Qualcomm Qcn9100 vulnerabilities, page 5

219 vulnerabilities

Known vulnerabilities in Qualcomm Qcn9100, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.5HighCVE-2020-11214qualcomm · aqt1000_firmware +348 morequalcomm aqt1000_firmwareBuffer over-read while processing NDL attribute if attribute length is larger than expected and then FW is treating it as more number of immutable schedules in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and NetworkingEPSS0.79%7.5HighCVE-2022-40512qualcomm, inc. · snapdragon +295 moreBuffer over-read in WLAN Firmware.Transient DOS in WLAN Firmware due to buffer over-read while processing probe response or beacon.EPSS0.42%7.5HighCVE-2022-40527qualcomm, inc. · snapdragon +99 moreReachable Assertion in WLAN Embedded SWTransient DOS due to reachable assertion in WLAN while processing PEER ID populated by TQM.EPSS0.41%9.8CriticalCVE-2022-40514qualcomm, inc. · snapdragon +228 moreBuffer copy without checking size of input in WLAN FirmwareMemory corruption due to buffer copy without checking the size of input in WLAN Firmware while processing CCKM IE in reassoc response frame.EPSS0.47%8.4HighCVE-2022-40532qualcomm, inc. · snapdragon +353 moreInteger overflow or wraparound in WLANMemory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target.EPSS0.12%7.5HighCVE-2022-40513qualcomm, inc. · snapdragon +59 moreUncontrolled resource consumption in WLAN Firmware.Transient DOS due to uncontrolled resource consumption in WLAN firmware when peer is freed in non qos state.EPSS0.41%8.4HighCVE-2022-40530qualcomm, inc. · snapdragon +189 moreInteger overflow to buffer overflow in WLANMemory corruption in WLAN due to integer overflow to buffer overflow in WLAN during initialization phase.EPSS0.13%8.4HighCVE-2022-40531qualcomm, inc. · snapdragon +284 moreIncorrect type conversion in WLANMemory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message.EPSS0.12%7.5HighCVE-2022-40502qualcomm, inc. · snapdragon +96 moreImproper input validation in WLAN HostTransient DOS due to improper input validation in WLAN Host.EPSS0.42%9.8CriticalCVE-2022-25748qualcomm · apq8009_firmware +272 morequalcomm apq8009_firmwareMemory corruption in WLAN due to integer overflow to buffer overflow while parsing GTK frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingEPSS0.52%6.7MediumCVE-2022-25666qualcomm, inc. · snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, snapdragon wired infrastructure and networking +148 morequalcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, snapdragon wired infrastructure and networkingMemory corruption due to use after free in service while trying to access maps by different threads in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingEPSS0.12%7.5HighCVE-2022-25667qualcomm, inc. · snapdragon wired infrastructure and networking +69 morequalcomm, inc. snapdragon wired infrastructure and networkingInformation disclosure in kernel due to improper handling of ICMP requests in Snapdragon Wired Infrastructure and NetworkingEPSS0.37%6MediumCVE-2022-25722qualcomm, inc. · snapdragon +78 moreInformation Exposure in DSP ServicesInformation exposure in DSP services due to improper handling of freeing memoryEPSS0.12%8.4HighCVE-2022-25655qualcomm, inc. · snapdragon +238 moreBuffer copy without checking the size of input in WLAN HAL.Memory corruption in WLAN HAL while arbitrary value is passed in WMI UTF command payload.EPSS0.12%7.8HighCVE-2022-25677qualcomm, inc. · snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, snapdragon wired infrastructure and networking +143 morequalcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, snapdragon wired infrastructure and networkingMemory corruption in diag due to use after free while processing dci packet in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingEPSS0.13%7.5HighCVE-2022-25749qualcomm · apq8009_firmware +275 morequalcomm apq8009_firmwareTransient Denial-of-Service in WLAN due to buffer over-read while parsing MDNS frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingEPSS0.46%7.5HighCVE-2022-25736qualcomm · aqt1000_firmware +242 morequalcomm aqt1000_firmwareDenial of service in WLAN due to out-of-bound read happens while processing VHT action frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingEPSS0.81%9CriticalCVE-2022-25652qualcomm, inc. · snapdragon wired infrastructure and networking +60 morequalcomm, inc. snapdragon wired infrastructure and networkingCryptographic issues in BSP due to improper hash verification in Snapdragon Wired Infrastructure and NetworkingEPSS0.11%9.1CriticalCVE-2022-25719qualcomm · apq8009_firmware +117 morequalcomm apq8009_firmwareInformation disclosure in WLAN due to improper length check while processing authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingEPSS0.56%7.1HighCVE-2022-22076qualcomm, inc. · snapdragon +348 moreCryptographic issue in Coreinformation disclosure due to cryptographic issue in Core during RPMB read request.EPSS0.11%