Qualcomm Ipq8078 vulnerabilities, page 5
225 vulnerabilities
Known vulnerabilities in Qualcomm Ipq8078, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2020-11159qualcommapq8009_firmware+502
EPSS score0.80%
Buffer over-read can happen while processing WPA,RSN IE of beacon and response frames if IE length is less than length of frame pointer being accessed in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and NetworkingCVE-2020-11301qualcommapq8009_firmware+266EPSS score11.11%
Improper authentication of un-encrypted plaintext Wi-Fi frames in an encrypted network can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingCVE-2020-11267qualcommapq8009_firmware+270EPSS score0.18%
Stack out-of-bounds write occurs while setting up a cipher device if the provided IV length exceeds the max limit value in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingCVE-2020-11289qualcommapq8009_firmware+495EPSS score0.20%
Out of bound write can occur in TZ command handler due to lack of validation of command ID in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingCVE-2020-11204qualcommapq8009_firmware+518EPSS score0.17%
Possible memory corruption and information leakage in sub-system due to lack of check for validity and boundary compliance for parameters that are read from shared MSG RAM in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingCVE-2020-11215qualcommaqt1000_firmware+383EPSS score0.89%
An out of bounds read can happen when processing VSA attribute due to improper minimum required length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and NetworkingCVE-2020-11214qualcommaqt1000_firmware+348EPSS score0.79%
Buffer over-read while processing NDL attribute if attribute length is larger than expected and then FW is treating it as more number of immutable schedules in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and NetworkingCVE-2022-40512qualcomm, inc.snapdragon+295EPSS score0.42%
Transient DOS in WLAN Firmware due to buffer over-read while processing probe response or beacon.CVE-2022-40527qualcomm, inc.snapdragon+99EPSS score0.41%
Transient DOS due to reachable assertion in WLAN while processing PEER ID populated by TQM.CVE-2022-40535qualcomm, inc.snapdragon+71EPSS score0.41%
Transient DOS due to buffer over-read in WLAN while sending a packet to device.CVE-2022-40514qualcomm, inc.snapdragon+228EPSS score0.47%
Memory corruption due to buffer copy without checking the size of input in WLAN Firmware while processing CCKM IE in reassoc response frame.CVE-2022-40532qualcomm, inc.snapdragon+353EPSS score0.12%
Memory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target.CVE-2022-40513qualcomm, inc.snapdragon+59EPSS score0.41%
Transient DOS due to uncontrolled resource consumption in WLAN firmware when peer is freed in non qos state.CVE-2022-40530qualcomm, inc.snapdragon+189EPSS score0.13%
Memory corruption in WLAN due to integer overflow to buffer overflow in WLAN during initialization phase.CVE-2022-40531qualcomm, inc.snapdragon+284EPSS score0.12%
Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message.CVE-2022-40502qualcomm, inc.snapdragon+96EPSS score0.42%
Transient DOS due to improper input validation in WLAN Host.CVE-2022-25748qualcommapq8009_firmware+272EPSS score0.52%
Memory corruption in WLAN due to integer overflow to buffer overflow while parsing GTK frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingCVE-2022-25666qualcomm, inc.snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, snapdragon wired infrastructure and networking+148EPSS score0.12%
Memory corruption due to use after free in service while trying to access maps by different threads in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingCVE-2022-25667qualcomm, inc.snapdragon wired infrastructure and networking+69EPSS score0.37%
Information disclosure in kernel due to improper handling of ICMP requests in Snapdragon Wired Infrastructure and NetworkingCVE-2022-25722qualcomm, inc.snapdragon+78EPSS score0.12%
Information exposure in DSP services due to improper handling of freeing memory