Wcn3998 Firmware (Qualcomm) - vulnerabilities (CVEs)

528 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2024-11-22. Vendor: Qualcomm.

CVEs of Wcn3998 Firmware

• CVE-2021-30299 - CVSS 6.7 (medium), 2024-11-22: Possible out of bound access in audio module due to lack of validation of user provided input.
• CVE-2023-33087 - CVSS 7.8 (high), 2023-12-05: Memory corruption in Core while processing RX intent request.
• CVE-2023-33079 - CVSS 7.8 (high), 2023-12-05: Memory corruption in Audio while running invalid audio recording from ADSP.
• CVE-2023-33070 - CVSS 7.1 (high), 2023-12-05: Transient DOS in Automotive OS due to improper authentication to the secure IO calls.
• CVE-2023-33081 - CVSS 7.5 (high), 2023-12-05: Transient DOS while converting TWT (Target Wake Time) frame parameters in the OTA broadcast.
• CVE-2023-33063 - CVSS 7.8 (high), 2023-12-05: Memory corruption in DSP Services during a remote call from HLOS to DSP.
• CVE-2023-33080 - CVSS 7.5 (high), 2023-12-05: Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame.
• CVE-2023-33054 - CVSS 9.1 (critical), 2023-12-05: Cryptographic issue in GPS HLOS Driver while downloading Qualcomm GNSS assistance data.
• CVE-2023-33044 - CVSS 7.5 (high), 2023-12-05: Transient DOS in Data modem while handling TLB control messages from the Network.
• CVE-2023-33043 - CVSS 7.5 (high), 2023-12-05: Transient DOS in Modem when a Beam switch request is made with a non-configured BWP.
• CVE-2023-33042 - CVSS 7.5 (high), 2023-12-05: Transient DOS in Modem after RRC Setup message is received.
• CVE-2023-33017 - CVSS 7.8 (high), 2023-12-05: Memory corruption in Boot while running a ListVars test in UEFI Menu during boot.
• CVE-2023-33024 - CVSS 7.8 (high), 2023-12-05: Memory corruption while sending SMS from AP firmware.
• CVE-2023-33022 - CVSS 8.4 (high), 2023-12-05: Memory corruption in HLOS while invoking IOCTL calls from user-space.
• CVE-2023-33018 - CVSS 7.8 (high), 2023-12-05: Memory corruption while using the UIM diag command to get the operators name.
• CVE-2023-33059 - CVSS 7.8 (high), 2023-11-07: Memory corruption in Audio while processing the VOC packet data from ADSP.
• CVE-2023-33055 - CVSS 7.8 (high), 2023-11-07: Memory Corruption in Audio while invoking callback function in driver from ADSP.
• CVE-2023-33031 - CVSS 7.8 (high), 2023-11-07: Memory corruption in Automotive Audio while copying data from ADSP shared buffer to the VOC packet data buffer.
• CVE-2023-33029 - CVSS 8.4 (high), 2023-10-03: Memory corruption in DSP Service during a remote call from HLOS to DSP.
• CVE-2023-33035 - CVSS 7.8 (high), 2023-10-03: Memory corruption while invoking callback function of AFE from ADSP.
• CVE-2023-33034 - CVSS 7.8 (high), 2023-10-03: Memory corruption while parsing the ADSP response command.
• CVE-2023-33027 - CVSS 7.5 (high), 2023-10-03: Transient DOS in WLAN Firmware while parsing rsn ies.
• CVE-2023-28540 - CVSS 9.1 (critical), 2023-10-03: Cryptographic issue in Data Modem due to improper authentication during TLS handshake.
• CVE-2023-28560 - CVSS 7.8 (high), 2023-09-05: Memory corruption in WLAN HAL while processing devIndex from untrusted WMI payload.
• CVE-2023-21636 - CVSS 7.8 (high), 2023-09-05: Memory Corruption due to improper validation of array index in Linux while updating adn record.
• CVE-2023-21654 - CVSS 7.8 (high), 2023-09-05: Memory corruption in Audio during playback session with audio effects enabled.
• CVE-2023-21664 - CVSS 7.8 (high), 2023-09-05: Memory Corruption in Core Platform while printing the response buffer in log.
• CVE-2022-40524 - CVSS 7.8 (high), 2023-09-05: Memory corruption due to buffer over-read in Modem while processing SetNativeHandle RTP service.
• CVE-2023-21646 - CVSS 7.5 (high), 2023-09-05: Transient DOS in Modem while processing invalid System Information Block 1.
• CVE-2023-21663 - CVSS 7.8 (high), 2023-09-05: Memory Corruption while accessing metadata in Display.
• CVE-2023-21644 - CVSS 7.8 (high), 2023-09-05: Memory corruption in RIL due to Integer Overflow while triggering qcril_uim_request_apdu request.
• CVE-2023-21662 - CVSS 7.8 (high), 2023-09-05: Memory corruption in Core Platform while printing the response buffer in log.
• CVE-2022-33220 - CVSS 5.5 (medium), 2023-09-05: Information disclosure in Automotive multimedia due to buffer over-read.
