Ipq6028 Firmware

CVEs (144)

• CVE-2020-11275CriFeb 22, 2021
  Qualcomm

  Snapdragon
  risk 0.59cvss 9.1epss 0.01

  Possible buffer over-read while parsing quiet IE in Rx beacon frame due to improper check of IE length in received beacon in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial…

• CVE-2020-11269HigFeb 22, 2021
  Qualcomm

  Snapdragon
  risk 0.57cvss 8.8epss 0.00

  Possible memory corruption while processing EAPOL frames due to lack of validation of key length before using it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…

• CVE-2024-33056HigDec 2, 2024
  Qualcomm

  SMEM partition
  risk 0.55cvss 8.4epss 0.00

  Memory corruption when allocating and accessing an entry in an SMEM partition continuously.

• CVE-2023-33088HigDec 5, 2023
  Qualcomm

  vdev
  risk 0.55cvss 8.4epss 0.00

  Memory corruption when processing cmd parameters while parsing vdev.

• CVE-2023-33053HigDec 5, 2023
  Qualcomm

  kernel
  risk 0.55cvss 8.4epss 0.00

  Memory corruption in Kernel while parsing metadata.

• CVE-2023-24852HigNov 7, 2023
  Qualcomm

  Core
  risk 0.55cvss 8.4epss 0.00

  Memory Corruption in Core due to secure memory access by user while loading modem image.

• CVE-2022-40531HigMar 10, 2023
  Qualcomm

  WLAN
  risk 0.55cvss 8.4epss 0.00

  Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message.

• CVE-2022-33277HigFeb 12, 2023
  Qualcomm

  Modem
  risk 0.55cvss 8.4epss 0.00

  Memory corruption in modem due to buffer copy without checking size of input while receiving WMI command.

• CVE-2021-30337HigJan 3, 2022
  Qualcomm

  Snapdragon
  risk 0.55cvss 8.4epss 0.00

  Possible use after free when process shell memory is freed using IOCTL call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,…

• CVE-2021-30335HigJan 3, 2022
  Qualcomm

  Snapdragon
  risk 0.55cvss 8.4epss 0.00

  Possible assertion in QOS request due to improper validation when multiple add or update request are received simultaneously in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice &…

• CVE-2021-30282HigJan 3, 2022
  Qualcomm

  Snapdragon
  risk 0.55cvss 8.4epss 0.00

  Possible out of bound write in RAM partition table due to improper validation on number of partitions provided in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wired…

• CVE-2021-30288HigOct 20, 2021
  Qualcomm

  Snapdragon
  risk 0.55cvss 8.4epss 0.00

  Possible stack overflow due to improper length check of TLV while copying the TLV to a local stack variable in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…

• CVE-2021-30260HigSep 17, 2021
  Qualcomm

  Snapdragon
  risk 0.55cvss 8.4epss 0.00

  Possible Integer overflow to buffer overflow issue can occur due to improper validation of input parameters when extscan hostlist configuration command is received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity,…

• CVE-2021-1927HigMay 7, 2021
  Qualcomm

  Snapdragon
  risk 0.55cvss 8.4epss 0.00

  Possible use after free due to lack of null check while memory is being freed in FastRPC driver in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables,…

• CVE-2021-1891HigMay 7, 2021
  Qualcomm

  Snapdragon
  risk 0.55cvss 8.4epss 0.00

  A possible use-after-free occurrence in audio driver can happen when pointers are not properly handled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon…

• CVE-2023-28585HigDec 5, 2023
  Qualcomm

  TEE Kernel
  risk 0.53cvss 8.2epss 0.00

  Memory corruption while loading an ELF segment in TEE Kernel.

• CVE-2022-33252HigJan 9, 2023
  Qualcomm

  WLAN
  risk 0.53cvss 8.2epss 0.00

  Information disclosure due to buffer over-read in WLAN while handling IBSS beacons frame.

• CVE-2022-33235HigDec 13, 2022
  Qualcomm

  WLAN Firmware
  risk 0.53cvss 8.2epss 0.00

  Information disclosure due to buffer over-read in WLAN firmware while parsing security context info attributes. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…

• CVE-2021-30349HigJun 14, 2022
  Qualcomm

  Snapdragon
  risk 0.53cvss 8.2epss 0.00

  Improper access control sequence for AC database after memory allocation can lead to possible memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables,…

• CVE-2021-35088HigApr 1, 2022
  Qualcomm

  Snapdragon
  risk 0.53cvss 8.2epss 0.01

  Possible out of bound read due to improper validation of IE length during SSID IE parse when channel is DFS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon…