Qcs410 Firmware

CVEs (329)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2023-43533	Qualcomm WLAN Firmware	Hig	0.49	7.5	0.00	Feb 6, 2024	Transient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame.
CVE-2023-43511	Qualcomm WLAN Firmware	Hig	0.49	7.5	0.00	Jan 2, 2024	Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header.
CVE-2023-33112	Qualcomm WLAN Firmware	Hig	0.49	7.5	0.00	Jan 2, 2024	Transient DOS when WLAN firmware receives "reassoc response" frame including RIC_DATA element.
CVE-2023-33062	Qualcomm WLAN Firmware	Hig	0.49	7.5	0.00	Jan 2, 2024	Transient DOS in WLAN Firmware while parsing a BTM request.
CVE-2023-33040	Qualcomm Data Modem	Hig	0.49	7.5	0.00	Jan 2, 2024	Transient DOS in Data Modem during DTLS handshake.
CVE-2023-28588	Qualcomm Bluetooth HOST	Hig	0.49	7.5	0.01	Dec 5, 2023	Transient DOS in Bluetooth Host while rfc slot allocation.
CVE-2023-28584	Qualcomm WLAN Host	Hig	0.49	7.5	0.00	Sep 5, 2023	Transient DOS in WLAN Host when a mobile station receives invalid channel in CSA IE while doing channel switch announcement (CSA).
CVE-2023-21659	Qualcomm WLAN Firmware	Hig	0.49	7.5	0.00	Jun 6, 2023	Transient DOS in WLAN Firmware while processing frames with missing header fields.
CVE-2022-40521	Qualcomm Modem	Hig	0.49	7.5	0.00	Jun 6, 2023	Transient DOS due to improper authorization in Modem
CVE-2022-34146	Qualcomm WLAN Host	Hig	0.49	7.5	0.00	Feb 12, 2023	Transient DOS due to improper input validation in WLAN Host while parsing frame during defragmentation.
CVE-2022-33238	Qualcomm Snapdragon	Hig	0.49	7.5	0.00	Dec 13, 2022	Transient DOS due to loop with unreachable exit condition in WLAN while processing an incoming FTM frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…
CVE-2022-33237	Qualcomm Snapdragon	Hig	0.49	7.5	0.00	Nov 15, 2022	Transient DOS due to buffer over-read in WLAN firmware while processing PPE threshold. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon…
CVE-2022-25749	Qualcomm Snapdragon	Hig	0.49	7.5	0.00	Oct 19, 2022	Transient Denial-of-Service in WLAN due to buffer over-read while parsing MDNS frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon…
CVE-2022-25669	Qualcomm Snapdragon	Hig	0.49	7.5	0.00	Sep 16, 2022	Denial of service in video due to buffer over read while parsing MP4 clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2022-22083	Qualcomm Snapdragon	Hig	0.49	7.5	0.01	Jun 14, 2022	Denial of service due to memory corruption while extracting ape header from clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-35078	Qualcomm Snapdragon	Hig	0.49	7.5	0.00	Jun 14, 2022	Possible memory leak due to improper validation of certificate chain length while parsing server certificate chain in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVE-2021-30330	Qualcomm Snapdragon	Hig	0.49	7.5	0.01	Jan 13, 2022	Possible null pointer dereference due to improper validation of APE clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-30307	Snapdragon Snapdragon Auto	Hig	0.49	7.5	0.01	Jan 13, 2022	Possible denial of service due to improper validation of DNS response when DNS client requests with PTR, NAPTR or SRV query type in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT
CVE-2021-30293	Qualcomm Snapdragon	Hig	0.49	7.5	0.01	Jan 3, 2022	Possible assertion due to lack of input validation in PUSCH configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT
CVE-2021-30273	Qualcomm Snapdragon	Hig	0.49	7.5	0.01	Jan 3, 2022	Possible assertion due to improper handling of IPV6 packet with invalid length in destination options header in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables

