Qcn5021 Firmware

CVEs (92)

• CVE-2022-33277HigFeb 12, 2023
  Qualcomm

  Modem
  risk 0.55cvss 8.4epss 0.00

  Memory corruption in modem due to buffer copy without checking size of input while receiving WMI command.

• CVE-2021-30337HigJan 3, 2022
  Qualcomm

  Snapdragon
  risk 0.55cvss 8.4epss 0.00

  Possible use after free when process shell memory is freed using IOCTL call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,…

• CVE-2021-30335HigJan 3, 2022
  Qualcomm

  Snapdragon
  risk 0.55cvss 8.4epss 0.00

  Possible assertion in QOS request due to improper validation when multiple add or update request are received simultaneously in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice &…

• CVE-2021-30282HigJan 3, 2022
  Qualcomm

  Snapdragon
  risk 0.55cvss 8.4epss 0.00

  Possible out of bound write in RAM partition table due to improper validation on number of partitions provided in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wired…

• CVE-2021-30288HigOct 20, 2021
  Qualcomm

  Snapdragon
  risk 0.55cvss 8.4epss 0.00

  Possible stack overflow due to improper length check of TLV while copying the TLV to a local stack variable in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…

• CVE-2021-30260HigSep 17, 2021
  Qualcomm

  Snapdragon
  risk 0.55cvss 8.4epss 0.00

  Possible Integer overflow to buffer overflow issue can occur due to improper validation of input parameters when extscan hostlist configuration command is received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity,…

• CVE-2021-1927HigMay 7, 2021
  Qualcomm

  Snapdragon
  risk 0.55cvss 8.4epss 0.00

  Possible use after free due to lack of null check while memory is being freed in FastRPC driver in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables,…

• CVE-2023-28585HigDec 5, 2023
  Qualcomm

  TEE Kernel
  risk 0.53cvss 8.2epss 0.00

  Memory corruption while loading an ELF segment in TEE Kernel.

• CVE-2022-33252HigJan 9, 2023
  Qualcomm

  WLAN
  risk 0.53cvss 8.2epss 0.00

  Information disclosure due to buffer over-read in WLAN while handling IBSS beacons frame.

• CVE-2022-33235HigDec 13, 2022
  Qualcomm

  WLAN Firmware
  risk 0.53cvss 8.2epss 0.00

  Information disclosure due to buffer over-read in WLAN firmware while parsing security context info attributes. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…

• CVE-2021-30349HigJun 14, 2022
  Qualcomm

  Snapdragon
  risk 0.53cvss 8.2epss 0.00

  Improper access control sequence for AC database after memory allocation can lead to possible memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables,…

• CVE-2021-35088HigApr 1, 2022
  Qualcomm

  Snapdragon
  risk 0.53cvss 8.2epss 0.01

  Possible out of bound read due to improper validation of IE length during SSID IE parse when channel is DFS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon…

• CVE-2020-11191HigApr 7, 2021
  Qualcomm

  Snapdragon
  risk 0.53cvss 8.2epss 0.01

  Out of bound read occurs while processing crafted SDP due to lack of check of null string in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon…

• CVE-2023-28550HigDec 5, 2023
  Qualcomm

  MPP
  risk 0.51cvss 7.8epss 0.00

  Memory corruption in MPP performance while accessing DSM watermark using external memory address.

• CVE-2023-28560HigSep 5, 2023
  Qualcomm

  WLAN HAL
  risk 0.51cvss 7.8epss 0.00

  Memory corruption in WLAN HAL while processing devIndex from untrusted WMI payload.

• CVE-2023-28557HigSep 5, 2023
  Qualcomm

  WLAN HAL
  risk 0.51cvss 7.8epss 0.00

  Memory corruption in WLAN HAL while processing command parameters from untrusted WMI payload.

• CVE-2023-28549HigSep 5, 2023
  Qualcomm

  WLAN HAL
  risk 0.51cvss 7.8epss 0.00

  Memory corruption in WLAN HAL while parsing Rx buffer in processing TLV payload.

• CVE-2023-28548HigSep 5, 2023
  Qualcomm

  WLAN HAL
  risk 0.51cvss 7.8epss 0.00

  Memory corruption in WLAN HAL while processing Tx/Rx commands from QDART.

• CVE-2021-35103HigApr 1, 2022
  Qualcomm

  Snapdragon
  risk 0.51cvss 7.8epss 0.00

  Possible out of bound write due to improper validation of number of timer values received from firmware while syncing timers in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired…

• CVE-2021-1950HigApr 1, 2022
  Qualcomm

  Snapdragon
  risk 0.51cvss 7.8epss 0.00

  Improper cleaning of secure memory between authenticated users can lead to face authentication bypass in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking