Qualcomm Inc Snapdragon vulnerabilities

CVE-2022-34146 [HIGH] CWE-20 CVE-2022-34146: Transient DOS due to improper input validation in WLAN Host while parsing frame during defragmentati Transient DOS due to improper input validation in WLAN Host while parsing frame during defragmentation.

CVE-2022-40502 [HIGH] CWE-20 CVE-2022-40502: Transient DOS due to improper input validation in WLAN Host. Transient DOS due to improper input validation in WLAN Host.

CVE-2022-40503 [HIGH] CWE-126 CVE-2022-40503: Information disclosure due to buffer over-read in Bluetooth Host while A2DP streaming. Information disclosure due to buffer over-read in Bluetooth Host while A2DP streaming.

CVE-2022-40504 [HIGH] CWE-617 CVE-2022-40504: Transient DOS due to reachable assertion in Modem when UE received Downlink Data Indication message Transient DOS due to reachable assertion in Modem when UE received Downlink Data Indication message from the network.

CVE-2022-33271 [HIGH] CWE-126 CVE-2022-33271: Information disclosure due to buffer over-read in WLAN while parsing NMF frame. Information disclosure due to buffer over-read in WLAN while parsing NMF frame.

CVE-2022-25732 [HIGH] CWE-126 CVE-2022-25732: Information disclosure in modem due to buffer over read in dns client due to missing length check Information disclosure in modem due to buffer over read in dns client due to missing length check

CVE-2022-40521 [HIGH] CWE-285 CVE-2022-40521: Transient DOS due to improper authorization in Modem Transient DOS due to improper authorization in Modem

CVE-2022-33228 [HIGH] CWE-126 CVE-2022-33228: Information disclosure sue to buffer over-read in modem while processing ipv6 packet with hop-by-hop Information disclosure sue to buffer over-read in modem while processing ipv6 packet with hop-by-hop or destination option in header.

CVE-2022-33291 [HIGH] CWE-126 CVE-2022-33291: Information disclosure in Modem due to buffer over-read while receiving a IP header with malformed l Information disclosure in Modem due to buffer over-read while receiving a IP header with malformed length.

CVE-2022-25747 [HIGH] CWE-126 CVE-2022-25747: Information disclosure in modem due to improper input validation during parsing of upcoming CoAP mes Information disclosure in modem due to improper input validation during parsing of upcoming CoAP message

CVE-2022-25731 [HIGH] CWE-131 CVE-2022-25731: Information disclosure in modem due to buffer over-read while processing packets from DNS server Information disclosure in modem due to buffer over-read while processing packets from DNS server

CVE-2022-33295 [HIGH] CWE-126 CVE-2022-33295: Information disclosure in Modem due to buffer over-read while parsing the wms message received given Information disclosure in Modem due to buffer over-read while parsing the wms message received given the buffer and its length.

CVE-2022-33222 [HIGH] CWE-126 CVE-2022-33222: Information disclosure due to buffer over-read while parsing DNS response packets in Modem. Information disclosure due to buffer over-read while parsing DNS response packets in Modem.

CVE-2024-45558 [HIGH] CWE-126 CVE-2024-45558: Transient DOS can occur when the driver parses the per STA profile IE and tries to access the EXTN e Transient DOS can occur when the driver parses the per STA profile IE and tries to access the EXTN element ID without checking the IE length.

CVE-2023-33084 [HIGH] CWE-401 CVE-2023-33084: Transient DOS while processing IE fragments from server during DTLS handshake. Transient DOS while processing IE fragments from server during DTLS handshake.

CVE-2023-43533 [HIGH] CWE-126 CVE-2023-43533: Transient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 Transient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame.

CVE-2023-43522 [HIGH] CWE-476 CVE-2023-43522: Transient DOS while key unwrapping process, when the given encrypted key is empty or NULL. Transient DOS while key unwrapping process, when the given encrypted key is empty or NULL.

CVE-2023-43523 [HIGH] CWE-617 CVE-2023-43523: Transient DOS while processing 11AZ RTT management action frame received through OTA. Transient DOS while processing 11AZ RTT management action frame received through OTA.

CVE-2023-33026 [HIGH] CWE-126 CVE-2023-33026: Transient DOS in WLAN Firmware while parsing a NAN management frame. Transient DOS in WLAN Firmware while parsing a NAN management frame.

CVE-2024-33071 [HIGH] CWE-126 CVE-2024-33071: Transient DOS while parsing the MBSSID IE from the beacons when IE length is 0. Transient DOS while parsing the MBSSID IE from the beacons when IE length is 0.