Qualcomm Qcc2076 vulnerabilities, page 3

111 vulnerabilities

Known vulnerabilities in Qualcomm Qcc2076, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.8HighCVE-2024-45561qualcomm, inc. · snapdragon +32 moreUse After Free in Windows WLAN HostMemory corruption while handling IOCTL call from user-space to set latency level.EPSS0.10%7.8HighCVE-2024-45541qualcomm, inc. · snapdragon +51 moreBuffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Windows HostMemory corruption when IOCTL call is invoked from user-space to read board data.EPSS0.11%7.8HighCVE-2024-49840qualcomm, inc. · snapdragon +10 moreUse of Out-of-range Pointer Offset in WLAN Windows HostMemory corruption while Invoking IOCTL calls from user-space to validate FIPS encryption or decryption functionality.EPSS0.07%9.8CriticalCVE-2024-49839qualcomm, inc. · snapdragon +185 moreBuffer Over-read in WLAN Host CmnMemory corruption during management frame processing due to mismatch in T2LM info element.EPSS0.29%8.2HighCVE-2024-49838qualcomm, inc. · snapdragon +165 moreBuffer Over-read in WLAN HOSTInformation disclosure while parsing the OCI IE with invalid length.EPSS0.31%7.5HighCVE-2024-33026qualcomm, inc. · snapdragon +164 moreBuffer Over-read in WLAN HostTransient DOS while parsing probe response and assoc response frame when received frame length is less than max size of timestamp.EPSS0.28%7.5HighCVE-2024-33069qualcomm, inc. · snapdragon +44 moreUse After Free in WLAN HostTransient DOS when transmission of management frame sent by host is not successful and error status is received in the host.EPSS0.36%7.5HighCVE-2024-33011qualcomm, inc. · snapdragon +247 moreBuffer Over-read in WLAN HostTransient DOS while parsing the MBSSID IE from the beacons, when the MBSSID IE length is zero.EPSS0.28%7.5HighCVE-2024-33051qualcomm, inc. · snapdragon +282 moreBuffer Over-read in WLAN FirmwareTransient DOS while processing TIM IE from beacon frame as there is no check for IE length.EPSS0.30%7.5HighCVE-2024-33050qualcomm, inc. · snapdragon +252 moreBuffer Over-read in WLAN Host CommunicationTransient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper.EPSS0.30%7.5HighCVE-2024-33012qualcomm, inc. · snapdragon +247 moreBuffer Over-read in WLAN HostTransient DOS while parsing the multiple MBSSID IEs from the beacon, when the tag length is non-zero value but with end of beacon.EPSS0.28%7.5HighCVE-2024-33048qualcomm, inc. · snapdragon +187 moreBuffer Over-read in WLAN HostTransient DOS while parsing the received TID-to-link mapping element of beacon/probe response frame.EPSS0.30%7.5HighCVE-2024-33010qualcomm, inc. · snapdragon +246 moreUse After Free in WLAN HostTransient DOS while parsing fragments of MBSSID IE from beacon frame.EPSS0.28%7.5HighCVE-2024-33019qualcomm, inc. · snapdragon +148 moreBuffer Over-read in WLAN HostTransient DOS while parsing the received TID-to-link mapping action frame.EPSS0.28%8.2HighCVE-2024-33073qualcomm, inc. · snapdragon +158 moreBuffer Over-read in WLAN Host CommunicationInformation disclosure while parsing the BSS parameter change count or MLD capabilities fields of the ML IE.EPSS0.35%7.5HighCVE-2024-33025qualcomm, inc. · snapdragon +167 moreBuffer Over-read in WLAN HostTransient DOS while parsing the BSS parameter change count or MLD capabilities fields of the ML IE.EPSS0.28%7.5HighCVE-2024-33020qualcomm, inc. · snapdragon +96 moreBuffer Over-read in WLAN HOSTTransient DOS while processing TID-to-link mapping IE elements.EPSS0.28%7.5HighCVE-2024-33018qualcomm, inc. · snapdragon +150 moreBuffer Over-read in WLAN HostTransient DOS while parsing the received TID-to-link mapping element of the TID-to-link mapping action frame.EPSS0.33%7.5HighCVE-2024-33014qualcomm, inc. · snapdragon +319 moreBuffer Over-read in WLAN HostTransient DOS while parsing ESP IE from beacon/probe response frame.EPSS0.32%7.5HighCVE-2024-33024qualcomm, inc. · snapdragon +179 moreInteger Overflow or Wraparound in WLAN HostTransient DOS while parsing the ML IE when a beacon with length field inside the common info of ML IE greater than the ML IE length.EPSS0.28%