Snapdragon X75 5g Modem Rf Firmware
by Qualcomm
CVEs (83)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2025-21449 | Hig | 0.49 | 7.5 | 0.00 | Jul 8, 2025 | Transient DOS may occur while processing malformed length field in SSID IEs. | ||
| CVE-2025-21446 | Hig | 0.49 | 7.5 | 0.00 | Jul 8, 2025 | Transient DOS may occur when processing vendor-specific information elements while parsing a WLAN frame for BTM requests. | ||
| CVE-2025-21459 | Hig | 0.49 | 7.5 | 0.00 | May 6, 2025 | Transient DOS while parsing per STA profile in ML IE. | ||
| CVE-2024-49847 | Hig | 0.49 | 7.5 | 0.00 | May 6, 2025 | Transient DOS while processing of a registration acceptance OTA due to incorrect ciphering key data IE. | ||
| CVE-2024-45558 | Hig | 0.49 | 7.5 | 0.00 | Jan 6, 2025 | Transient DOS can occur when the driver parses the per STA profile IE and tries to access the EXTN element ID without checking the IE length. | ||
| CVE-2024-23363 | Hig | 0.49 | 7.5 | 0.00 | Jun 3, 2024 | Transient DOS while processing an improperly formatted Fine Time Measurement (FTM) management frame. | ||
| CVE-2024-21477 | Hig | 0.49 | 7.5 | 0.00 | May 6, 2024 | Transient DOS while parsing a protected 802.11az Fine Time Measurement (FTM) frame. | ||
| CVE-2023-43529 | Hig | 0.49 | 7.5 | 0.00 | May 6, 2024 | Transient DOS while processing IKEv2 Informational request messages, when a malformed fragment packet is received. | ||
| CVE-2023-33101 | Hig | 0.49 | 7.5 | 0.00 | Apr 1, 2024 | Transient DOS while processing DL NAS TRANSPORT message with payload length 0. | ||
| CVE-2023-33100 | Hig | 0.49 | 7.5 | 0.00 | Apr 1, 2024 | Transient DOS while processing DL NAS Transport message when message ID is not defined in the 3GPP specification. | ||
| CVE-2023-33099 | Hig | 0.49 | 7.5 | 0.00 | Apr 1, 2024 | Transient DOS while processing SMS container of non-standard size received in DL NAS transport in NR. | ||
| CVE-2023-43539 | Hig | 0.49 | 7.5 | 0.00 | Mar 4, 2024 | Transient DOS while processing an improperly formatted 802.11az Fine Time Measurement protocol frame. | ||
| CVE-2023-33105 | Hig | 0.49 | 7.5 | 0.01 | Mar 4, 2024 | Transient DOS in WLAN Host and Firmware when large number of open authentication frames are sent with an invalid transaction sequence number. | ||
| CVE-2023-33104 | Hig | 0.49 | 7.5 | 0.00 | Mar 4, 2024 | Transient DOS while processing PDU Release command with a parameter PDU ID out of range. | ||
| CVE-2023-33103 | Hig | 0.49 | 7.5 | 0.00 | Mar 4, 2024 | Transient DOS while processing CAG info IE received from NW. | ||
| CVE-2023-33096 | Hig | 0.49 | 7.5 | 0.00 | Mar 4, 2024 | Transient DOS while processing DL NAS Transport message, as specified in 3GPP 24.501 v16. | ||
| CVE-2023-33095 | Hig | 0.49 | 7.5 | 0.00 | Mar 4, 2024 | Transient DOS while processing multiple payload container type with incorrect container length received in DL NAS transport OTA in NR. | ||
| CVE-2023-33086 | Hig | 0.49 | 7.5 | 0.00 | Mar 4, 2024 | Transient DOS while processing multiple IKEV2 Informational Request to device from IPSEC server with different identifiers. | ||
| CVE-2023-33084 | Hig | 0.49 | 7.5 | 0.00 | Mar 4, 2024 | Transient DOS while processing IE fragments from server during DTLS handshake. | ||
| CVE-2024-21480 | Hig | 0.47 | 7.3 | 0.00 | May 6, 2024 | Memory corruption while playing audio file having large-sized input buffer. |
- risk 0.49cvss 7.5epss 0.00
Transient DOS may occur while processing malformed length field in SSID IEs.
- risk 0.49cvss 7.5epss 0.00
Transient DOS may occur when processing vendor-specific information elements while parsing a WLAN frame for BTM requests.
- risk 0.49cvss 7.5epss 0.00
Transient DOS while parsing per STA profile in ML IE.
- risk 0.49cvss 7.5epss 0.00
Transient DOS while processing of a registration acceptance OTA due to incorrect ciphering key data IE.
- risk 0.49cvss 7.5epss 0.00
Transient DOS can occur when the driver parses the per STA profile IE and tries to access the EXTN element ID without checking the IE length.
- risk 0.49cvss 7.5epss 0.00
Transient DOS while processing an improperly formatted Fine Time Measurement (FTM) management frame.
- risk 0.49cvss 7.5epss 0.00
Transient DOS while parsing a protected 802.11az Fine Time Measurement (FTM) frame.
- risk 0.49cvss 7.5epss 0.00
Transient DOS while processing IKEv2 Informational request messages, when a malformed fragment packet is received.
- risk 0.49cvss 7.5epss 0.00
Transient DOS while processing DL NAS TRANSPORT message with payload length 0.
- risk 0.49cvss 7.5epss 0.00
Transient DOS while processing DL NAS Transport message when message ID is not defined in the 3GPP specification.
- risk 0.49cvss 7.5epss 0.00
Transient DOS while processing SMS container of non-standard size received in DL NAS transport in NR.
- risk 0.49cvss 7.5epss 0.00
Transient DOS while processing an improperly formatted 802.11az Fine Time Measurement protocol frame.
- risk 0.49cvss 7.5epss 0.01
Transient DOS in WLAN Host and Firmware when large number of open authentication frames are sent with an invalid transaction sequence number.
- risk 0.49cvss 7.5epss 0.00
Transient DOS while processing PDU Release command with a parameter PDU ID out of range.
- risk 0.49cvss 7.5epss 0.00
Transient DOS while processing CAG info IE received from NW.
- risk 0.49cvss 7.5epss 0.00
Transient DOS while processing DL NAS Transport message, as specified in 3GPP 24.501 v16.
- risk 0.49cvss 7.5epss 0.00
Transient DOS while processing multiple payload container type with incorrect container length received in DL NAS transport OTA in NR.
- risk 0.49cvss 7.5epss 0.00
Transient DOS while processing multiple IKEV2 Informational Request to device from IPSEC server with different identifiers.
- risk 0.49cvss 7.5epss 0.00
Transient DOS while processing IE fragments from server during DTLS handshake.
- risk 0.47cvss 7.3epss 0.00
Memory corruption while playing audio file having large-sized input buffer.
Page 3 of 5