Qualcomm Qca9985 vulnerabilities, page 3
117 vulnerabilities
Known vulnerabilities in Qualcomm Qca9985, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2020-11225qualcommapq8064au_firmware+404
EPSS score1.10%
Out of bound access in WLAN driver due to lack of validation of array length before copying into array in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and NetworkingCVE-2020-11269qualcommapq8009_firmware+536EPSS score0.29%
Possible memory corruption while processing EAPOL frames due to lack of validation of key length before using it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingCVE-2020-11301qualcommapq8009_firmware+266EPSS score11.11%
Improper authentication of un-encrypted plaintext Wi-Fi frames in an encrypted network can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingCVE-2020-11267qualcommapq8009_firmware+270EPSS score0.18%
Stack out-of-bounds write occurs while setting up a cipher device if the provided IV length exceeds the max limit value in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingCVE-2020-11271qualcommaqt1000_firmware+339EPSS score0.18%
Possible out of bounds while accessing global control elements due to race condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingCVE-2022-40512qualcomm, inc.snapdragon+295EPSS score0.42%
Transient DOS in WLAN Firmware due to buffer over-read while processing probe response or beacon.CVE-2022-40514qualcomm, inc.snapdragon+228EPSS score0.47%
Memory corruption due to buffer copy without checking the size of input in WLAN Firmware while processing CCKM IE in reassoc response frame.CVE-2022-40532qualcomm, inc.snapdragon+353EPSS score0.12%
Memory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target.CVE-2022-40531qualcomm, inc.snapdragon+284EPSS score0.12%
Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message.CVE-2022-25666qualcomm, inc.snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, snapdragon wired infrastructure and networking+148EPSS score0.12%
Memory corruption due to use after free in service while trying to access maps by different threads in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingCVE-2022-25667qualcomm, inc.snapdragon wired infrastructure and networking+69EPSS score0.37%
Information disclosure in kernel due to improper handling of ICMP requests in Snapdragon Wired Infrastructure and NetworkingCVE-2022-25722qualcomm, inc.snapdragon+78EPSS score0.12%
Information exposure in DSP services due to improper handling of freeing memoryCVE-2022-25655qualcomm, inc.snapdragon+238EPSS score0.12%
Memory corruption in WLAN HAL while arbitrary value is passed in WMI UTF command payload.CVE-2022-25677qualcomm, inc.snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, snapdragon wired infrastructure and networking+143EPSS score0.13%
Memory corruption in diag due to use after free while processing dci packet in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingCVE-2022-33253qualcomm, inc.snapdragon+161EPSS score0.23%
Transient DOS due to buffer over-read in WLAN while parsing corrupted NAN frames.CVE-2022-33283qualcomm, inc.snapdragon+134EPSS score0.36%
Information disclosure due to buffer over-read in WLAN while WLAN frame parsing due to missing frame length check.CVE-2022-33243qualcomm, inc.snapdragon+157EPSS score0.11%
Memory corruption due to improper access control in Qualcomm IPC.CVE-2022-33284qualcomm, inc.snapdragon+176EPSS score0.36%
Information disclosure due to buffer over-read in WLAN while parsing BTM action frame.CVE-2022-33285qualcomm, inc.snapdragon+278EPSS score0.39%
Transient DOS due to buffer over-read in WLAN while parsing WLAN CSA action frames.CVE-2022-33275qualcomm, inc.snapdragon+259EPSS score0.12%
Memory corruption due to improper validation of array index in WLAN HAL when received lm_itemNum is out of range.