Qualcomm Sdx65M vulnerabilities, page 4
98 vulnerabilities
Known vulnerabilities in Qualcomm Sdx65M, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CriticalCVE-2023-43553qualcomm, inc. · snapdragon +130 moreUse of Out-of-range Pointer Offset in WLAN HOSTMemory corruption while parsing beacon/probe response frame when AP sends more supported links in MLIE.EPSS0.35%HighCVE-2023-43511qualcomm, inc. · snapdragon +350 moreLoop with Unreachable Exit Condition (Infinite Loop) in WLAN FirmwareTransient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header.EPSS0.32%HighCVE-2023-43537qualcomm, inc. · snapdragon +111 moreBuffer Over-read in WLAN HostInformation disclosure while handling T2LM Action Frame in WLAN Host.EPSS0.21%HighCVE-2023-43549qualcomm, inc. · snapdragon +136 moreStack-based Buffer Overflow in WLAN HALMemory corruption while processing TPC target power table in FTM TPC.EPSS0.11%HighCVE-2023-43523qualcomm, inc. · snapdragon +140 moreReachable Assertion in WLAN FirmwareTransient DOS while processing 11AZ RTT management action frame received through OTA.EPSS0.32%CriticalCVE-2023-43552qualcomm, inc. · snapdragon +148 moreUse After Free in WLAN Host CommunicationMemory corruption while processing MBSSID beacon containing several subelement IE.EPSS0.35%HighCVE-2023-43539qualcomm, inc. · snapdragon +135 moreBuffer Over-read in WLAN FirmwareTransient DOS while processing an improperly formatted 802.11az Fine Time Measurement protocol frame.EPSS0.32%HighCVE-2023-22386qualcomm, inc. · snapdragon +196 moreBuffer Copy Without Checking Size of Input in WLAN HOSTMemory Corruption in WLAN HOST while processing WLAN FW request to allocate memory.EPSS0.12%HighCVE-2023-24851qualcomm, inc. · snapdragon +186 moreBuffer Copy Without Checking Size of Input in WLAN HOSTMemory Corruption in WLAN HOST while parsing QMI response message from firmware.EPSS0.12%HighCVE-2023-24852qualcomm, inc. · snapdragon +265 moreImproper Authentication in CoreMemory Corruption in Core due to secure memory access by user while loading modem image.EPSS0.12%HighCVE-2023-28539qualcomm, inc. · snapdragon +157 moreBuffer Copy Without Checking Size of Input in WLAN HostMemory corruption in WLAN Host when the firmware invokes multiple WMI Service Available command.EPSS0.12%HighCVE-2023-28541qualcomm, inc. · snapdragon +198 moreBuffer Over-read in WLAN HostMemory Corruption in Data Modem while processing DMA buffer release event about CFR data.EPSS0.12%MediumCVE-2023-28586qualcomm, inc. · snapdragon +307 moreImproper Restriction of Operation within the Bounds of a Memory Buffer in TZ Secure OSInformation disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE.EPSS0.14%MediumCVE-2023-28553qualcomm, inc. · snapdragon +142 moreBuffer Over-read in WLAN HostInformation Disclosure in WLAN Host when processing WMI event command.EPSS0.14%HighCVE-2023-28585qualcomm, inc. · snapdragon +275 moreInteger Overflow to Buffer Overflow in TZ Secure OSMemory corruption while loading an ELF segment in TEE Kernel.EPSS0.14%CriticalCVE-2023-33072qualcomm, inc. · snapdragon +239 moreBuffer copy without checking size of Input in CoreMemory corruption in Core while processing control functions.EPSS0.11%HighCVE-2023-33026qualcomm, inc. · snapdragon +194 moreBuffer over-read in WLAN FirmwareTransient DOS in WLAN Firmware while parsing a NAN management frame.EPSS0.39%HighCVE-2023-33041qualcomm, inc. · snapdragon +126 moreReachable assertion in WLAN FirmwareUnder certain scenarios the WLAN Firmware will reach an assertion due to state confusion while looking up peer ids.EPSS0.47%HighCVE-2023-33089qualcomm, inc. · snapdragon +223 moreNULL Pointer Dereference in WLAN FirmwareTransient DOS when processing a NULL buffer while parsing WLAN vdev.EPSS0.47%HighCVE-2023-33047qualcomm, inc. · snapdragon +177 moreBuffer Over-read in WLAN FirmwareTransient DOS in WLAN Firmware while parsing no-inherit IES.EPSS0.43%