Qcn5021 Firmware (Qualcomm) - vulnerabilities (CVEs)

149 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-09-17. Vendor: Qualcomm.

CVEs of Qcn5021 Firmware

CVE-2026-25275 - CVSS 7.5 (high), 2026-09-17: Transient DOS when processing authentication frames with invalid FILS information element header lengths.
CVE-2025-27066 - CVSS 7.5 (high), 2025-08-06: Transient DOS while processing an ANQP message.
CVE-2025-21465 - CVSS 6.5 (medium), 2025-08-06: Information disclosure while processing the hash segment in an MBN file.
CVE-2025-21464 - CVSS 6.5 (medium), 2025-08-06: Information disclosure while reading data from an image using specified offset and size parameters.
CVE-2025-21448 - CVSS 7.5 (high), 2025-04-07: Transient DOS may occur while parsing SSID in action frames.
CVE-2024-43046 - CVSS 5.5 (medium), 2025-04-07: There may be information disclosure during memory re-allocation in TZ Secure OS.
CVE-2024-43057 - CVSS 7.8 (high), 2025-03-03: Memory corruption while processing command in Glink linux.
CVE-2024-33016 - CVSS 6.8 (medium), 2024-09-02: memory corruption when an invalid firehose patch command is invoked.
CVE-2024-33014 - CVSS 7.5 (high), 2024-08-05: Transient DOS while parsing ESP IE from beacon/probe response frame.
CVE-2024-23368 - CVSS 7.8 (high), 2024-07-01: Memory corruption when allocating and accessing an entry in an SMEM partition.
CVE-2024-21462 - CVSS 7.1 (high), 2024-07-01: Transient DOS while loading the TA ELF file.
CVE-2024-21473 - CVSS 9.8 (critical), 2024-04-01: Memory corruption while redirecting log file to any file location with any file name.
CVE-2023-33105 - CVSS 7.5 (high), 2024-03-04: Transient DOS in WLAN Host and Firmware when large number of open authentication frames are sent with an invalid transaction sequence number.
CVE-2023-28578 - CVSS 9.3 (critical), 2024-03-04: Memory corruption in Core Services while executing the command for removing a single event listener.
CVE-2023-43536 - CVSS 7.5 (high), 2024-02-06: Transient DOS while parse fils IE with length equal to 1.
CVE-2023-43522 - CVSS 7.5 (high), 2024-02-06: Transient DOS while key unwrapping process, when the given encrypted key is empty or NULL.
CVE-2023-43511 - CVSS 7.5 (high), 2024-01-02: Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header.
CVE-2023-33109 - CVSS 7.5 (high), 2024-01-02: Transient DOS while processing a WMI P2P listen start command (0xD00A) sent from host.
CVE-2023-33062 - CVSS 7.5 (high), 2024-01-02: Transient DOS in WLAN Firmware while parsing a BTM request.
CVE-2023-33030 - CVSS 9.3 (critical), 2024-01-02: Memory corruption in HLOS while running playready use-case.
CVE-2023-33032 - CVSS 9.3 (critical), 2024-01-02: Memory corruption in TZ Secure OS while requesting a memory allocation from TA region.
CVE-2023-33098 - CVSS 7.5 (high), 2023-12-05: Transient DOS while parsing WPA IES, when it is passed with length more than expected size.
CVE-2023-33088 - CVSS 8.4 (high), 2023-12-05: Memory corruption when processing cmd parameters while parsing vdev.
CVE-2023-33083 - CVSS 9.8 (critical), 2023-12-05: Memory corruption in WLAN Host while processing RRM beacon on the AP.
CVE-2023-33082 - CVSS 9.8 (critical), 2023-12-05: Memory corruption while sending an Assoc Request having BTM Query or BTM Response containing MBO IE.
CVE-2023-33089 - CVSS 7.5 (high), 2023-12-05: Transient DOS when processing a NULL buffer while parsing WLAN vdev.
CVE-2023-33080 - CVSS 7.5 (high), 2023-12-05: Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame.
