Wcn3991 Firmware (Qualcomm) - vulnerabilities (CVEs)

472 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2024-11-22. Vendor: Qualcomm.

CVEs of Wcn3991 Firmware

• CVE-2021-30299 - CVSS 6.7 (medium), 2024-11-22: Possible out of bound access in audio module due to lack of validation of user provided input.
• CVE-2023-33087 - CVSS 7.8 (high), 2023-12-05: Memory corruption in Core while processing RX intent request.
• CVE-2023-33070 - CVSS 7.1 (high), 2023-12-05: Transient DOS in Automotive OS due to improper authentication to the secure IO calls.
• CVE-2023-33081 - CVSS 7.5 (high), 2023-12-05: Transient DOS while converting TWT (Target Wake Time) frame parameters in the OTA broadcast.
• CVE-2023-33063 - CVSS 7.8 (high), 2023-12-05: Memory corruption in DSP Services during a remote call from HLOS to DSP.
• CVE-2023-33080 - CVSS 7.5 (high), 2023-12-05: Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame.
• CVE-2023-33079 - CVSS 7.8 (high), 2023-12-05: Memory corruption in Audio while running invalid audio recording from ADSP.
• CVE-2023-33043 - CVSS 7.5 (high), 2023-12-05: Transient DOS in Modem when a Beam switch request is made with a non-configured BWP.
• CVE-2023-33042 - CVSS 7.5 (high), 2023-12-05: Transient DOS in Modem after RRC Setup message is received.
• CVE-2023-33054 - CVSS 9.1 (critical), 2023-12-05: Cryptographic issue in GPS HLOS Driver while downloading Qualcomm GNSS assistance data.
• CVE-2023-33044 - CVSS 7.5 (high), 2023-12-05: Transient DOS in Data modem while handling TLB control messages from the Network.
• CVE-2023-33022 - CVSS 8.4 (high), 2023-12-05: Memory corruption in HLOS while invoking IOCTL calls from user-space.
• CVE-2023-33018 - CVSS 7.8 (high), 2023-12-05: Memory corruption while using the UIM diag command to get the operators name.
• CVE-2023-33017 - CVSS 7.8 (high), 2023-12-05: Memory corruption in Boot while running a ListVars test in UEFI Menu during boot.
• CVE-2023-33024 - CVSS 7.8 (high), 2023-12-05: Memory corruption while sending SMS from AP firmware.
• CVE-2023-33059 - CVSS 7.8 (high), 2023-11-07: Memory corruption in Audio while processing the VOC packet data from ADSP.
• CVE-2023-33055 - CVSS 7.8 (high), 2023-11-07: Memory Corruption in Audio while invoking callback function in driver from ADSP.
• CVE-2023-33031 - CVSS 7.8 (high), 2023-11-07: Memory corruption in Automotive Audio while copying data from ADSP shared buffer to the VOC packet data buffer.
• CVE-2023-33035 - CVSS 7.8 (high), 2023-10-03: Memory corruption while invoking callback function of AFE from ADSP.
• CVE-2023-33034 - CVSS 7.8 (high), 2023-10-03: Memory corruption while parsing the ADSP response command.
• CVE-2023-33029 - CVSS 8.4 (high), 2023-10-03: Memory corruption in DSP Service during a remote call from HLOS to DSP.
• CVE-2023-33027 - CVSS 7.5 (high), 2023-10-03: Transient DOS in WLAN Firmware while parsing rsn ies.
• CVE-2023-28540 - CVSS 9.1 (critical), 2023-10-03: Cryptographic issue in Data Modem due to improper authentication during TLS handshake.
• CVE-2023-28560 - CVSS 7.8 (high), 2023-09-05: Memory corruption in WLAN HAL while processing devIndex from untrusted WMI payload.
• CVE-2023-21636 - CVSS 7.8 (high), 2023-09-05: Memory Corruption due to improper validation of array index in Linux while updating adn record.
• CVE-2023-21662 - CVSS 7.8 (high), 2023-09-05: Memory corruption in Core Platform while printing the response buffer in log.
• CVE-2023-21646 - CVSS 7.5 (high), 2023-09-05: Transient DOS in Modem while processing invalid System Information Block 1.
• CVE-2023-21644 - CVSS 7.8 (high), 2023-09-05: Memory corruption in RIL due to Integer Overflow while triggering qcril_uim_request_apdu request.
• CVE-2023-21664 - CVSS 7.8 (high), 2023-09-05: Memory Corruption in Core Platform while printing the response buffer in log.
• CVE-2022-33275 - CVSS 8.4 (high), 2023-09-05: Memory corruption due to improper validation of array index in WLAN HAL when received lm_itemNum is out of range.
• CVE-2023-28537 - CVSS 8.4 (high), 2023-08-08: Memory corruption while allocating memory in COmxApeDec module in Audio.
• CVE-2023-28555 - CVSS 7.5 (high), 2023-08-08: Transient DOS in Audio while remapping channel buffer in media codec decoding.
• CVE-2023-21651 - CVSS 9.3 (critical), 2023-08-08: Memory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE.
