Qualcomm Qcn9011 vulnerabilities, page 5

284 vulnerabilities

Known vulnerabilities in Qualcomm Qcn9011, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.8CriticalCVE-2022-40514qualcomm, inc. · snapdragon +228 moreBuffer copy without checking size of input in WLAN FirmwareMemory corruption due to buffer copy without checking the size of input in WLAN Firmware while processing CCKM IE in reassoc response frame.EPSS0.47%8.4HighCVE-2022-40532qualcomm, inc. · snapdragon +353 moreInteger overflow or wraparound in WLANMemory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target.EPSS0.12%6.2MediumCVE-2022-40533qualcomm, inc. · snapdragon +110 moreUntrusted Pointer Dereference in CoreTransient DOS due to untrusted Pointer Dereference in core while sending USB QMI request.EPSS0.10%8.2HighCVE-2022-40503qualcomm, inc. · snapdragon +185 moreBuffer over-read in Bluetooth Host.Information disclosure due to buffer over-read in Bluetooth Host while A2DP streaming.EPSS0.41%6.8MediumCVE-2022-40518qualcomm, inc. · snapdragon +160 moreBuffer overread in CoreInformation disclosure due to buffer overread in CoreEPSS0.12%8.4HighCVE-2022-40530qualcomm, inc. · snapdragon +189 moreInteger overflow to buffer overflow in WLANMemory corruption in WLAN due to integer overflow to buffer overflow in WLAN during initialization phase.EPSS0.13%8.4HighCVE-2022-40520qualcomm, inc. · snapdragon +147 moreStack based buffer overflow in CoreMemory corruption due to stack-based buffer overflow in CoreEPSS0.70%8.4HighCVE-2022-40531qualcomm, inc. · snapdragon +284 moreIncorrect type conversion in WLANMemory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message.EPSS0.12%9.8CriticalCVE-2022-40510qualcomm, inc. · snapdragon +204 moreBuffer copy without checking size of input in Audio.Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder.EPSS0.43%8.4HighCVE-2022-40516qualcomm, inc. · snapdragon +184 moreStack-based buffer overflow in CoreMemory corruption in Core due to stack-based buffer overflow.EPSS0.87%9.8CriticalCVE-2022-40537qualcomm, inc. · snapdragon +162 moreImproper Validation of Array Index in Bluetooth HOSTMemory corruption in Bluetooth HOST while processing the AVRC_PDU_GET_PLAYER_APP_VALUE_TEXT AVRCP response.EPSS0.36%7.8HighCVE-2022-40529qualcomm, inc. · snapdragon +196 moreImproper access control in KernelMemory corruption due to improper access control in kernel while processing a mapping request from root process.EPSS0.10%9.8CriticalCVE-2022-25748qualcomm · apq8009_firmware +272 morequalcomm apq8009_firmwareMemory corruption in WLAN due to integer overflow to buffer overflow while parsing GTK frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingEPSS0.52%8.4HighCVE-2022-25681qualcomm, inc. · snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile +98 morequalcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobilePossible memory corruption in kernel while performing memory access due to hypervisor not correctly invalidated the processor translation caches in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon MobileEPSS0.13%8.4HighCVE-2022-25661qualcomm, inc. · snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile +98 morequalcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobileMemory corruption due to untrusted pointer dereference in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon MobileEPSS0.13%8.4HighCVE-2022-25724qualcomm, inc. · snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables +201 morequalcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearablesMemory corruption in graphics due to buffer overflow while validating the user address in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesEPSS0.12%7.5HighCVE-2022-25749qualcomm · apq8009_firmware +275 morequalcomm apq8009_firmwareTransient Denial-of-Service in WLAN due to buffer over-read while parsing MDNS frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingEPSS0.46%7.5HighCVE-2022-25736qualcomm · aqt1000_firmware +242 morequalcomm aqt1000_firmwareDenial of service in WLAN due to out-of-bound read happens while processing VHT action frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingEPSS0.81%8.1HighCVE-2022-25746qualcomm, inc. · snapdragon +98 moreBuffer Copy Without Checking Size of Input in KernelMemory corruption in kernel due to missing checks when updating the access rights of a memextent mapping.EPSS0.12%7.1HighCVE-2022-22076qualcomm, inc. · snapdragon +348 moreCryptographic issue in Coreinformation disclosure due to cryptographic issue in Core during RPMB read request.EPSS0.11%