CVE-2023-33041 - CVSS 7.5 (high), 2023-12-05: Under certain scenarios the WLAN Firmware will reach an assertion due to state confusion while looking up peer ids.
CVE-2023-28586 - CVSS 6.5 (medium), 2023-12-05: Information disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE.
CVE-2023-28585 - CVSS 8.8 (high), 2023-12-05: Memory corruption while loading an ELF segment in TEE Kernel.
CVE-2023-28550 - CVSS 7.8 (high), 2023-12-05: Memory corruption in MPP performance while accessing DSM watermark using external memory address.
CVE-2023-28554 - CVSS 6.1 (medium), 2023-11-07: Information Disclosure in Qualcomm IPC while reading values from shared memory in VM.
CVE-2023-24852 - CVSS 8.4 (high), 2023-11-07: Memory Corruption in Core due to secure memory access by user while loading modem image.
CVE-2023-33027 - CVSS 7.5 (high), 2023-10-03: Transient DOS in WLAN Firmware while parsing rsn ies.
CVE-2023-33026 - CVSS 7.5 (high), 2023-10-03: Transient DOS in WLAN Firmware while parsing a NAN management frame.
CVE-2023-24847 - CVSS 7.5 (high), 2023-10-03: Transient DOS in Modem while allocating DSM items.
CVE-2023-33015 - CVSS 7.5 (high), 2023-09-05: Transient DOS in WLAN Firmware while interpreting MBSSID IE of a received beacon frame.
CVE-2023-28573 - CVSS 7.8 (high), 2023-09-05: Memory corruption in WLAN HAL while parsing WMI command parameters.
CVE-2023-28567 - CVSS 7.8 (high), 2023-09-05: Memory corruption in WLAN HAL while handling command through WMI interfaces.
CVE-2023-28549 - CVSS 7.8 (high), 2023-09-05: Memory corruption in WLAN HAL while parsing Rx buffer in processing TLV payload.
CVE-2023-28564 - CVSS 7.8 (high), 2023-09-05: Memory corruption in WLAN HAL while passing command parameters through WMI interfaces.
CVE-2023-28548 - CVSS 7.8 (high), 2023-09-05: Memory corruption in WLAN HAL while processing Tx/Rx commands from QDART.
CVE-2023-28560 - CVSS 7.8 (high), 2023-09-05: Memory corruption in WLAN HAL while processing devIndex from untrusted WMI payload.
CVE-2023-28557 - CVSS 7.8 (high), 2023-09-05: Memory corruption in WLAN HAL while processing command parameters from untrusted WMI payload.
CVE-2022-33275 - CVSS 8.4 (high), 2023-09-05: Memory corruption due to improper validation of array index in WLAN HAL when received lm_itemNum is out of range.
CVE-2023-22387 - CVSS 7.8 (high), 2023-07-04: Arbitrary memory overwrite when VM gets compromised in TX write leading to Memory Corruption.
CVE-2023-21659 - CVSS 7.5 (high), 2023-06-06: Transient DOS in WLAN Firmware while processing frames with missing header fields.
CVE-2022-40522 - CVSS 8.4 (high), 2023-06-06: Memory corruption in Linux Networking due to double free while handling a hyp-assign.
CVE-2023-21628 - CVSS 8.4 (high), 2023-06-06: Memory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command.
CVE-2022-40525 - CVSS 7.1 (high), 2023-06-06: Information disclosure in Linux Networking Firmware due to unauthorized information leak during side channel analysis.
CVE-2022-22076 - CVSS 7.1 (high), 2023-06-06: information disclosure due to cryptographic issue in Core during RPMB read request.
CVE-2022-40532 - CVSS 8.4 (high), 2023-04-13: Memory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target.
CVE-2022-40531 - CVSS 8.4 (high), 2023-03-10: Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message.
CVE-2022-40530 - CVSS 8.4 (high), 2023-03-10: Memory corruption in WLAN due to integer overflow to buffer overflow in WLAN during initialization phase.
