Qualcomm Immersive Home 3210 Platform vulnerabilities, page 3
78 vulnerabilities
Known vulnerabilities in Qualcomm Immersive Home 3210 Platform, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2024-23368qualcomm, inc. · snapdragon +341 moreBuffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Qualcomm IPCMemory corruption when allocating and accessing an entry in an SMEM partition.EPSS0.10%HighCVE-2024-23364qualcomm, inc. · snapdragon +177 moreBuffer Over-read in WLAN FirmwareTransient DOS when processing the non-transmitted BSSID profile sub-elements present within the MBSSID Information Element (IE) of a beacon frame that is received from over-the-air (OTA).EPSS0.30%HighCVE-2026-25275qualcomm, inc. · snapdragon +369 moreBuffer Over-read in WLAN FirmwareTransient DOS when processing authentication frames with invalid FILS information element header lengths.EPSS0.19%HighCVE-2026-25268qualcomm, inc. · snapdragon +128 moreStack-based Buffer Overflow in WLAN HostMemory Corruption when processing invalid HT40 channel layouts during dynamic channel switching operations.EPSS0.11%CriticalCVE-2026-25289qualcomm, inc. · snapdragon +199 moreStack-based Buffer Overflow in WLAN FirmwareMemory Corruption when processing Device Capability Extended attributes in certain NAN Service Discovery Frames with invalid length values.EPSS0.19%HighCVE-2023-43511qualcomm, inc. · snapdragon +350 moreLoop with Unreachable Exit Condition (Infinite Loop) in WLAN FirmwareTransient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header.EPSS0.32%HighCVE-2023-43533qualcomm, inc. · snapdragon +232 moreBuffer Over-read in WLAN FirmwareTransient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame.EPSS0.32%HighCVE-2023-43522qualcomm, inc. · snapdragon +280 moreNULL Pointer Dereference in WLAN FirmwareTransient DOS while key unwrapping process, when the given encrypted key is empty or NULL.EPSS0.32%HighCVE-2023-43523qualcomm, inc. · snapdragon +140 moreReachable Assertion in WLAN FirmwareTransient DOS while processing 11AZ RTT management action frame received through OTA.EPSS0.32%HighCVE-2023-43513qualcomm, inc. · snapdragon +261 moreUse of Out-of-range Pointer Offset in PCIeMemory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element.EPSS0.11%HighCVE-2023-43536qualcomm, inc. · snapdragon +303 moreBuffer Over-read in WLAN FirmwareTransient DOS while parse fils IE with length equal to 1.EPSS0.32%HighCVE-2023-24852qualcomm, inc. · snapdragon +265 moreImproper Authentication in CoreMemory Corruption in Core due to secure memory access by user while loading modem image.EPSS0.12%HighCVE-2023-28539qualcomm, inc. · snapdragon +157 moreBuffer Copy Without Checking Size of Input in WLAN HostMemory corruption in WLAN Host when the firmware invokes multiple WMI Service Available command.EPSS0.12%MediumCVE-2023-28586qualcomm, inc. · snapdragon +307 moreImproper Restriction of Operation within the Bounds of a Memory Buffer in TZ Secure OSInformation disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE.EPSS0.14%MediumCVE-2023-28553qualcomm, inc. · snapdragon +142 moreBuffer Over-read in WLAN HostInformation Disclosure in WLAN Host when processing WMI event command.EPSS0.14%HighCVE-2023-28585qualcomm, inc. · snapdragon +275 moreInteger Overflow to Buffer Overflow in TZ Secure OSMemory corruption while loading an ELF segment in TEE Kernel.EPSS0.14%CriticalCVE-2023-33072qualcomm, inc. · snapdragon +239 moreBuffer copy without checking size of Input in CoreMemory corruption in Core while processing control functions.EPSS0.11%HighCVE-2023-33026qualcomm, inc. · snapdragon +194 moreBuffer over-read in WLAN FirmwareTransient DOS in WLAN Firmware while parsing a NAN management frame.EPSS0.39%HighCVE-2023-33041qualcomm, inc. · snapdragon +126 moreReachable assertion in WLAN FirmwareUnder certain scenarios the WLAN Firmware will reach an assertion due to state confusion while looking up peer ids.EPSS0.47%HighCVE-2023-33089qualcomm, inc. · snapdragon +223 moreNULL Pointer Dereference in WLAN FirmwareTransient DOS when processing a NULL buffer while parsing WLAN vdev.EPSS0.47%