Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 449

Export CSV
CVE-2023-33028

Buffer Copy without Checking Size of Input in WLAN Firmware

Memory corruption in WLAN Firmware while doing a memory copy of pmk cache.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Qualcomm
Products
Ar8035 Ar8035 Firmware Ar9380 and 349 more
CVE-2024-38426

Improper Authentication in Modem

While processing the authentication message in UE, improper authentication may lead to information disclosure.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Qualcomm
Products
205 205 Firmware 215 and 325 more
CVE-2023-43513

Use of Out-of-range Pointer Offset in PCIe

Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Qualcomm
Products
315 5g Iot Modem 315 5g Iot Modem Firmware Apq8017 and 531 more
CVE-2024-33073

Buffer Over-read in WLAN Host Communication

Information disclosure while parsing the BSS parameter change count or MLD capabilities fields of the ML IE.

CVSS 3.1 · 8.2 High EPSS < 1% KEV · Not listed
Vendors
Qualcomm
Products
Ar8035 Ar8035 Firmware Csr8811 and 317 more
CVE-2023-43551

Improper Authentication in Multi-Mode Call Processor

Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command.

CVSS 3.1 · 9.1 Critical EPSS < 1% KEV · Not listed
Vendors
Qualcomm
Products
205 Mobile 205 Mobile Firmware 215 Mobile and 479 more
CVE-2023-21629

Double Free in Modem

Memory Corruption in Modem due to double free while parsing the PKCS15 sim files.

CVSS 3.1 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Qualcomm
Products
205 205 Firmware 215 and 421 more