Qualcomm Inc Snapdragon vulnerabilities
997 known vulnerabilities affecting qualcomm_inc/snapdragon.
Total CVEs
997
CISA KEV
8
actively exploited
Public exploits
2
Exploited in wild
9
Severity breakdown
CRITICAL54HIGH779MEDIUM164
Vulnerabilities
Page 36 of 50
CVE-2024-38397P3HIGHCVSS 7.5vAR8035vFastConnect 6700+114 more2024-10-07
CVE-2024-38397 [HIGH] CWE-126 CVE-2024-38397: Transient DOS while parsing probe response and assoc response frame.
Transient DOS while parsing probe response and assoc response frame.
nvd
CVE-2024-33070P3HIGHCVSS 7.5vMDM9628vQCA6564A+3 more2024-10-07
CVE-2024-33070 [HIGH] CWE-126 CVE-2024-33070: Transient DOS while parsing ESP IE from beacon/probe response frame.
Transient DOS while parsing ESP IE from beacon/probe response frame.
nvd
CVE-2023-43529P3HIGHCVSS 7.5v315 5G IoT ModemvAQT1000+158 more2024-05-06
CVE-2023-43529 [HIGH] CWE-617 CVE-2023-43529: Transient DOS while processing IKEv2 Informational request messages, when a malformed fragment packe
Transient DOS while processing IKEv2 Informational request messages, when a malformed fragment packet is received.
nvd
CVE-2024-21477P3HIGHCVSS 7.5vAQT1000vAR8035+181 more2024-05-06
CVE-2024-21477 [HIGH] CWE-126 CVE-2024-21477: Transient DOS while parsing a protected 802.11az Fine Time Measurement (FTM) frame.
Transient DOS while parsing a protected 802.11az Fine Time Measurement (FTM) frame.
nvd
CVE-2023-33099P3HIGHCVSS 7.5v315 5G IoT ModemvAR8035+101 more2024-04-01
CVE-2023-33099 [HIGH] CWE-20 CVE-2023-33099: Transient DOS while processing SMS container of non-standard size received in DL NAS transport in NR
Transient DOS while processing SMS container of non-standard size received in DL NAS transport in NR.
nvd
CVE-2023-33095P3HIGHCVSS 7.5v315 5G IoT ModemvAR8035+99 more2024-03-04
CVE-2023-33095 [HIGH] CWE-617 CVE-2023-33095: Transient DOS while processing multiple payload container type with incorrect container length recei
Transient DOS while processing multiple payload container type with incorrect container length received in DL NAS transport OTA in NR.
nvd
CVE-2023-43522P3HIGHCVSS 7.5vAQT1000vAR8035+287 more2024-02-06
CVE-2023-43522 [HIGH] CWE-476 CVE-2023-43522: Transient DOS while key unwrapping process, when the given encrypted key is empty or NULL.
Transient DOS while key unwrapping process, when the given encrypted key is empty or NULL.
nvd
CVE-2023-43523P3HIGHCVSS 7.5vAR8035vCSR8811+140 more2024-02-06
CVE-2023-43523 [HIGH] CWE-617 CVE-2023-43523: Transient DOS while processing 11AZ RTT management action frame received through OTA.
Transient DOS while processing 11AZ RTT management action frame received through OTA.
nvd
CVE-2023-43536P3HIGHCVSS 7.5v315 5G IoT ModemvAQT1000+310 more2024-02-06
CVE-2023-43536 [HIGH] CWE-126 CVE-2023-43536: Transient DOS while parse fils IE with length equal to 1.
Transient DOS while parse fils IE with length equal to 1.
nvd
CVE-2023-43511P3HIGHCVSS 7.5v315 5G IoT Modemv9206 LTE Modem+357 more2024-01-02
CVE-2023-43511 [HIGH] CWE-835 CVE-2023-43511: Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that co
Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header.
nvd
CVE-2023-33112P3HIGHCVSS 7.5vAR8035vAR9380+185 more2024-01-02
CVE-2023-33112 [HIGH] CWE-126 CVE-2023-33112: Transient DOS when WLAN firmware receives "reassoc response" frame including RIC_DATA element.
Transient DOS when WLAN firmware receives "reassoc response" frame including RIC_DATA element.
nvd
CVE-2023-33116P3HIGHCVSS 7.5vAR8035vAR9380+100 more2024-01-02
CVE-2023-33116 [HIGH] CWE-126 CVE-2023-33116: Transient DOS while parsing ieee80211_parse_mscs_ie in WIN WLAN driver.
Transient DOS while parsing ieee80211_parse_mscs_ie in WIN WLAN driver.
nvd
CVE-2024-33014P3HIGHCVSS 7.5v315 5G IoT ModemvAPQ8064AU+322 more2024-08-05
CVE-2024-33014 [HIGH] CWE-126 CVE-2024-33014: Transient DOS while parsing ESP IE from beacon/probe response frame.
Transient DOS while parsing ESP IE from beacon/probe response frame.
nvd
CVE-2024-33051P3HIGHCVSS 7.5v315 5G IoT Modemv9206 LTE Modem+289 more2024-09-02
CVE-2024-33051 [HIGH] CWE-126 CVE-2024-33051: Transient DOS while processing TIM IE from beacon frame as there is no check for IE length.
Transient DOS while processing TIM IE from beacon frame as there is no check for IE length.
nvd
CVE-2024-23364P3HIGHCVSS 7.5vAR8035vFastConnect 6200+176 more2024-09-02
CVE-2024-23364 [HIGH] CWE-126 CVE-2024-23364: Transient DOS when processing the non-transmitted BSSID profile sub-elements present within the MBSS
Transient DOS when processing the non-transmitted BSSID profile sub-elements present within the MBSSID Information Element (IE) of a beacon frame that is received from over-the-air (OTA).
nvd
CVE-2024-33019P3HIGHCVSS 7.5vAR8035vCSR8811+147 more2024-08-05
CVE-2024-33019 [HIGH] CWE-126 CVE-2024-33019: Transient DOS while parsing the received TID-to-link mapping action frame.
Transient DOS while parsing the received TID-to-link mapping action frame.
nvd
CVE-2024-33011P3HIGHCVSS 7.5vAR8035vAR9380+247 more2024-08-05
CVE-2024-33011 [HIGH] CWE-126 CVE-2024-33011: Transient DOS while parsing the MBSSID IE from the beacons, when the MBSSID IE length is zero.
Transient DOS while parsing the MBSSID IE from the beacons, when the MBSSID IE length is zero.
nvd
CVE-2024-33015P3HIGHCVSS 7.5vAR8035vCSR8811+193 more2024-08-05
CVE-2024-33015 [HIGH] CWE-126 CVE-2024-33015: Transient DOS while parsing SCAN RNR IE when bytes received from AP is such that the size of the las
Transient DOS while parsing SCAN RNR IE when bytes received from AP is such that the size of the last param of IE is less than neighbor report.
nvd
CVE-2024-33010P3HIGHCVSS 7.5vAR8035vAR9380+246 more2024-08-05
CVE-2024-33010 [HIGH] CWE-416 CVE-2024-33010: Transient DOS while parsing fragments of MBSSID IE from beacon frame.
Transient DOS while parsing fragments of MBSSID IE from beacon frame.
nvd
CVE-2024-33013P3HIGHCVSS 7.5vAR8035vCSR8811+168 more2024-08-05
CVE-2024-33013 [HIGH] CWE-126 CVE-2024-33013: Transient DOS when driver accesses the ML IE memory and offset value is incremented beyond ML IE len
Transient DOS when driver accesses the ML IE memory and offset value is incremented beyond ML IE length.
nvd