• CVE-2022-33275 - CVSS 8.4 (high), 2023-09-05: Memory corruption due to improper validation of array index in WLAN HAL when received lm_itemNum is out of range.
• CVE-2023-28555 - CVSS 7.5 (high), 2023-08-08: Transient DOS in Audio while remapping channel buffer in media codec decoding.
• CVE-2023-28537 - CVSS 8.4 (high), 2023-08-08: Memory corruption while allocating memory in COmxApeDec module in Audio.
• CVE-2023-21650 - CVSS 7.8 (high), 2023-08-08: Memory Corruption in GPS HLOS Driver when injectFdclData receives data with invalid data length.
• CVE-2023-22666 - CVSS 8.4 (high), 2023-08-08: Memory Corruption in Audio while playing amrwbplus clips with modified content.
• CVE-2023-21626 - CVSS 7.1 (high), 2023-08-08: Cryptographic issue in HLOS due to improper authentication while performing key velocity checks using more than one key.
• CVE-2023-21649 - CVSS 7.8 (high), 2023-08-08: Memory corruption in WLAN while running doDriverCmd for an unspecific command.
• CVE-2023-21652 - CVSS 7.7 (high), 2023-08-08: Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use.
• CVE-2023-21625 - CVSS 8.2 (high), 2023-08-08: Information disclosure in Network Services due to buffer over-read while the device receives DNS response.
• CVE-2023-21648 - CVSS 7.8 (high), 2023-08-08: Memory corruption in RIL while trying to send apdu packet.
• CVE-2023-21651 - CVSS 9.3 (critical), 2023-08-08: Memory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE.
• CVE-2023-21627 - CVSS 7.8 (high), 2023-08-08: Memory corruption in Trusted Execution Environment while calling service API with invalid address.
• CVE-2022-40510 - CVSS 9.8 (critical), 2023-08-08: Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder.
• CVE-2023-21657 - CVSS 7.8 (high), 2023-06-06: Memoru corruption in Audio when ADSP sends input during record use case.
• CVE-2023-21670 - CVSS 7.8 (high), 2023-06-06: Memory Corruption in GPU Subsystem due to arbitrary command execution from GPU in privileged mode.
• CVE-2023-21656 - CVSS 7.8 (high), 2023-06-06: Memory corruption in WLAN HOST while receiving an WMI event from firmware.
• CVE-2023-21669 - CVSS 8.2 (high), 2023-06-06: Information Disclosure in WLAN HOST while sending DPP action frame to peer with an invalid source address.
• CVE-2023-21659 - CVSS 7.5 (high), 2023-06-06: Transient DOS in WLAN Firmware while processing frames with missing header fields.
• CVE-2022-40523 - CVSS 7.1 (high), 2023-06-06: Information disclosure in Kernel due to indirect branch misprediction.
• CVE-2022-40536 - CVSS 7.5 (high), 2023-06-06: Transient DOS due to improper authentication in modem while receiving plain TLB OTA request message from network.
• CVE-2022-40522 - CVSS 8.4 (high), 2023-06-06: Memory corruption in Linux Networking due to double free while handling a hyp-assign.
• CVE-2022-40533 - CVSS 6.2 (medium), 2023-06-06: Transient DOS due to untrusted Pointer Dereference in core while sending USB QMI request.
• CVE-2022-40521 - CVSS 7.5 (high), 2023-06-06: Transient DOS due to improper authorization in Modem
• CVE-2022-40529 - CVSS 7.8 (high), 2023-06-06: Memory corruption due to improper access control in kernel while processing a mapping request from root process.
• CVE-2023-21628 - CVSS 8.4 (high), 2023-06-06: Memory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command.
• CVE-2022-40507 - CVSS 8.4 (high), 2023-06-06: Memory corruption due to double free in Core while mapping HLOS address to the list.
• CVE-2022-33227 - CVSS 7.8 (high), 2023-06-06: Memory corruption in Linux android due to double free while calling unregister provider after register call.
• CVE-2022-33263 - CVSS 7.8 (high), 2023-06-06: Memory corruption due to use after free in Core when multiple DCI clients register and deregister.
• CVE-2022-33307 - CVSS 8.4 (high), 2023-06-06: Memory Corruption due to double free in automotive when a bad HLOS address for one of the lists to be mapped is passed.
• CVE-2022-33226 - CVSS 7.8 (high), 2023-06-06: Memory corruption due to buffer copy without checking the size of input in Core while processing ioctl commands from diag client applications.
• CVE-2022-33251 - CVSS 7.5 (high), 2023-06-06: Transient DOS due to reachable assertion in Modem because of invalid network configuration.
• CVE-2022-33267 - CVSS 7.8 (high), 2023-06-06: Memory corruption in Linux while sending DRM request.
• CVE-2022-33230 - CVSS 7.8 (high), 2023-06-06: Memory corruption in FM Host due to buffer copy without checking the size of input in FM Host
• CVE-2022-33264 - CVSS 7.9 (high), 2023-06-06: Memory corruption in modem due to stack based buffer overflow while parsing OTASP Key Generation Request Message.
