Qualcomm Qca8386 vulnerabilities, page 4
166 vulnerabilities
Known vulnerabilities in Qualcomm Qca8386, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2024-21482qualcomm, inc. · snapdragon +69 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in Linux Boot LoaderMemory corruption during the secure boot process, when the `bootm` command is used, it bypasses the authentication of the kernel/rootfs image.EPSS0.11%CriticalCVE-2024-21473qualcomm, inc. · snapdragon +127 moreImproper Input Validation in WIN SONMemory corruption while redirecting log file to any file location with any file name.EPSS0.66%HighCVE-2024-21477qualcomm, inc. · snapdragon +182 moreBuffer Over-read in WLAN FirmwareTransient DOS while parsing a protected 802.11az Fine Time Measurement (FTM) frame.EPSS0.32%HighCVE-2024-21457qualcomm, inc. · snapdragon +111 moreBuffer Over-read in WLAN Host CommunicationINformation disclosure while handling Multi-link IE in beacon frame.EPSS0.21%HighCVE-2024-21459qualcomm, inc. · snapdragon +175 moreBuffer Over-read in WLAN HOSTInformation disclosure while handling beacon or probe response frame in STA.EPSS0.26%HighCVE-2024-21462qualcomm, inc. · snapdragon +309 moreBuffer Over-read in TZ Secure OSTransient DOS while loading the TA ELF file.EPSS0.09%HighCVE-2024-21467qualcomm, inc. · snapdragon +129 moreBuffer Over-read in WLAN Host CommunicationInformation disclosure while handling beacon probe frame during scan entry generation in client side.EPSS0.26%MediumCVE-2024-43046qualcomm, inc. · snapdragon +308 moreInformation Exposure in TZ Secure OSThere may be information disclosure during memory re-allocation in TZ Secure OS.EPSS0.11%HighCVE-2024-43057qualcomm, inc. · snapdragon +151 moreUse After Free in MProcMemory corruption while processing command in Glink linux.EPSS0.12%HighCVE-2024-38397qualcomm, inc. · snapdragon +115 moreBuffer Over-read in WLAN Host CommunicationTransient DOS while parsing probe response and assoc response frame.EPSS0.32%MediumCVE-2024-45556qualcomm, inc. · snapdragon +60 moreImproper Access Control for Register Interface in TZ FirmwareCryptographic issue may arise because the access control configuration permits Linux to read key registers in TCSR.EPSS0.09%HighCVE-2024-45558qualcomm, inc. · snapdragon +182 moreBuffer Over-read in WLAN Host CmnTransient DOS can occur when the driver parses the per STA profile IE and tries to access the EXTN element ID without checking the IE length.EPSS0.38%CriticalCVE-2024-45569qualcomm, inc. · snapdragon +173 moreImproper Validation of Array Index in WLAN Host CommunicationMemory corruption while parsing the ML IE due to invalid frame content.EPSS0.58%HighCVE-2024-45571qualcomm, inc. · snapdragon +150 moreUse After Free in WLAN Host CommunicationMemory corruption may occour occur when stopping the WLAN interface after processing a WMI command from the interface.EPSS0.10%CriticalCVE-2024-49839qualcomm, inc. · snapdragon +185 moreBuffer Over-read in WLAN Host CmnMemory corruption during management frame processing due to mismatch in T2LM info element.EPSS0.29%HighCVE-2024-33026qualcomm, inc. · snapdragon +164 moreBuffer Over-read in WLAN HostTransient DOS while parsing probe response and assoc response frame when received frame length is less than max size of timestamp.EPSS0.28%HighCVE-2024-33011qualcomm, inc. · snapdragon +247 moreBuffer Over-read in WLAN HostTransient DOS while parsing the MBSSID IE from the beacons, when the MBSSID IE length is zero.EPSS0.28%CriticalCVE-2024-33066qualcomm, inc. · snapdragon +71 moreImproper Input Validation in WLAN Resource ManagerMemory corruption while redirecting log file to any file location with any file name.EPSS0.60%HighCVE-2024-33068qualcomm, inc. · snapdragon +121 moreUse After Free in WLAN Host CommunicationTransient DOS while parsing fragments of MBSSID IE from beacon frame.EPSS0.25%HighCVE-2024-33050qualcomm, inc. · snapdragon +252 moreBuffer Over-read in WLAN Host CommunicationTransient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper.EPSS0.30%