VYPR

Wcn3991 Firmware

by Qualcomm

CVEs (283)

  • CVE-2023-21652HigAug 8, 2023
    risk 0.50cvss 7.7epss 0.00

    Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use.

  • CVE-2021-35116HigJun 14, 2022
    risk 0.50cvss 7.7epss 0.00

    APK can load a crafted model into the CDSP which can lead to a compromise of CDSP and other APK`s data executing there in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

  • CVE-2023-33043HigDec 5, 2023
    risk 0.49cvss 7.5epss 0.01

    Transient DOS in Modem when a Beam switch request is made with a non-configured BWP.

  • CVE-2023-33042HigDec 5, 2023
    risk 0.49cvss 7.5epss 0.01

    Transient DOS in Modem after RRC Setup message is received.

  • CVE-2023-21646HigSep 5, 2023
    risk 0.49cvss 7.5epss 0.00

    Transient DOS in Modem while processing invalid System Information Block 1.

  • CVE-2023-28555HigAug 8, 2023
    risk 0.49cvss 7.5epss 0.00

    Transient DOS in Audio while remapping channel buffer in media codec decoding.

  • CVE-2023-21659HigJun 6, 2023
    risk 0.49cvss 7.5epss 0.00

    Transient DOS in WLAN Firmware while processing frames with missing header fields.

  • CVE-2022-40521HigJun 6, 2023
    risk 0.49cvss 7.5epss 0.00

    Transient DOS due to improper authorization in Modem

  • CVE-2022-22060HigJun 6, 2023
    risk 0.49cvss 7.5epss 0.00

    Assertion occurs while processing Reconfiguration message due to improper validation

  • CVE-2022-33238HigDec 13, 2022
    risk 0.49cvss 7.5epss 0.00

    Transient DOS due to loop with unreachable exit condition in WLAN while processing an incoming FTM frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…

  • CVE-2022-25702HigDec 13, 2022
    risk 0.49cvss 7.5epss 0.00

    Denial of service in modem due to reachable assertion while processing reconfiguration message in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

  • CVE-2022-33237HigNov 15, 2022
    risk 0.49cvss 7.5epss 0.00

    Transient DOS due to buffer over-read in WLAN firmware while processing PPE threshold. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon…

  • CVE-2022-25749HigOct 19, 2022
    risk 0.49cvss 7.5epss 0.00

    Transient Denial-of-Service in WLAN due to buffer over-read while parsing MDNS frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon…

  • CVE-2022-25669HigSep 16, 2022
    risk 0.49cvss 7.5epss 0.00

    Denial of service in video due to buffer over read while parsing MP4 clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

  • CVE-2022-22067HigSep 2, 2022
    risk 0.49cvss 7.5epss 0.00

    Potential memory leak in modem during the processing of NSA RRC Reconfiguration with invalid Radio Bearer Config in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile

  • CVE-2022-22083HigJun 14, 2022
    risk 0.49cvss 7.5epss 0.01

    Denial of service due to memory corruption while extracting ape header from clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

  • CVE-2021-35111HigJun 14, 2022
    risk 0.49cvss 7.5epss 0.00

    Improper validation of tag id while RRC sending tag id to MAC can lead to TOCTOU race condition in Snapdragon Connectivity, Snapdragon Mobile

  • CVE-2021-35078HigJun 14, 2022
    risk 0.49cvss 7.5epss 0.00

    Possible memory leak due to improper validation of certificate chain length while parsing server certificate chain in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

  • CVE-2021-30340HigJun 14, 2022
    risk 0.49cvss 7.5epss 0.01

    Reachable assertion due to improper validation of coreset in PDCCH configuration in SA mode in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

  • CVE-2021-30332HigApr 1, 2022
    risk 0.49cvss 7.5epss 0.01

    Possible assertion due to improper validation of OTA configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

Page 9 of 15