• CVE-2023-21649 - CVSS 7.8 (high), 2023-08-08: Memory corruption in WLAN while running doDriverCmd for an unspecific command.
• CVE-2023-22666 - CVSS 8.4 (high), 2023-08-08: Memory Corruption in Audio while playing amrwbplus clips with modified content.
• CVE-2023-21626 - CVSS 7.1 (high), 2023-08-08: Cryptographic issue in HLOS due to improper authentication while performing key velocity checks using more than one key.
• CVE-2023-21652 - CVSS 7.7 (high), 2023-08-08: Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use.
• CVE-2022-40510 - CVSS 9.8 (critical), 2023-08-08: Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder.
• CVE-2023-21657 - CVSS 7.8 (high), 2023-06-06: Memoru corruption in Audio when ADSP sends input during record use case.
• CVE-2023-21670 - CVSS 7.8 (high), 2023-06-06: Memory Corruption in GPU Subsystem due to arbitrary command execution from GPU in privileged mode.
• CVE-2023-21656 - CVSS 7.8 (high), 2023-06-06: Memory corruption in WLAN HOST while receiving an WMI event from firmware.
• CVE-2023-21669 - CVSS 8.2 (high), 2023-06-06: Information Disclosure in WLAN HOST while sending DPP action frame to peer with an invalid source address.
• CVE-2023-21659 - CVSS 7.5 (high), 2023-06-06: Transient DOS in WLAN Firmware while processing frames with missing header fields.
• CVE-2022-40507 - CVSS 8.4 (high), 2023-06-06: Memory corruption due to double free in Core while mapping HLOS address to the list.
• CVE-2022-40523 - CVSS 7.1 (high), 2023-06-06: Information disclosure in Kernel due to indirect branch misprediction.
• CVE-2022-40536 - CVSS 7.5 (high), 2023-06-06: Transient DOS due to improper authentication in modem while receiving plain TLB OTA request message from network.
• CVE-2022-40522 - CVSS 8.4 (high), 2023-06-06: Memory corruption in Linux Networking due to double free while handling a hyp-assign.
• CVE-2022-40533 - CVSS 6.2 (medium), 2023-06-06: Transient DOS due to untrusted Pointer Dereference in core while sending USB QMI request.
• CVE-2022-40521 - CVSS 7.5 (high), 2023-06-06: Transient DOS due to improper authorization in Modem
• CVE-2022-40529 - CVSS 7.8 (high), 2023-06-06: Memory corruption due to improper access control in kernel while processing a mapping request from root process.
• CVE-2023-21628 - CVSS 8.4 (high), 2023-06-06: Memory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command.
• CVE-2022-33264 - CVSS 7.9 (high), 2023-06-06: Memory corruption in modem due to stack based buffer overflow while parsing OTASP Key Generation Request Message.
• CVE-2022-33227 - CVSS 7.8 (high), 2023-06-06: Memory corruption in Linux android due to double free while calling unregister provider after register call.
• CVE-2022-33263 - CVSS 7.8 (high), 2023-06-06: Memory corruption due to use after free in Core when multiple DCI clients register and deregister.
• CVE-2022-33307 - CVSS 8.4 (high), 2023-06-06: Memory Corruption due to double free in automotive when a bad HLOS address for one of the lists to be mapped is passed.
• CVE-2022-33226 - CVSS 7.8 (high), 2023-06-06: Memory corruption due to buffer copy without checking the size of input in Core while processing ioctl commands from diag client applications.
• CVE-2022-33251 - CVSS 7.5 (high), 2023-06-06: Transient DOS due to reachable assertion in Modem because of invalid network configuration.
• CVE-2022-33267 - CVSS 7.8 (high), 2023-06-06: Memory corruption in Linux while sending DRM request.
• CVE-2022-33230 - CVSS 7.8 (high), 2023-06-06: Memory corruption in FM Host due to buffer copy without checking the size of input in FM Host
• CVE-2022-22076 - CVSS 7.1 (high), 2023-06-06: information disclosure due to cryptographic issue in Core during RPMB read request.
• CVE-2022-22060 - CVSS 7.5 (high), 2023-06-06: Assertion occurs while processing Reconfiguration message due to improper validation
• CVE-2022-33224 - CVSS 7.8 (high), 2023-06-06: Memory corruption in core due to buffer copy without check9ing the size of input while processing ioctl queries.
• CVE-2022-40515 - CVSS 9.8 (critical), 2023-03-10: Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms.
• CVE-2022-40535 - CVSS 7.5 (high), 2023-03-10: Transient DOS due to buffer over-read in WLAN while sending a packet to device.
• CVE-2022-33278 - CVSS 7.8 (high), 2023-03-10: Memory corruption due to buffer copy without checking the size of input in HLOS when input message size is larger than the buffer capacity.
• CVE-2022-40531 - CVSS 8.4 (high), 2023-03-10: Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message.
• CVE-2022-33272 - CVSS 7.5 (high), 2023-03-10: Transient DOS in modem due to reachable assertion.
• CVE-2022-40530 - CVSS 8.4 (high), 2023-03-10: Memory corruption in WLAN due to integer overflow to buffer overflow in WLAN during initialization phase.
