Qualcomm Qcn5550 vulnerabilities, page 4
88 vulnerabilities
Known vulnerabilities in Qualcomm Qcn5550, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2020-11287qualcommaqt1000_firmware+328
EPSS score0.69%
Allowing RTT frames to be linked with non randomized MAC address by comparing the sequence numbers can lead to information disclosure. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and NetworkingCVE-2020-11225qualcommapq8064au_firmware+404EPSS score1.10%
Out of bound access in WLAN driver due to lack of validation of array length before copying into array in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and NetworkingCVE-2020-11238qualcommaqt1000_firmware+401EPSS score0.60%
Possible Buffer over-read in ARP/NS parsing due to lack of check of packet length received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and NetworkingCVE-2020-11159qualcommapq8009_firmware+502EPSS score0.80%
Buffer over-read can happen while processing WPA,RSN IE of beacon and response frames if IE length is less than length of frame pointer being accessed in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and NetworkingCVE-2020-11301qualcommapq8009_firmware+266EPSS score11.11%
Improper authentication of un-encrypted plaintext Wi-Fi frames in an encrypted network can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingCVE-2020-11267qualcommapq8009_firmware+270EPSS score0.18%
Stack out-of-bounds write occurs while setting up a cipher device if the provided IV length exceeds the max limit value in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingCVE-2020-11289qualcommapq8009_firmware+495EPSS score0.20%
Out of bound write can occur in TZ command handler due to lack of validation of command ID in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingCVE-2020-11204qualcommapq8009_firmware+518EPSS score0.17%
Possible memory corruption and information leakage in sub-system due to lack of check for validity and boundary compliance for parameters that are read from shared MSG RAM in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingCVE-2020-11215qualcommaqt1000_firmware+383EPSS score0.89%
An out of bounds read can happen when processing VSA attribute due to improper minimum required length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and NetworkingCVE-2020-11214qualcommaqt1000_firmware+348EPSS score0.79%
Buffer over-read while processing NDL attribute if attribute length is larger than expected and then FW is treating it as more number of immutable schedules in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and NetworkingCVE-2020-11271qualcommaqt1000_firmware+339EPSS score0.18%
Possible out of bounds while accessing global control elements due to race condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingCVE-2022-25655qualcomm, inc.snapdragon+238EPSS score0.12%
Memory corruption in WLAN HAL while arbitrary value is passed in WMI UTF command payload.CVE-2022-25652qualcomm, inc.snapdragon wired infrastructure and networking+60EPSS score0.11%
Cryptographic issues in BSP due to improper hash verification in Snapdragon Wired Infrastructure and NetworkingCVE-2022-22076qualcomm, inc.snapdragon+348EPSS score0.11%
information disclosure due to cryptographic issue in Core during RPMB read request.CVE-2022-33238qualcommapq8009_firmware+283EPSS score0.44%
Transient DOS due to loop with unreachable exit condition in WLAN while processing an incoming FTM frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingCVE-2024-21473qualcomm, inc.snapdragon+127EPSS score0.66%
Memory corruption while redirecting log file to any file location with any file name.CVE-2026-25275qualcomm, inc.snapdragon+369EPSS score0.19%
Transient DOS when processing authentication frames with invalid FILS information element header lengths.CVE-2023-21628qualcomm, inc.snapdragon+283EPSS score0.12%
Memory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command.CVE-2023-28565qualcomm, inc.snapdragon+292EPSS score0.12%
Memory corruption in WLAN HAL while handling command streams through WMI interfaces.CVE-2023-28544qualcomm, inc.snapdragon+205EPSS score0.12%
Memory corruption in WLAN while sending transmit command from HLOS to UTF handlers.