• CVE-2022-22076 - CVSS 7.1 (high), 2023-06-06: information disclosure due to cryptographic issue in Core during RPMB read request.
• CVE-2022-22060 - CVSS 7.5 (high), 2023-06-06: Assertion occurs while processing Reconfiguration message due to improper validation
• CVE-2022-33224 - CVSS 7.8 (high), 2023-06-06: Memory corruption in core due to buffer copy without check9ing the size of input while processing ioctl queries.
• CVE-2022-40504 - CVSS 7.5 (high), 2023-05-02: Transient DOS due to reachable assertion in Modem when UE received Downlink Data Indication message from the network.
• CVE-2022-33273 - CVSS 7.3 (high), 2023-05-02: Information disclosure due to buffer over-read in Trusted Execution Environment while QRKS report generation.
• CVE-2022-34144 - CVSS 7.5 (high), 2023-05-02: Transient DOS due to reachable assertion in Modem during OSI decode scheduling.
• CVE-2023-21666 - CVSS 8.4 (high), 2023-05-02: Memory Corruption in Graphics while accessing a buffer allocated through the graphics pool.
• CVE-2023-21665 - CVSS 8.4 (high), 2023-05-02: Memory corruption in Graphics while importing a file.
• CVE-2022-40508 - CVSS 7.5 (high), 2023-05-02: Transient DOS due to reachable assertion in Modem while processing config related to cross carrier scheduling, which is not supported.
• CVE-2022-33305 - CVSS 7.5 (high), 2023-05-02: Transient DOS due to NULL pointer dereference in Modem while sending invalid messages in DCCH.
• CVE-2022-25713 - CVSS 7.8 (high), 2023-05-02: Memory corruption in Automotive due to Improper Restriction of Operations within the Bounds of a Memory Buffer while exporting a shared key.
• CVE-2022-40532 - CVSS 8.4 (high), 2023-04-13: Memory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target.
• CVE-2022-33298 - CVSS 7.8 (high), 2023-04-13: Memory corruption due to use after free in Modem while modem initialization.
• CVE-2022-40503 - CVSS 8.2 (high), 2023-04-13: Information disclosure due to buffer over-read in Bluetooth Host while A2DP streaming.
• CVE-2022-33302 - CVSS 7.8 (high), 2023-04-13: Memory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than command length.
• CVE-2022-33296 - CVSS 7.8 (high), 2023-04-13: Memory corruption due to integer overflow to buffer overflow in Modem while parsing Traffic Channel Neighbor List Update message.
• CVE-2022-33289 - CVSS 6.8 (medium), 2023-04-13: Memory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card.
• CVE-2022-33288 - CVSS 9.3 (critical), 2023-04-13: Memory corruption due to buffer copy without checking the size of input in Core while sending SCM command to get write protection information.
• CVE-2022-33291 - CVSS 8.2 (high), 2023-04-13: Information disclosure in Modem due to buffer over-read while receiving a IP header with malformed length.
• CVE-2022-33270 - CVSS 7.5 (high), 2023-04-13: Transient DOS due to time-of-check time-of-use race condition in Modem while processing RRC Reconfiguration message.
• CVE-2022-33269 - CVSS 9.3 (critical), 2023-04-13: Memory corruption due to integer overflow or wraparound in Core while DDR memory assignment.
• CVE-2022-33287 - CVSS 8.2 (high), 2023-04-13: Information disclosure in Modem due to buffer over-read while getting length of Unfragmented headers in an IPv6 packet.
• CVE-2022-33231 - CVSS 9.3 (critical), 2023-04-13: Memory corruption due to double free in core while initializing the encryption key.
• CVE-2022-33260 - CVSS 7.8 (high), 2023-03-10: Memory corruption due to stack based buffer overflow in core while sending command from USB of large size.
• CVE-2022-40515 - CVSS 9.8 (critical), 2023-03-10: Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms.
• CVE-2022-40535 - CVSS 7.5 (high), 2023-03-10: Transient DOS due to buffer over-read in WLAN while sending a packet to device.
• CVE-2022-33278 - CVSS 7.8 (high), 2023-03-10: Memory corruption due to buffer copy without checking the size of input in HLOS when input message size is larger than the buffer capacity.
• CVE-2022-40531 - CVSS 8.4 (high), 2023-03-10: Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message.
• CVE-2022-33272 - CVSS 7.5 (high), 2023-03-10: Transient DOS in modem due to reachable assertion.
• CVE-2022-40530 - CVSS 8.4 (high), 2023-03-10: Memory corruption in WLAN due to integer overflow to buffer overflow in WLAN during initialization phase.
• CVE-2022-40537 - CVSS 9.8 (critical), 2023-03-10: Memory corruption in Bluetooth HOST while processing the AVRC_PDU_GET_PLAYER_APP_VALUE_TEXT AVRCP response.
• CVE-2022-33244 - CVSS 7.5 (high), 2023-03-10: Transient DOS due to reachable assertion in modem during MIB reception and SIB timeout
• CVE-2022-33254 - CVSS 7.5 (high), 2023-03-10: Transient DOS due to reachable assertion in Modem while processing SIB1 Message.