describing the memory corruption in Core Services when removing an event ...

CVE-2023-43511

CVE-2023-43511 describes a transient DoS in WLAN firmware when parsing an IPv6 extension header for a packet whose next header is IPPROTO_NONE. The issue is reported across multiple sources (Qualcomm advisory context, Red Hat, NVD) and is associated with Qualcomm/WLAN firmware components; the vul...

CVE-2023-21658

CVE-2023-21658 is a reported transient Denial of Service affecting WLAN firmware, triggered while processing received beacon or probe response frames. The CVE is characterized in sources as a WLAN firmware issue with an underlying buffer over-read leading to DoS. Affected/related disclosures refe...

CVE-2023-28557

CVE-2023-28557 affects Qualcomm WLAN HAL, causing memory corruption when processing command parameters from an untrusted WMI payload. The issue is described as a local vulnerability with low attack complexity and exploit prerequisites, but with high impact to confidentiality, integrity, and avail...

CVE-2023-33027

CVE-2023-33027 denotes a transient Denial of Service in WLAN firmware when parsing RSN IEs. Affected are Qualcomm WLAN components and related closed-source firmware; the NVD entry lists Network attack vector, no user interaction, low attack complexity, but availability impact is high (CVE-2023-33...

CVE-2023-33105

CVE-2023-33105 describes a transient DoS in Qualcomm WLAN Host and Firmware when a large number of open authentication frames with an invalid transaction sequence number are sent. The primary documents confirm affected component as WLAN Host and Firmware and note the DoS impact; an exploit reposi...

CVE-2022-33277

CVE-2022-33277 is a memory corruption issue in the Qualcomm modem component caused by copying input to a buffer without validating its size when handling WMI commands. The vulnerability is documented across multiple feeds (NVD, Red Hat, CVE listing) with a Qualcomm-specific bulletin reference. Ex...

CVE-2022-33283

CVE-2022-33283 describes information disclosure via a buffer over-read in WLAN frame parsing caused by a missing frame length check. The issue is documented across multiple sources as affecting WLAN-related components, including Qualcomm closed-source components, with the vulnerability enabling p...

CVE-2023-21659

CVE-2023-21659 is a Qualcomm WLAN firmware issue described as a Transient DoS when processing frames with missing header fields. Connected sources label it as a Buffer Over-read in WLAN firmware affecting Qualcomm components; the exact affected firmware versions and a fix are not detailed in the ...

CVE-2024-21473

CVE-2024-21473 affects Qualcomm chipsets via the Wi‑Fi SON LDB Service. The issue is memory corruption triggered while redirecting a log file to any location/name, due to improper input handling in the LDB service. Documented sources describe potential to execute code in the context of the device...

CVE-2022-25655

CVE-2022-25655 describes memory corruption in the WLAN HAL due to a buffer copy without size checking when a WMI UTF payload is processed. Connected sources indicate this involves Qualcomm closed‑source WLAN HAL components and that the issue is triggered by arbitrary input in the WMI UTF command ...

CVE-2023-33026

CVE-2023-33026 describes a Transient Denial of Service in WLAN firmware when parsing a NAN management frame. The CVE entry lists a high severity (CVSS 7.5) with network access and low attack complexity. Public references show the issue is discussed across multiple feeds (NVD, Red Hat, PRION/Qualc...

CVE-2022-33285

CVE-2022-33285 describes a transient DoS caused by a buffer over-read in WLAN when parsing WLAN CSA action frames. The core issue is a WLAN parsing defect leading to availability impact. The primary source confirms the vulnerability but the connected documents do not provide concrete product/vend...

CVE-2023-28565

CVE-2023-28565 affects Qualcomm WLAN HAL (Qualcomm chipsets) through WMI command streams. Root cause according to enrichment: improper validation of an array index leading to memory corruption in WLAN HAL. The issue is described in multiple sources (e.g., Qualcomm/Red Hat advisories; vuln enrichm...

CVE-2023-33062

CVE-2023-33062 covers a Transient DoS in Qualcomm WLAN firmware when parsing a BTM request. Affected component is Qualcomm WLAN firmware (closed‑source) in Qualcomm chipsets. The CVE is documented with a CVSS v3.1 base score of 7.5 (High) with network attack vector and low attack complexity, no p...

CVE-2023-33109

CVE-2023-33109 affects Qualcomm chipsets (and likely WLAN-related components) and describes a transient Denial of Service when processing a WMI P2P listen start command (0xD00A) issued from the host. The entry is corroborated by NVD/Red Hat/Android bulletin references; CVSS v3.1 vector is AV:N/AC...

CVE-2023-28559

CVE-2023-28559: Memory corruption in WLAN firmware when processing command parameters from untrusted WMI payload. Affected: Qualcomm WLAN FW components (WLAN HAL). Root cause evidenced by multiple sources describing a WLAN firmware memory corruption issue; CVSS v3.1 base score 7.8 (High) with LOC...

CVE-2023-28564

CVE-2023-28564 is a memory-corruption vulnerability in the WLAN HAL when passing command parameters through WMI interfaces. Documented as high-severity (CVSS v3.1: 7.8; LOCAL, LOW privileges required, no user interaction) with potential impact on confidentiality, integrity, and availability. Publ...

CVE-2023-28567

CVE-2023-28567 corresponds to a memory corruption issue in the WLAN HAL when handling commands via WMI interfaces. Affected software is Qualcomm WLAN/closed‑source components; CVSSv3.1 base score 7.8 (High) with LOCAL attack vector, LOW privileges, and no user interaction. The connected records c...

CVE-2022-33252

CVE-2022-33252 is a reported information disclosure due to a buffer over-read in WLAN when handling IBSS beacons frames. The vulnerability is described across multiple feeds (NVD/Red Hat/NCSC/PRION/CVE lists) as affecting WLAN/buffer handling, with the issue categorized under information disclosu...

CVE-2022-33284

CVE-2022-33284 describes information disclosure caused by a buffer over-read in WLAN when parsing BTM action frames. The vulnerability affects components in WLAN stacks (notably Qualcomm's closed-source WLAN) and has a network attack vector with high confidentiality impact, as indicated by the CV...

CVE-2023-28548

CVE-2023-28548 describes memory corruption in the WLAN HAL when processing Tx/Rx commands from QDART. The entry identifies the affected component as Qualcomm closed-source WLAN HAL and attributes the issue to a faulty handling path in QDART Tx/Rx processing, with a CVSSv3.1 base score of 7.8 (Att...

CVE-2023-28549

CVE-2023-28549 describes memory corruption in the Qualcomm WLAN HAL while parsing a TLV payload in the Rx path. The vulnerability affects Qualcomm WLAN components (closed-source) and is rated with CVSSv3.1: Local attack, Low privileges required, no user interaction, with high impact on confidenti...

CVE-2023-28560

Summary (CVE-2023-28560): Memory corruption in the WLAN HAL of Qualcomm chipsets triggered while processing the devIndex from an untrusted WMI payload. This affects WLAN HAL code paths and can impact confidentiality, integrity, and availability as indicated by the CVSS vector (Local access, Low c...