QF
Product
Qcn7605 Firmware
116
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 28High 80Medium 8Low 0
Watch
Add Qcn7605 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-35081 | 9.8 | Jun 14 | Possible buffer overflow due to improper validation of SSID length received from beacon or probe response during an IBSS session in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2020-11153 | 9.8 | Nov 2 | u'Out of bound memory access while processing GATT data received due to lack of check of pdu data length and leads to remote code execution' in Snapdragon Auto, Snapdragon… Affected: All versions, or not specified |
| CVE-2020-3675 | 9.8 | Sep 8 | u'Potential integer underflow while parsing Service Info and IPv6 link-local TLVs that comes as part of NDPE attribute' in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2020-3669 | 9.8 | Sep 8 | u'Buffer Overflow issue in WLAN tcp ip verification due to usage of out of range pointer offset' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2020-3668 | 9.8 | Sep 8 | u'Buffer overflow while parsing PMF enabled MCBC frames due to frame length being lesser than what is expected while parsing' in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2020-11116 | 9.8 | Sep 8 | u'Possible out of bound write while processing association response received from host due to lack of check of IE length' in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2020-3699 | 9.8 | Jul 30 | Possible out of bound access while processing assoc response from host due to improper length check before copying into buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2020-3698 | 9.8 | Jul 30 | Out of bound write while QoS DSCP mapping due to improper input validation for data received from association response frame in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2020-3615 | 9.8 | Jun 2 | Valid deauth/disassoc frames is dropped in case if RMF is enabled and some rouge peer keep on sending rogue deauth/disassoc frames due to improper enum values used to check the… Affected: All versions, or not specified |
| CVE-2019-14114 | 9.8 | Apr 16 | Buffer overflow in WLAN firmware while parsing GTK IE containing GTK key having length more than the buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2019-14113 | 9.8 | Apr 16 | Buffer overflow can occur in In WLAN firmware while unwraping data using CCMP cipher suite during parsing of EAPOL handshake frame in Snapdragon Auto, Snapdragon Compute,… Affected: All versions, or not specified |
| CVE-2019-14112 | 9.8 | Apr 16 | Potential buffer overflow while processing CBF frames due to lack of check of buffer length before copy in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics… Affected: All versions, or not specified |
| CVE-2019-14111 | 9.8 | Apr 16 | Possible buffer overflow while handling NAN reception of NMF in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity,… Affected: All versions, or not specified |
| CVE-2019-14110 | 9.8 | Apr 16 | Buffer overflow can occur in function wlan firmware while copying association frame content if frame length is more than the maximum buffer size in case of SAP mode in Snapdragon… Affected: All versions, or not specified |
| CVE-2019-14097 | 9.8 | Mar 5 | Possible buffer overflow in WLAN Parser due to lack of length check when copying data in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2019-14095 | 9.8 | Mar 5 | Buffer overflow occurs while processing LMP packet in which name length parameter exceeds value specified in BT-specification in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2019-14086 | 9.8 | Mar 5 | Possible integer overflow while checking the length of frame which is a 32 bit integer and is added to another 32 bit integer which can lead to unexpected result during the check… Affected: All versions, or not specified |
| CVE-2019-14083 | 9.8 | Mar 5 | While parsing Service Descriptor Extended Attribute received as part of SDF frame, there is a possibility that incorrect length is specified in the attribute length field of… Affected: All versions, or not specified |
| CVE-2019-14031 | 9.8 | Mar 5 | Buffer overflow can occur while parsing RSN IE containing list of PMK ID`s which are more than the buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2019-10526 | 9.8 | Mar 5 | Out of bound write in WLAN driver due to NULL character not properly placed after SSID name in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity,… Affected: All versions, or not specified |
| CVE-2019-10614 | 9.8 | Dec 18 | Out of boundary access is possible as there is no validation of data accessed against the received size of the packet in case of malicious firmware in Snapdragon Auto, Snapdragon… Affected: All versions, or not specified |
| CVE-2019-10557 | 9.8 | Dec 18 | Out-of-bound read in the wireless driver in the Linux kernel due to lack of check of buffer length Affected: All versions, or not specified |
| CVE-2019-2302 | 9.8 | Nov 6 | While processing vendor command which contains corrupted channel count, an integer overflow occurs and finally will lead to heap overflow Affected: All versions, or not specified |
| CVE-2019-10565 | 9.8 | Nov 6 | Double free issue can happen when sensor power settings is freed by some thread while another thread try to access Affected: All versions, or not specified |
| CVE-2021-35083 | 9.1 | Jun 14 | Possible out of bound read due to improper validation of certificate chain in SSL or Internet key exchange in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2020-11169 | 9.1 | Nov 2 | u'Buffer over-read while processing received L2CAP packet due to lack of integer overflow check' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2019-10622 | 9.1 | Apr 16 | Out of bound memory access can happen while parsing ADSP message due to lack of check of size of payload received from userspace in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2019-14082 | 9.1 | Mar 5 | Potential buffer over-read due to lack of bound check of memory offset passed in WLAN firmware in Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon… Affected: All versions, or not specified |
Showing 28
