Qualcomm Robotics Rb5 Platform vulnerabilities, page 5
120 vulnerabilities
Known vulnerabilities in Qualcomm Robotics Rb5 Platform, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2023-43511qualcomm, inc. · snapdragon +350 moreLoop with Unreachable Exit Condition (Infinite Loop) in WLAN FirmwareTransient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header.EPSS0.32%HighCVE-2023-43522qualcomm, inc. · snapdragon +280 moreNULL Pointer Dereference in WLAN FirmwareTransient DOS while key unwrapping process, when the given encrypted key is empty or NULL.EPSS0.32%HighCVE-2023-43514qualcomm, inc. · snapdragon +81 moreUse After Free in DSP ServicesMemory corruption while invoking IOCTLs calls from user space for internal mem MAP and internal mem UNMAP.EPSS0.11%CriticalCVE-2023-43520qualcomm, inc. · snapdragon +69 moreStack-based Buffer Overflow in WLAN HOSTMemory corruption when AP includes TID to link mapping IE in the beacons and STA is parsing the beacon TID to link mapping IE.EPSS0.26%HighCVE-2023-43513qualcomm, inc. · snapdragon +261 moreUse of Out-of-range Pointer Offset in PCIeMemory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element.EPSS0.11%HighCVE-2023-43536qualcomm, inc. · snapdragon +303 moreBuffer Over-read in WLAN FirmwareTransient DOS while parse fils IE with length equal to 1.EPSS0.32%HighCVE-2023-24852qualcomm, inc. · snapdragon +265 moreImproper Authentication in CoreMemory Corruption in Core due to secure memory access by user while loading modem image.EPSS0.12%HighCVE-2023-28545qualcomm, inc. · snapdragon +198 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in TZ Secure OSMemory corruption in TZ Secure OS while loading an app ELF.EPSS0.14%HighCVE-2023-28539qualcomm, inc. · snapdragon +157 moreBuffer Copy Without Checking Size of Input in WLAN HostMemory corruption in WLAN Host when the firmware invokes multiple WMI Service Available command.EPSS0.12%MediumCVE-2023-28586qualcomm, inc. · snapdragon +307 moreImproper Restriction of Operation within the Bounds of a Memory Buffer in TZ Secure OSInformation disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE.EPSS0.14%HighCVE-2023-28556qualcomm, inc. · snapdragon +220 moreImproper Authorization in HLOSCryptographic issue in HLOS during key management.EPSS0.12%HighCVE-2023-28588qualcomm, inc. · snapdragon +208 moreInteger Overflow or Wraparound in Bluetooth HostTransient DOS in Bluetooth Host while rfc slot allocation.EPSS0.52%HighCVE-2023-28585qualcomm, inc. · snapdragon +275 moreInteger Overflow to Buffer Overflow in TZ Secure OSMemory corruption while loading an ELF segment in TEE Kernel.EPSS0.14%HighCVE-2023-28546qualcomm, inc. · snapdragon +274 moreBuffer Copy Without Checking Size of Input in SPS ApplicationsMemory Corruption in SPS Application while exporting public key in sorter TA.EPSS0.11%CriticalCVE-2023-33072qualcomm, inc. · snapdragon +239 moreBuffer copy without checking size of Input in CoreMemory corruption in Core while processing control functions.EPSS0.11%HighCVE-2023-33026qualcomm, inc. · snapdragon +194 moreBuffer over-read in WLAN FirmwareTransient DOS in WLAN Firmware while parsing a NAN management frame.EPSS0.39%HighCVE-2023-33112qualcomm, inc. · snapdragon +122 moreBuffer Over-read in WLAN FirmwareTransient DOS when WLAN firmware receives "reassoc response" frame including RIC_DATA element.EPSS0.32%HighCVE-2023-33089qualcomm, inc. · snapdragon +223 moreNULL Pointer Dereference in WLAN FirmwareTransient DOS when processing a NULL buffer while parsing WLAN vdev.EPSS0.47%HighCVE-2023-33062qualcomm, inc. · snapdragon +284 moreBuffer Over-read in WLAN FirmwareTransient DOS in WLAN Firmware while parsing a BTM request.EPSS0.34%HighCVE-2023-33109qualcomm, inc. · snapdragon +304 moreNULL Pointer Dereference in WLAN FirmwareTransient DOS while processing a WMI P2P listen start command (0xD00A) sent from host.EPSS0.34%