Browse CVEs

HIGH 7.8 CVE-2024-38422 Memory corruption while processing voice packet with arbitrary data received from ADSP. Wsa8845h Firmware Patch available Fix from $1,9502024-11-04 CRITICAL 9.1 CVE-2024-38408 Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions. Wsa8845h Firmware Patch available Fix from $2,3002024-11-04 HIGH 7.8 CVE-2024-38409 Memory corruption while station LL statistic handling. Wsa8845h Firmware Patch available Fix from $1,9502024-11-04 HIGH 7.8 CVE-2024-38410 Memory corruption while IOCLT is called when device is in invalid state and the WMI command buffer may be freed twice. Wsa8845h Firmware Patch available Fix from $1,9502024-11-04 HIGH 7.0 CVE-2024-38406 Memory corruption while handling IOCTL calls in JPEG Encoder driver. Wsa8845h Firmware Patch available Fix from $1,9502024-11-04 HIGH 7.0 CVE-2024-38407 Memory corruption while processing input parameters for any IOCTL call in the JPEG Encoder driver. Aqt1000 Firmware Patch available Fix from $1,9502024-11-04 HIGH 7.8 CVE-2024-33033 Memory corruption while processing IOCTL calls to unmap the buffers. Wsa8845h Firmware Patch available Fix from $1,9502024-11-04 MEDIUM 6.5 CVE-2024-33068 Transient DOS while parsing fragments of MBSSID IE from beacon frame. Wsa8845h Firmware Patch available Fix from $1,6002024-11-04 MEDIUM 6.5 CVE-2024-38403 Transient DOS while parsing BTM ML IE when per STA profile is not included. Wsa8845h Firmware Patch available Fix from $1,6002024-11-04 MEDIUM 6.5 CVE-2024-38405 Transient DOS while processing the CU information from RNR IE. Wsa8845h Firmware Patch available Fix from $1,6002024-11-04 MEDIUM 6.7 CVE-2024-33029 Memory corruption while handling the PDR in driver for getting the remote heap maps. Snapdragon Auto 5g Modem Rf Gen 2 Firmware Patch available Fix from $1,6002024-11-04 MEDIUM 6.7 CVE-2024-33030 Memory corruption while parsing IPC frequency table parameters for LPLH that has size greater than expected size. Wsa8835 Firmware Patch available Fix from $1,6002024-11-04 MEDIUM 6.7 CVE-2024-33031 Memory corruption while processing the update SIM PB records request. Wcn3660b Firmware Patch available Fix from $1,6002024-11-04 MEDIUM 6.7 CVE-2024-33032 Memory corruption when the user application modifies the same shared memory asynchronously when kernel is accessing it. Wsa8835 Firmware Patch available Fix from $1,6002024-11-04 MEDIUM 6.7 CVE-2024-23377 Memory corruption while invoking IOCTL command from user-space, when a user modifies the original packet size of the command after system properties … Wsa8845h Firmware Patch available Fix from $1,6002024-11-04 MEDIUM 6.7 CVE-2024-23386 memory corruption when WiFi display APIs are invoked with large random inputs. Wsa8835 Firmware Patch available Fix from $1,6002024-11-04 MEDIUM 6.5 CVE-2024-23385 Transient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at UE. Wsa8845h Firmware Patch available Fix from $1,6002024-11-04 HIGH 7.8 CVE-2024-43047 KEV Memory corruption while maintaining memory maps of HLOS memory. Fastconnect 6700 Firmware Patch available Fix from $1,9502024-10-07 HIGH 7.8 CVE-2024-38399 Memory corruption while processing user packets to generate page faults. Wsa8835 Firmware Mitigation only Fix from $1,9502024-10-07 HIGH 7.5 CVE-2024-38397 Transient DOS while parsing probe response and assoc response frame. Snapdragon 8\+ Gen 2 Mobile Platform Firmware No fix yet Fix from $1,9502024-10-07 MEDIUM 6.1 CVE-2024-38425 Information disclosure while sending implicit broadcast containing APP launch information. Wsa8835 Firmware Mitigation only Fix from $1,6002024-10-07 HIGH 8.2 CVE-2024-33073 Information disclosure while parsing the BSS parameter change count or MLD capabilities fields of the ML IE. Wsa8845h Firmware Mitigation only Fix from $1,9502024-10-07 HIGH 7.5 CVE-2024-33069 Transient DOS when transmission of management frame sent by host is not successful and error status is received in the host. Wsa8835 Firmware Mitigation only Fix from $1,9502024-10-07 HIGH 7.5 CVE-2024-33070 Transient DOS while parsing ESP IE from beacon/probe response frame. Qca6574au Firmware Mitigation only Fix from $1,9502024-10-07 HIGH 7.5 CVE-2024-33071 Transient DOS while parsing the MBSSID IE from the beacons when IE length is 0. Mdm9628 Firmware Mitigation only Fix from $1,9502024-10-07 CRITICAL 9.8 CVE-2024-33066 Memory corruption while redirecting log file to any file location with any file name. Snapdragon X65 5g Modem Rf System Firmware No fix yet Fix from $2,3002024-10-07 HIGH 8.2 CVE-2024-33064 Information disclosure while parsing the multiple MBSSID IEs from the beacon. Qca6574au Firmware Mitigation only Fix from $1,9502024-10-07 HIGH 7.8 CVE-2024-33065 Memory corruption while taking snapshot when an offset variable is set by camera driver. Snapdragon 8cx Gen 2 5g Compute Platform \(sc8180x Ac\) Firmware Mitigation only Fix from $1,9502024-10-07 HIGH 7.5 CVE-2024-33049 Transient DOS while parsing noninheritance IE of Extension element when length of IE is 2 of beacon frame. Snapdragon W5\+ Gen 1 Wearable Platform Firmware Mitigation only Fix from $1,9502024-10-07 MEDIUM 6.7 CVE-2024-23379 Memory corruption while unmapping the fastrpc map when two threads can free the same map in concurrent scenario. Wsa8835 Firmware Mitigation only Fix from $1,6002024-10-07