Qualcomm Qcn9003 vulnerabilities, page 3
75 vulnerabilities
Known vulnerabilities in Qualcomm Qcn9003, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2022-33252qualcomm, inc.snapdragon+161
EPSS score0.25%
Information disclosure due to buffer over-read in WLAN while handling IBSS beacons frame.CVE-2024-21473qualcomm, inc.snapdragon+127EPSS score0.66%
Memory corruption while redirecting log file to any file location with any file name.CVE-2024-38408qualcomm, inc.snapdragon+229EPSS score0.14%
Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.CVE-2024-23368qualcomm, inc.snapdragon+341EPSS score0.10%
Memory corruption when allocating and accessing an entry in an SMEM partition.CVE-2026-25275qualcomm, inc.snapdragon+369EPSS score0.19%
Transient DOS when processing authentication frames with invalid FILS information element header lengths.CVE-2023-21658qualcomm, inc.snapdragon+151EPSS score0.38%
Transient DOS in WLAN Firmware while processing the received beacon or probe response frame.CVE-2023-21661qualcomm, inc.snapdragon+115EPSS score0.38%
Transient DOS while parsing WLAN beacon or probe-response frame.CVE-2023-21659qualcomm, inc.snapdragon+270EPSS score0.38%
Transient DOS in WLAN Firmware while processing frames with missing header fields.CVE-2023-43511qualcomm, inc.snapdragon+350EPSS score0.32%
Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header.CVE-2023-43522qualcomm, inc.snapdragon+280EPSS score0.32%
Transient DOS while key unwrapping process, when the given encrypted key is empty or NULL.CVE-2023-43523qualcomm, inc.snapdragon+140EPSS score0.32%
Transient DOS while processing 11AZ RTT management action frame received through OTA.CVE-2023-43513qualcomm, inc.snapdragon+261EPSS score0.11%
Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element.CVE-2023-43536qualcomm, inc.snapdragon+303EPSS score0.32%
Transient DOS while parse fils IE with length equal to 1.CVE-2023-22386qualcomm, inc.snapdragon+196EPSS score0.12%
Memory Corruption in WLAN HOST while processing WLAN FW request to allocate memory.CVE-2023-24854qualcomm, inc.snapdragon+158EPSS score0.12%
Memory Corruption in WLAN HOST while parsing QMI WLAN Firmware response message.CVE-2023-24851qualcomm, inc.snapdragon+186EPSS score0.12%
Memory Corruption in WLAN HOST while parsing QMI response message from firmware.CVE-2023-28541qualcomm, inc.snapdragon+198EPSS score0.12%
Memory Corruption in Data Modem while processing DMA buffer release event about CFR data.CVE-2023-28573qualcomm, inc.snapdragon+195EPSS score0.12%
Memory corruption in WLAN HAL while parsing WMI command parameters.CVE-2023-28549qualcomm, inc.snapdragon+220EPSS score0.12%
Memory corruption in WLAN HAL while parsing Rx buffer in processing TLV payload.CVE-2023-28578qualcomm, inc.snapdragon+333EPSS score0.12%
Memory corruption in Core Services while executing the command for removing a single event listener.