CVE-2022-40527 - CVSS 7.5 (high), 2023-03-10: Transient DOS due to reachable assertion in WLAN while processing PEER ID populated by TQM.
CVE-2022-25655 - CVSS 8.4 (high), 2023-03-10: Memory corruption in WLAN HAL while arbitrary value is passed in WMI UTF command payload.
CVE-2022-40512 - CVSS 7.5 (high), 2023-02-12: Transient DOS in WLAN Firmware due to buffer over-read while processing probe response or beacon.
CVE-2022-33271 - CVSS 8.2 (high), 2023-02-12: Information disclosure due to buffer over-read in WLAN while parsing NMF frame.
CVE-2022-33277 - CVSS 8.4 (high), 2023-02-12: Memory corruption in modem due to buffer copy without checking size of input while receiving WMI command.
CVE-2022-40519 - CVSS 6.8 (medium), 2023-01-09: Information disclosure due to buffer overread in Core
CVE-2022-40517 - CVSS 8.4 (high), 2023-01-09: Memory corruption in core due to stack-based buffer overflow
CVE-2022-33283 - CVSS 8.2 (high), 2023-01-09: Information disclosure due to buffer over-read in WLAN while WLAN frame parsing due to missing frame length check.
CVE-2022-33286 - CVSS 7.5 (high), 2023-01-09: Transient DOS due to buffer over-read in WLAN while processing 802.11 management frames.
CVE-2022-33276 - CVSS 8.4 (high), 2023-01-09: Memory corruption due to buffer copy without checking size of input in modem while receiving WMI_REQUEST_STATS_CMDID command.
CVE-2022-33285 - CVSS 7.5 (high), 2023-01-09: Transient DOS due to buffer over-read in WLAN while parsing WLAN CSA action frames.
CVE-2022-33253 - CVSS 7.5 (high), 2023-01-09: Transient DOS due to buffer over-read in WLAN while parsing corrupted NAN frames.
CVE-2022-33284 - CVSS 8.2 (high), 2023-01-09: Information disclosure due to buffer over-read in WLAN while parsing BTM action frame.
CVE-2022-40516 - CVSS 8.4 (high), 2023-01-09: Memory corruption in Core due to stack-based buffer overflow.
CVE-2022-33252 - CVSS 8.2 (high), 2023-01-09: Information disclosure due to buffer over-read in WLAN while handling IBSS beacons frame.
CVE-2022-33238 - CVSS 7.5 (high), 2022-12-13: Transient DOS due to loop with unreachable exit condition in WLAN while processing an incoming FTM frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2022-33235 - CVSS 8.2 (high), 2022-12-13: Information disclosure due to buffer over-read in WLAN firmware while parsing security context info attributes. in Snapdragon Auto, Snapdragon Compute,…
CVE-2022-25677 - CVSS 7.8 (high), 2022-12-13: Memory corruption in diag due to use after free while processing dci packet in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon…
CVE-2022-33239 - CVSS 7.5 (high), 2022-11-15: Transient DOS due to loop with unreachable exit condition in WLAN firmware while parsing IPV6 extension header. in Snapdragon Auto, Snapdragon Compute,…
CVE-2022-33237 - CVSS 7.5 (high), 2022-11-15: Transient DOS due to buffer over-read in WLAN firmware while processing PPE threshold. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
CVE-2022-25749 - CVSS 7.5 (high), 2022-10-19: Transient Denial-of-Service in WLAN due to buffer over-read while parsing MDNS frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
CVE-2022-25748 - CVSS 9.8 (critical), 2022-10-19: Memory corruption in WLAN due to integer overflow to buffer overflow while parsing GTK frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2022-25736 - CVSS 7.5 (high), 2022-10-19: Denial of service in WLAN due to out-of-bound read happens while processing VHT action frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
CVE-2022-25666 - CVSS 6.7 (medium), 2022-10-19: Memory corruption due to use after free in service while trying to access maps by different threads in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2022-25652 - CVSS 9 (critical), 2022-09-16: Cryptographic issues in BSP due to improper hash verification in Snapdragon Wired Infrastructure and Networking
CVE-2021-35071 - CVSS 5.5 (medium), 2022-06-14: Possible buffer over read due to lack of size validation while copying data from DBR buffer to RX buffer and can lead to Denial of Service in Snapdragon Auto,…
