Qualcomm Qcn5154 vulnerabilities, page 5
223 vulnerabilities
Known vulnerabilities in Qualcomm Qcn5154, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CriticalCVE-2020-11301qualcomm · apq8009_firmware +266 morequalcomm apq8009_firmwareImproper authentication of un-encrypted plaintext Wi-Fi frames in an encrypted network can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingEPSS11.11%HighCVE-2020-11267qualcomm · apq8009_firmware +270 morequalcomm apq8009_firmwareStack out-of-bounds write occurs while setting up a cipher device if the provided IV length exceeds the max limit value in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingEPSS0.18%HighCVE-2020-11289qualcomm · apq8009_firmware +495 morequalcomm apq8009_firmwareOut of bound write can occur in TZ command handler due to lack of validation of command ID in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingEPSS0.20%HighCVE-2020-11204qualcomm · apq8009_firmware +518 morequalcomm apq8009_firmwarePossible memory corruption and information leakage in sub-system due to lack of check for validity and boundary compliance for parameters that are read from shared MSG RAM in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingEPSS0.17%CriticalCVE-2020-11215qualcomm · aqt1000_firmware +383 morequalcomm aqt1000_firmwareAn out of bounds read can happen when processing VSA attribute due to improper minimum required length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and NetworkingEPSS0.89%HighCVE-2020-11214qualcomm · aqt1000_firmware +348 morequalcomm aqt1000_firmwareBuffer over-read while processing NDL attribute if attribute length is larger than expected and then FW is treating it as more number of immutable schedules in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and NetworkingEPSS0.79%HighCVE-2022-40512qualcomm, inc. · snapdragon +295 moreBuffer over-read in WLAN Firmware.Transient DOS in WLAN Firmware due to buffer over-read while processing probe response or beacon.EPSS0.42%HighCVE-2022-40527qualcomm, inc. · snapdragon +99 moreReachable Assertion in WLAN Embedded SWTransient DOS due to reachable assertion in WLAN while processing PEER ID populated by TQM.EPSS0.41%HighCVE-2022-40535qualcomm, inc. · snapdragon +71 moreBuffer Over-read in WLANTransient DOS due to buffer over-read in WLAN while sending a packet to device.EPSS0.41%CriticalCVE-2022-40514qualcomm, inc. · snapdragon +228 moreBuffer copy without checking size of input in WLAN FirmwareMemory corruption due to buffer copy without checking the size of input in WLAN Firmware while processing CCKM IE in reassoc response frame.EPSS0.47%HighCVE-2022-40532qualcomm, inc. · snapdragon +353 moreInteger overflow or wraparound in WLANMemory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target.EPSS0.12%HighCVE-2022-40513qualcomm, inc. · snapdragon +59 moreUncontrolled resource consumption in WLAN Firmware.Transient DOS due to uncontrolled resource consumption in WLAN firmware when peer is freed in non qos state.EPSS0.41%HighCVE-2022-40530qualcomm, inc. · snapdragon +189 moreInteger overflow to buffer overflow in WLANMemory corruption in WLAN due to integer overflow to buffer overflow in WLAN during initialization phase.EPSS0.13%HighCVE-2022-40531qualcomm, inc. · snapdragon +284 moreIncorrect type conversion in WLANMemory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message.EPSS0.12%HighCVE-2022-40502qualcomm, inc. · snapdragon +96 moreImproper input validation in WLAN HostTransient DOS due to improper input validation in WLAN Host.EPSS0.42%CriticalCVE-2022-25748qualcomm · apq8009_firmware +272 morequalcomm apq8009_firmwareMemory corruption in WLAN due to integer overflow to buffer overflow while parsing GTK frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingEPSS0.52%MediumCVE-2022-25666qualcomm, inc. · snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, snapdragon wired infrastructure and networking +148 morequalcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, snapdragon wired infrastructure and networkingMemory corruption due to use after free in service while trying to access maps by different threads in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingEPSS0.12%HighCVE-2022-25667qualcomm, inc. · snapdragon wired infrastructure and networking +69 morequalcomm, inc. snapdragon wired infrastructure and networkingInformation disclosure in kernel due to improper handling of ICMP requests in Snapdragon Wired Infrastructure and NetworkingEPSS0.37%MediumCVE-2022-25722qualcomm, inc. · snapdragon +78 moreInformation Exposure in DSP ServicesInformation exposure in DSP services due to improper handling of freeing memoryEPSS0.12%HighCVE-2022-25655qualcomm, inc. · snapdragon +238 moreBuffer copy without checking the size of input in WLAN HAL.Memory corruption in WLAN HAL while arbitrary value is passed in WMI UTF command payload.EPSS0.12%