Qca6696 Security Vulnerabilities

CVE-2023-33027

Transient DOS in WLAN Firmware while parsing rsn...

CVE-2023-33026

Transient DOS in WLAN Firmware while parsing a NAN management...

CVE-2023-28539

Memory corruption in WLAN Host when the firmware invokes multiple WMI Service Available...

CVE-2023-28540

Cryptographic issue in Data Modem due to improper authentication during TLS...

CVE-2023-28571

Information disclosure in WLAN HOST while processing the WLAN scan descriptor list during roaming...

CVE-2023-24849

Information Disclosure in data Modem while parsing an FMTP line in an SDP...

CVE-2023-24850

Memory Corruption in HLOS while importing a cryptographic key into KeyMaster Trusted...

CVE-2023-24853

Memory Corruption in HLOS while registering for key provisioning...

CVE-2023-24848

Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line...

CVE-2023-24847

Transient DOS in Modem while allocating DSM...

CVE-2023-24843

Transient DOS in Modem while triggering a camping on an 5G...

CVE-2023-22385

Memory Corruption in Data Modem while making a MO call or MT VOLTE...

CVE-2023-22384

Memory Corruption in VR Service while sending data using Fast Message Queue...

CVE-2023-22382

Weak configuration in Automotive while VM is processing a listener request from...

CVE-2023-21673

Improper Access to the VM resource manager can lead to Memory...

CVE-2023-33015

Transient DOS in WLAN Firmware while interpreting MBSSID IE of a received beacon...

CVE-2023-33021

Memory corruption in Graphics while processing user packets for command...

CVE-2023-28567

Memory corruption in WLAN HAL while handling command through WMI...

CVE-2023-28573

Memory corruption in WLAN HAL while parsing WMI command...

CVE-2023-33020

Transient DOS in WLAN Host when an invalid channel (like channel out of range) is received in STA during CSA...

CVE-2023-33019

Transient DOS in WLAN Host while doing channel switch announcement (CSA), when a mobile station receives invalid channel in CSA...

CVE-2023-28565

Memory corruption in WLAN HAL while handling command streams through WMI...

CVE-2023-28584

Transient DOS in WLAN Host when a mobile station receives invalid channel in CSA IE while doing channel switch announcement...

CVE-2023-21667

Transient DOS in Bluetooth HOST while passing descriptor to validate the blacklisted BT...

CVE-2023-28558

Memory corruption in WLAN handler while processing PhyID in Tx status...

CVE-2023-28564

Memory corruption in WLAN HAL while passing command parameters through WMI...

CVE-2023-28538

Memory corruption in WIN Product while invoking WinAcpi update driver in the UEFI...

CVE-2023-28557

Memory corruption in WLAN HAL while processing command parameters from untrusted WMI...

CVE-2023-28548

Memory corruption in WLAN HAL while processing Tx/Rx commands from...

CVE-2023-28549

Memory corruption in WLAN HAL while parsing Rx buffer in processing TLV...

CVE-2023-28544

Memory corruption in WLAN while sending transmit command from HLOS to UTF...

CVE-2023-28559

Memory corruption in WLAN FW while processing command parameters from untrusted WMI...

CVE-2023-28560

Memory corruption in WLAN HAL while processing devIndex from untrusted WMI...

CVE-2023-21662

Memory corruption in Core Platform while printing the response buffer in...

CVE-2023-21636

Memory Corruption due to improper validation of array index in Linux while updating adn...

CVE-2023-21644

Memory corruption in RIL due to Integer Overflow while triggering qcril_uim_request_apdu...

CVE-2023-21654

Memory corruption in Audio during playback session with audio effects...

CVE-2023-21663

Memory Corruption while accessing metadata in...

CVE-2022-40524

Memory corruption due to buffer over-read in Modem while processing SetNativeHandle RTP...

CVE-2023-21646

Transient DOS in Modem while processing invalid System Information Block...

CVE-2023-21655

Memory corruption in Audio while validating and mapping...

CVE-2023-21664

Memory Corruption in Core Platform while printing the response buffer in...

CVE-2022-33275

Memory corruption due to improper validation of array index in WLAN HAL when received lm_itemNum is out of...

CVE-2022-33220

Information disclosure in Automotive multimedia due to buffer...

CVE-2023-28555

Transient DOS in Audio while remapping channel buffer in media codec...

CVE-2023-28575

The cam_get_device_priv function does not check the type of handle being returned (device/session/link). This would lead to invalid type usage if a wrong handle is passed to...

CVE-2023-28537

Memory corruption while allocating memory in COmxApeDec module in...

CVE-2023-21650

Memory Corruption in GPS HLOS Driver when injectFdclData receives data with invalid data...

CVE-2023-21651

Memory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in...

CVE-2023-21626

Cryptographic issue in HLOS due to improper authentication while performing key velocity checks using more than one...