Qualcomm Qcc2076 vulnerabilities, page 5
111 vulnerabilities
Known vulnerabilities in Qualcomm Qcc2076, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2023-43533qualcomm, inc. · snapdragon +232 moreBuffer Over-read in WLAN FirmwareTransient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame.EPSS0.32%HighCVE-2023-43522qualcomm, inc. · snapdragon +280 moreNULL Pointer Dereference in WLAN FirmwareTransient DOS while key unwrapping process, when the given encrypted key is empty or NULL.EPSS0.32%HighCVE-2023-43537qualcomm, inc. · snapdragon +111 moreBuffer Over-read in WLAN HostInformation disclosure while handling T2LM Action Frame in WLAN Host.EPSS0.21%CriticalCVE-2023-43520qualcomm, inc. · snapdragon +69 moreStack-based Buffer Overflow in WLAN HOSTMemory corruption when AP includes TID to link mapping IE in the beacons and STA is parsing the beacon TID to link mapping IE.EPSS0.26%HighCVE-2023-43549qualcomm, inc. · snapdragon +136 moreStack-based Buffer Overflow in WLAN HALMemory corruption while processing TPC target power table in FTM TPC.EPSS0.11%HighCVE-2023-43523qualcomm, inc. · snapdragon +140 moreReachable Assertion in WLAN FirmwareTransient DOS while processing 11AZ RTT management action frame received through OTA.EPSS0.32%CriticalCVE-2023-43552qualcomm, inc. · snapdragon +148 moreUse After Free in WLAN Host CommunicationMemory corruption while processing MBSSID beacon containing several subelement IE.EPSS0.35%HighCVE-2023-43536qualcomm, inc. · snapdragon +303 moreBuffer Over-read in WLAN FirmwareTransient DOS while parse fils IE with length equal to 1.EPSS0.32%HighCVE-2023-43539qualcomm, inc. · snapdragon +135 moreBuffer Over-read in WLAN FirmwareTransient DOS while processing an improperly formatted 802.11az Fine Time Measurement protocol frame.EPSS0.32%HighCVE-2023-28539qualcomm, inc. · snapdragon +157 moreBuffer Copy Without Checking Size of Input in WLAN HostMemory corruption in WLAN Host when the firmware invokes multiple WMI Service Available command.EPSS0.12%HighCVE-2023-28572qualcomm, inc. · snapdragon +54 moreBuffer Over-read in WLAN HOSTMemory corruption in WLAN HOST while processing the WLAN scan descriptor list.EPSS0.40%MediumCVE-2023-28553qualcomm, inc. · snapdragon +142 moreBuffer Over-read in WLAN HostInformation Disclosure in WLAN Host when processing WMI event command.EPSS0.14%HighCVE-2023-28587qualcomm, inc. · snapdragon +184 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in BT ControllerMemory corruption in BT controller while parsing debug commands with specific sub-opcodes at HCI interface level.EPSS0.16%MediumCVE-2023-28571qualcomm, inc. · snapdragon +85 moreBuffer Over-read in WLAN HOSTInformation disclosure in WLAN HOST while processing the WLAN scan descriptor list during roaming scan.EPSS0.11%HighCVE-2023-33026qualcomm, inc. · snapdragon +194 moreBuffer over-read in WLAN FirmwareTransient DOS in WLAN Firmware while parsing a NAN management frame.EPSS0.39%HighCVE-2023-33041qualcomm, inc. · snapdragon +126 moreReachable assertion in WLAN FirmwareUnder certain scenarios the WLAN Firmware will reach an assertion due to state confusion while looking up peer ids.EPSS0.47%HighCVE-2023-33089qualcomm, inc. · snapdragon +223 moreNULL Pointer Dereference in WLAN FirmwareTransient DOS when processing a NULL buffer while parsing WLAN vdev.EPSS0.47%HighCVE-2023-33047qualcomm, inc. · snapdragon +177 moreBuffer Over-read in WLAN FirmwareTransient DOS in WLAN Firmware while parsing no-inherit IES.EPSS0.43%HighCVE-2023-33062qualcomm, inc. · snapdragon +284 moreBuffer Over-read in WLAN FirmwareTransient DOS in WLAN Firmware while parsing a BTM request.EPSS0.34%HighCVE-2023-33109qualcomm, inc. · snapdragon +304 moreNULL Pointer Dereference in WLAN FirmwareTransient DOS while processing a WMI P2P listen start command (0xD00A) sent from host.EPSS0.34%