Qualcomm Qca9561 vulnerabilities, page 2
35 vulnerabilities
Known vulnerabilities in Qualcomm Qca9561, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2021-30303qualcomm · apq8009_firmware +238 morequalcomm apq8009_firmwarePossible buffer overflow due to lack of buffer length check when segmented WMI command is received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and NetworkingEPSS0.16%HighCVE-2020-11235qualcomm · apq8009_firmware +537 morequalcomm apq8009_firmwareBuffer overflow might occur while parsing unified command due to lack of check of input data received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and NetworkingEPSS0.17%HighCVE-2020-11280qualcomm · aqt1000_firmware +411 morequalcomm aqt1000_firmwareDenial of service while processing fine timing measurement request (FTMR) frame with reserved bits set in the FTM parameter IE due to improper error handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and NetworkingEPSS0.63%HighCVE-2020-11296qualcomm · apq8009_firmware +531 morequalcomm apq8009_firmwareArithmetic overflow can happen while processing NOA IE due to improper error handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and NetworkingEPSS0.62%HighCVE-2020-11270qualcomm · aqt1000_firmware +414 morequalcomm aqt1000_firmwarePossible denial of service due to RTT responder consistently rejects all FTMR by transmitting FTM1 with failure status in the FTM parameter IE in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and NetworkingEPSS0.63%CriticalCVE-2020-11225qualcomm · apq8064au_firmware +404 morequalcomm apq8064au_firmwareOut of bound access in WLAN driver due to lack of validation of array length before copying into array in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and NetworkingEPSS1.10%HighCVE-2020-11269qualcomm · apq8009_firmware +536 morequalcomm apq8009_firmwarePossible memory corruption while processing EAPOL frames due to lack of validation of key length before using it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingEPSS0.29%CriticalCVE-2020-11301qualcomm · apq8009_firmware +266 morequalcomm apq8009_firmwareImproper authentication of un-encrypted plaintext Wi-Fi frames in an encrypted network can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingEPSS11.11%HighCVE-2020-11267qualcomm · apq8009_firmware +270 morequalcomm apq8009_firmwareStack out-of-bounds write occurs while setting up a cipher device if the provided IV length exceeds the max limit value in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingEPSS0.18%HighCVE-2022-25655qualcomm, inc. · snapdragon +238 moreBuffer copy without checking the size of input in WLAN HAL.Memory corruption in WLAN HAL while arbitrary value is passed in WMI UTF command payload.EPSS0.12%HighCVE-2023-21628qualcomm, inc. · snapdragon +283 moreBuffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN HALMemory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command.EPSS0.12%HighCVE-2023-28565qualcomm, inc. · snapdragon +292 moreImproper Validation of Array Index in WLAN HALMemory corruption in WLAN HAL while handling command streams through WMI interfaces.EPSS0.12%HighCVE-2023-28564qualcomm, inc. · snapdragon +247 moreUse of Out-of-range Pointer Offset in WLAN HALMemory corruption in WLAN HAL while passing command parameters through WMI interfaces.EPSS0.12%MediumCVE-2023-28563qualcomm, inc. · snapdragon +229 moreBuffer Over-read in IOE FirmwareInformation disclosure in IOE Firmware while handling WMI command.EPSS0.14%HighCVE-2023-28560qualcomm, inc. · snapdragon +267 moreBuffer Copy Without Checking Size of Input in WLAN HALMemory corruption in WLAN HAL while processing devIndex from untrusted WMI payload.EPSS0.12%