• CVE-2022-40537 - CVSS 9.8 (critical), 2023-03-10: Memory corruption in Bluetooth HOST while processing the AVRC_PDU_GET_PLAYER_APP_VALUE_TEXT AVRCP response.
• CVE-2022-33257 - CVSS 9.3 (critical), 2023-03-10: Memory corruption in Core due to time-of-check time-of-use race condition during dump collection in trust zone.
• CVE-2022-25694 - CVSS 8.4 (high), 2023-03-10: Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM
• CVE-2022-33213 - CVSS 8.8 (high), 2023-03-10: Memory corruption in modem due to buffer overflow while processing a PPP packet
• CVE-2022-33245 - CVSS 7.8 (high), 2023-03-10: Memory corruption in WLAN due to use after free
• CVE-2022-33256 - CVSS 9.8 (critical), 2023-03-10: Memory corruption due to improper validation of array index in Multi-mode call processor.
• CVE-2022-25655 - CVSS 8.4 (high), 2023-03-10: Memory corruption in WLAN HAL while arbitrary value is passed in WMI UTF command payload.
• CVE-2022-25709 - CVSS 8.4 (high), 2023-03-10: Memory corruption in modem due to use of out of range pointer offset while processing qmi msg
• CVE-2022-33244 - CVSS 7.5 (high), 2023-03-10: Transient DOS due to reachable assertion in modem during MIB reception and SIB timeout
• CVE-2022-33254 - CVSS 7.5 (high), 2023-03-10: Transient DOS due to reachable assertion in Modem while processing SIB1 Message.
• CVE-2022-22075 - CVSS 6.2 (medium), 2023-03-10: Information Disclosure in Graphics during GPU context switch.
• CVE-2022-25705 - CVSS 7.8 (high), 2023-03-10: Memory corruption in modem due to integer overflow to buffer overflow while handling APDU response
• CVE-2022-33242 - CVSS 7.8 (high), 2023-03-10: Memory corruption due to improper authentication in Qualcomm IPC while loading unsigned lib in audio PD.
• CVE-2022-33250 - CVSS 7.5 (high), 2023-03-10: Transient DOS due to reachable assertion in modem when network repeatedly sent invalid message container for NR to LTE handover.
• CVE-2022-40514 - CVSS 9.8 (critical), 2023-02-12: Memory corruption due to buffer copy without checking the size of input in WLAN Firmware while processing CCKM IE in reassoc response frame.
• CVE-2022-40512 - CVSS 7.5 (high), 2023-02-12: Transient DOS in WLAN Firmware due to buffer over-read while processing probe response or beacon.
• CVE-2022-33271 - CVSS 8.2 (high), 2023-02-12: Information disclosure due to buffer over-read in WLAN while parsing NMF frame.
• CVE-2022-33248 - CVSS 7.8 (high), 2023-02-12: Memory corruption in User Identity Module due to integer overflow to buffer overflow when a segement is received via qmi http.
• CVE-2022-33233 - CVSS 7.8 (high), 2023-02-12: Memory corruption due to configuration weakness in modem wile sending command to write protected files.
• CVE-2022-33277 - CVSS 8.4 (high), 2023-02-12: Memory corruption in modem due to buffer copy without checking size of input while receiving WMI command.
• CVE-2022-33232 - CVSS 9.3 (critical), 2023-02-12: Memory corruption due to buffer copy without checking size of input while running memory sharing tests with large scattered memory.
• CVE-2022-40517 - CVSS 8.4 (high), 2023-01-09: Memory corruption in core due to stack-based buffer overflow
• CVE-2022-40520 - CVSS 8.4 (high), 2023-01-09: Memory corruption due to stack-based buffer overflow in Core
• CVE-2022-40519 - CVSS 6.8 (medium), 2023-01-09: Information disclosure due to buffer overread in Core
• CVE-2022-40518 - CVSS 6.8 (medium), 2023-01-09: Information disclosure due to buffer overread in Core
• CVE-2022-33285 - CVSS 7.5 (high), 2023-01-09: Transient DOS due to buffer over-read in WLAN while parsing WLAN CSA action frames.
• CVE-2022-33284 - CVSS 8.2 (high), 2023-01-09: Information disclosure due to buffer over-read in WLAN while parsing BTM action frame.
• CVE-2022-40516 - CVSS 8.4 (high), 2023-01-09: Memory corruption in Core due to stack-based buffer overflow.
• CVE-2022-33286 - CVSS 7.5 (high), 2023-01-09: Transient DOS due to buffer over-read in WLAN while processing 802.11 management frames.
• CVE-2022-25725 - CVSS 6.2 (medium), 2023-01-09: Denial of service in MODEM due to improper pointer handling
• CVE-2022-22088 - CVSS 9.8 (critical), 2023-01-09: Memory corruption in Bluetooth HOST due to buffer overflow while parsing the command response received from remote
• CVE-2022-25746 - CVSS 8.1 (high), 2023-01-09: Memory corruption in kernel due to missing checks when updating the access rights of a memextent mapping.