Qcn7605 Firmware

CVEs (191)

• CVE-2023-33088HigDec 5, 2023
  Qualcomm

  vdev
  risk 0.55cvss 8.4epss 0.00

  Memory corruption when processing cmd parameters while parsing vdev.

• CVE-2023-21628HigJun 6, 2023
  Qualcomm

  WLAN HAL
  risk 0.55cvss 8.4epss 0.00

  Memory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command.

• CVE-2022-40532HigApr 13, 2023
  Qualcomm

  WLAN
  risk 0.55cvss 8.4epss 0.00

  Memory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target.

• CVE-2022-40531HigMar 10, 2023
  Qualcomm

  WLAN
  risk 0.55cvss 8.4epss 0.00

  Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message.

• CVE-2022-40530HigMar 10, 2023
  Qualcomm

  WLAN
  risk 0.55cvss 8.4epss 0.00

  Memory corruption in WLAN due to integer overflow to buffer overflow in WLAN during initialization phase.

• CVE-2022-33277HigFeb 12, 2023
  Qualcomm

  Modem
  risk 0.55cvss 8.4epss 0.00

  Memory corruption in modem due to buffer copy without checking size of input while receiving WMI command.

• CVE-2022-22058HigSep 26, 2022
  Qualcomm

  Snapdragon
  risk 0.55cvss 8.4epss 0.00

  Memory corruption due to use after free issue in kernel while processing ION handles in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon…

• CVE-2021-30288HigOct 20, 2021
  Qualcomm

  Snapdragon
  risk 0.55cvss 8.4epss 0.00

  Possible stack overflow due to improper length check of TLV while copying the TLV to a local stack variable in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…

• CVE-2021-30260HigSep 17, 2021
  Qualcomm

  Snapdragon
  risk 0.55cvss 8.4epss 0.00

  Possible Integer overflow to buffer overflow issue can occur due to improper validation of input parameters when extscan hostlist configuration command is received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity,…

• CVE-2021-1892HigApr 7, 2021
  Qualcomm

  Snapdragon Compute
  risk 0.55cvss 8.4epss 0.00

  Memory corruption due to improper input validation while processing IO control which is nonstandard in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Wired Infrastructure and Networking

• CVE-2020-11234HigApr 7, 2021
  Qualcomm

  Snapdragon
  risk 0.55cvss 8.4epss 0.00

  When sending a socket event message to a user application, invalid information will be passed if socket is freed by other thread resulting in a Use After Free condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity,…

• CVE-2024-38408HigNov 4, 2024
  Qualcomm

  Controller
  risk 0.53cvss 8.2epss 0.00

  Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.

• CVE-2022-33271HigFeb 12, 2023
  Qualcomm

  WLAN
  risk 0.53cvss 8.2epss 0.00

  Information disclosure due to buffer over-read in WLAN while parsing NMF frame.

• CVE-2022-33235HigDec 13, 2022
  Qualcomm

  WLAN Firmware
  risk 0.53cvss 8.2epss 0.00

  Information disclosure due to buffer over-read in WLAN firmware while parsing security context info attributes. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…

• CVE-2022-22062HigSep 2, 2022
  Qualcomm

  Snapdragon
  risk 0.53cvss 8.2epss 0.00

  An out-of-bounds read can occur while parsing a server certificate due to improper length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT,…

• CVE-2021-35083HigJun 14, 2022
  Qualcomm

  Snapdragon
  risk 0.53cvss 8.2epss 0.01

  Possible out of bound read due to improper validation of certificate chain in SSL or Internet key exchange in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…

• CVE-2020-11156HigNov 2, 2020
  Qualcomm

  Snapdragon
  risk 0.53cvss 8.1epss 0.00

  u'Buffer over-read issue in Bluetooth estack due to lack of check for invalid length of L2cap packet received from peer device.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon…

• CVE-2020-11141HigNov 2, 2020
  Qualcomm

  Snapdragon
  risk 0.53cvss 8.1epss 0.00

  u'Buffer over-read issue in Bluetooth estack due to lack of check for invalid length of L2cap configuration request received from peer device.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT,…

• CVE-2019-10494HigDec 12, 2019
  Qualcomm

  Snapdragon
  risk 0.53cvss 8.1epss 0.00

  Race condition between the camera functions due to lack of resource lock which will lead to memory corruption and UAF issue in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice &…

• CVE-2025-21439HigApr 7, 2025
  Qualcomm

  WLAN driver
  risk 0.51cvss 7.8epss 0.00

  Memory corruption may occur while reading board data via IOCTL call when the WLAN driver copies the content to the provided output buffer.