CVE-2021-30349 - CVSS 8.2 (high), 2022-06-14: Improper access control sequence for AC database after memory allocation can lead to possible memory corruption in Snapdragon Auto, Snapdragon Compute,…
CVE-2021-30281 - CVSS 8.4 (high), 2022-06-14: Possible unauthorized access to secure space due to improper check of data allowed while flashing the no access control device configuration in Snapdragon…
CVE-2021-1950 - CVSS 7.8 (high), 2022-04-01: Improper cleaning of secure memory between authenticated users can lead to face authentication bypass in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2021-35103 - CVSS 7.8 (high), 2022-04-01: Possible out of bound write due to improper validation of number of timer values received from firmware while syncing timers in Snapdragon Auto, Snapdragon…
CVE-2021-35088 - CVSS 9.1 (critical), 2022-04-01: Possible out of bound read due to improper validation of IE length during SSID IE parse when channel is DFS in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2021-30324 - CVSS 6.7 (medium), 2022-02-11: Possible out of bound write due to lack of boundary check for the maximum size of buffer when sending a DCI packet to remote process in Snapdragon Auto,…
CVE-2021-35069 - CVSS 7.8 (high), 2022-02-11: Improper validation of data length received from DMA buffer can lead to memory corruption. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
CVE-2021-30325 - CVSS 6.7 (medium), 2022-02-11: Possible out of bound access of DCI resources due to lack of validation process and resource allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2021-30313 - CVSS 6.7 (medium), 2022-01-13: Use after free condition can occur in wired connectivity due to a race condition while creating and deleting folders in Snapdragon Auto, Snapdragon Compute,…
CVE-2021-30335 - CVSS 8.4 (high), 2022-01-03: Possible assertion in QOS request due to improper validation when multiple add or update request are received simultaneously in Snapdragon Auto, Snapdragon…
CVE-2021-30275 - CVSS 9.3 (critical), 2022-01-03: Possible integer overflow in page alignment interface due to lack of address and size validation before alignment in Snapdragon Auto, Snapdragon Compute,…
CVE-2021-30303 - CVSS 7.8 (high), 2022-01-03: Possible buffer overflow due to lack of buffer length check when segmented WMI command is received in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2021-30274 - CVSS 8.4 (high), 2022-01-03: Possible integer overflow in access control initialization interface due to lack and size and address validation in Snapdragon Auto, Snapdragon Compute,…
CVE-2021-30282 - CVSS 8.4 (high), 2022-01-03: Possible out of bound write in RAM partition table due to improper validation on number of partitions provided in Snapdragon Auto, Snapdragon Compute,…
CVE-2021-30337 - CVSS 8.4 (high), 2022-01-03: Possible use after free when process shell memory is freed using IOCTL call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute,…
CVE-2021-30272 - CVSS 7.8 (high), 2022-01-03: Possible null pointer dereference in thread cache operation handler due to lack of validation of user provided input in Snapdragon Auto, Snapdragon Compute,…
CVE-2021-30278 - CVSS 7.1 (high), 2022-01-03: Improper input validation in TrustZone memory transfer interface can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2021-30266 - CVSS 6.7 (medium), 2021-11-12: Possible use after free due to improper memory validation when initializing new interface via Interface add command in Snapdragon Auto, Snapdragon Compute,…
CVE-2021-30264 - CVSS 6.7 (medium), 2021-11-12: Possible use after free due improper validation of reference from call back to internal store table in Snapdragon Auto, Snapdragon Connectivity, Snapdragon…
CVE-2021-1924 - CVSS 9 (critical), 2021-11-12: Information disclosure through timing and power side-channels during mod exponentiation for RSA-CRT in Snapdragon Auto, Snapdragon Compute, Snapdragon…