CVE-2023-43533HigFeb 6, 2024
Qualcomm
WLAN Firmware
risk 0.49cvss 7.5epss 0.00
Transient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame.
CVE-2023-43511HigJan 2, 2024
Qualcomm
WLAN Firmware
risk 0.49cvss 7.5epss 0.00
Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header.
CVE-2023-33112HigJan 2, 2024
Qualcomm
WLAN Firmware
risk 0.49cvss 7.5epss 0.00
Transient DOS when WLAN firmware receives "reassoc response" frame including RIC_DATA element.
CVE-2023-33062HigJan 2, 2024
Qualcomm
WLAN Firmware
risk 0.49cvss 7.5epss 0.00
Transient DOS in WLAN Firmware while parsing a BTM request.
CVE-2023-33040HigJan 2, 2024
Qualcomm
Data Modem
risk 0.49cvss 7.5epss 0.00
Transient DOS in Data Modem during DTLS handshake.
CVE-2023-28588HigDec 5, 2023
Qualcomm
Bluetooth HOST
risk 0.49cvss 7.5epss 0.01
Transient DOS in Bluetooth Host while rfc slot allocation.
CVE-2023-28584HigSep 5, 2023
Qualcomm
WLAN Host
risk 0.49cvss 7.5epss 0.00
Transient DOS in WLAN Host when a mobile station receives invalid channel in CSA IE while doing channel switch announcement (CSA).
CVE-2023-21659HigJun 6, 2023
Qualcomm
WLAN Firmware
risk 0.49cvss 7.5epss 0.00
Transient DOS in WLAN Firmware while processing frames with missing header fields.
CVE-2022-40521HigJun 6, 2023
Qualcomm
Modem
risk 0.49cvss 7.5epss 0.00
Transient DOS due to improper authorization in Modem
CVE-2022-34146HigFeb 12, 2023
Qualcomm
WLAN Host
risk 0.49cvss 7.5epss 0.00
Transient DOS due to improper input validation in WLAN Host while parsing frame during defragmentation.
CVE-2022-33238HigDec 13, 2022
Qualcomm
Snapdragon
risk 0.49cvss 7.5epss 0.00
Transient DOS due to loop with unreachable exit condition in WLAN while processing an incoming FTM frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…
CVE-2022-33237HigNov 15, 2022
Qualcomm
Snapdragon
risk 0.49cvss 7.5epss 0.00
Transient DOS due to buffer over-read in WLAN firmware while processing PPE threshold. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon…
CVE-2022-25749HigOct 19, 2022
Qualcomm
Snapdragon
risk 0.49cvss 7.5epss 0.00
Transient Denial-of-Service in WLAN due to buffer over-read while parsing MDNS frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon…
CVE-2022-25669HigSep 16, 2022
Qualcomm
Snapdragon
risk 0.49cvss 7.5epss 0.00
Denial of service in video due to buffer over read while parsing MP4 clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2022-22083HigJun 14, 2022
Qualcomm
Snapdragon
risk 0.49cvss 7.5epss 0.01
Denial of service due to memory corruption while extracting ape header from clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-35078HigJun 14, 2022
Qualcomm
Snapdragon
risk 0.49cvss 7.5epss 0.00
Possible memory leak due to improper validation of certificate chain length while parsing server certificate chain in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVE-2021-30330HigJan 13, 2022
Qualcomm
Snapdragon
risk 0.49cvss 7.5epss 0.01
Possible null pointer dereference due to improper validation of APE clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-30307HigJan 13, 2022
Snapdragon
Snapdragon Auto
risk 0.49cvss 7.5epss 0.01
Possible denial of service due to improper validation of DNS response when DNS client requests with PTR, NAPTR or SRV query type in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT
CVE-2021-30293HigJan 3, 2022
Qualcomm
Snapdragon
risk 0.49cvss 7.5epss 0.01
Possible assertion due to lack of input validation in PUSCH configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT
CVE-2021-30273HigJan 3, 2022
Qualcomm
Snapdragon
risk 0.49cvss 7.5epss 0.01
Possible assertion due to improper handling of IPV6 packet with invalid length in destination options header in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables

Page 11 of 17