AF
Product
Ar8035 Firmware
On CISA KEVExploited in the wild
688
CVEs
8
On KEV
9.8
Max CVSS
2
New 30D
Severity mix
Critical 64High 435Medium 1Low 0
Watch
Add Ar8035 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-33026 | 7.5 | Oct 3 | Transient DOS in WLAN Firmware while parsing a NAN management frame Affected: All versions, or not specified |
| CVE-2023-28540 | 7.5 | Oct 3 | Cryptographic issue in Data Modem due to improper authentication during TLS handshake Affected: All versions, or not specified |
| CVE-2023-24849 | 7.5 | Oct 3 | Information Disclosure in data Modem while parsing an FMTP line in an SDP message Affected: All versions, or not specified |
| CVE-2023-24848 | 7.5 | Oct 3 | Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value Affected: All versions, or not specified |
| CVE-2023-24847 | 7.5 | Oct 3 | Transient DOS in Modem while allocating DSM items Affected: All versions, or not specified |
| CVE-2023-24843 | 7.5 | Oct 3 | Transient DOS in Modem while triggering a camping on an 5G cell Affected: All versions, or not specified |
| CVE-2023-33015 | 7.5 | Sep 5 | Transient DOS in WLAN Firmware while interpreting MBSSID IE of a received beacon frame Affected: All versions, or not specified |
| CVE-2023-21653 | 7.5 | Sep 5 | Transient DOS in Modem while processing RRC reconfiguration message Affected: All versions, or not specified |
| CVE-2023-21646 | 7.5 | Sep 5 | Transient DOS in Modem while processing invalid System Information Block 1 Affected: All versions, or not specified |
| CVE-2023-28555 | 7.5 | Aug 8 | Transient DOS in Audio while remapping channel buffer in media codec decoding Affected: All versions, or not specified |
| CVE-2023-21661 | 7.5 | Jun 6 | Transient DOS while parsing WLAN beacon or probe-response frame Affected: All versions, or not specified |
| CVE-2023-21659 | 7.5 | Jun 6 | Transient DOS in WLAN Firmware while processing frames with missing header fields Affected: All versions, or not specified |
| CVE-2023-21658 | 7.5 | Jun 6 | Transient DOS in WLAN Firmware while processing the received beacon or probe response frame Affected: All versions, or not specified |
| CVE-2022-40538 | 7.5 | Jun 6 | Transient DOS due to reachable assertion in modem while processing sib with incorrect values from network Affected: All versions, or not specified |
| CVE-2022-40536 | 7.5 | Jun 6 | Transient DOS due to improper authentication in modem while receiving plain TLB OTA request message from network Affected: All versions, or not specified |
| CVE-2022-40521 | 7.5 | Jun 6 | Transient DOS due to improper authorization in Modem Affected: All versions, or not specified |
| CVE-2022-33251 | 7.5 | Jun 6 | Transient DOS due to reachable assertion in Modem because of invalid network configuration Affected: All versions, or not specified |
| CVE-2022-22060 | 7.5 | Jun 6 | Assertion occurs while processing Reconfiguration message due to improper validation Affected: All versions, or not specified |
| CVE-2022-40504 | 7.5 | May 2 | Transient DOS due to reachable assertion in Modem when UE received Downlink Data Indication message from the network Affected: All versions, or not specified |
| CVE-2022-40508 | 7.5 | May 2 | Transient DOS due to reachable assertion in Modem while processing config related to cross carrier scheduling, which is not supported Affected: All versions, or not specified |
| CVE-2022-34144 | 7.5 | May 2 | Transient DOS due to reachable assertion in Modem during OSI decode scheduling Affected: All versions, or not specified |
| CVE-2022-33305 | 7.5 | May 2 | Transient DOS due to NULL pointer dereference in Modem while sending invalid messages in DCCH Affected: All versions, or not specified |
| CVE-2022-40527 | 7.5 | Mar 10 | Transient DOS due to reachable assertion in WLAN while processing PEER ID populated by TQM Affected: All versions, or not specified |
| CVE-2022-33272 | 7.5 | Mar 10 | Transient DOS in modem due to reachable assertion Affected: All versions, or not specified |
| CVE-2022-33254 | 7.5 | Mar 10 | Transient DOS due to reachable assertion in Modem while processing SIB1 Message Affected: All versions, or not specified |
| CVE-2022-33250 | 7.5 | Mar 10 | Transient DOS due to reachable assertion in modem when network repeatedly sent invalid message container for NR to LTE handover Affected: All versions, or not specified |
| CVE-2022-33244 | 7.5 | Mar 10 | Transient DOS due to reachable assertion in modem during MIB reception and SIB timeout Affected: All versions, or not specified |
| CVE-2022-40512 | 7.5 | Feb 12 | Transient DOS in WLAN Firmware due to buffer over-read while processing probe response or beacon Affected: All versions, or not specified |
| CVE-2022-33306 | 7.5 | Feb 12 | Transient DOS due to buffer over-read in WLAN while processing an incoming management frame with incorrectly filled IEs Affected: All versions, or not specified |
| CVE-2022-33271 | 7.5 | Feb 12 | Information disclosure due to buffer over-read in WLAN while parsing NMF frame Affected: All versions, or not specified |
| CVE-2022-33238 | 7.5 | Dec 13 | Transient DOS due to loop with unreachable exit condition in WLAN while processing an incoming FTM frames Affected: All versions, or not specified |
| CVE-2022-33235 | 7.5 | Dec 13 | Information disclosure due to buffer over-read in WLAN firmware while parsing security context info attributes Affected: All versions, or not specified |
| CVE-2022-25702 | 7.5 | Dec 13 | Denial of service in modem due to reachable assertion while processing reconfiguration message in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2022-25692 | 7.5 | Dec 13 | Denial of service in Modem due to reachable assertion while processing the common config procedure in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2022-25691 | 7.5 | Dec 13 | Denial of service in Modem due to reachable assertion while processing SIB1 with invalid SCS and bandwidth settings in Snapdragon Mobile Affected: All versions, or not specified |
The 500 most important CVEs for this product (exploited first, then by severity)
