Qualcomm QCA4010 Firmware -

CPE Details

Qualcomm QCA4010 Firmware -
qualcomm
qca4010_firmware
-
2020-04-20
11h49 +00:00
2021-03-09
22h00 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:o:qualcomm:qca4010_firmware:-:*:*:*:*:*:*:*

Informations

Vendor

qualcomm

Product

qca4010_firmware

Version

-

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2023-28563 2023-11-07 05h26 +00:00 Information disclosure in IOE Firmware while handling WMI command.
6.1
Moyen
CVE-2023-28565 2023-09-05 06h24 +00:00 Memory corruption in WLAN HAL while handling command streams through WMI interfaces.
7.8
Haute
CVE-2023-28560 2023-09-05 06h24 +00:00 Memory corruption in WLAN HAL while processing devIndex from untrusted WMI payload.
7.8
Haute
CVE-2023-28559 2023-09-05 06h24 +00:00 Memory corruption in WLAN FW while processing command parameters from untrusted WMI payload.
7.8
Haute
CVE-2023-21625 2023-08-08 09h14 +00:00 Information disclosure in Network Services due to buffer over-read while the device receives DNS response.
8.2
Haute
CVE-2023-21628 2023-06-06 07h39 +00:00 Memory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command.
8.4
Haute
CVE-2022-40505 2023-05-02 05h08 +00:00 Information disclosure due to buffer over-read in Modem while parsing DNS hostname.
8.2
Haute
CVE-2022-33291 2023-04-04 04h46 +00:00 Information disclosure in Modem due to buffer over-read while receiving a IP header with malformed length.
8.2
Haute
CVE-2022-33287 2023-04-04 04h46 +00:00 Information disclosure in Modem due to buffer over-read while getting length of Unfragmented headers in an IPv6 packet.
8.2
Haute
CVE-2022-33222 2023-04-04 04h46 +00:00 Information disclosure due to buffer over-read while parsing DNS response packets in Modem.
8.2
Haute
CVE-2022-25731 2023-04-04 04h46 +00:00 Information disclosure in modem due to buffer over-read while processing packets from DNS server
7.5
Haute
CVE-2022-25730 2023-04-04 04h46 +00:00 Information disclosure in modem due to improper check of IP type while processing DNS server query
8.2
Haute
CVE-2022-25655 2023-03-07 04h43 +00:00 Memory corruption in WLAN HAL while arbitrary value is passed in WMI UTF command payload.
8.4
Haute
CVE-2022-33229 2023-02-09 06h58 +00:00 Information disclosure due to buffer over-read in Modem while using static array to process IPv4 packets.
8.2
Haute
CVE-2022-25738 2023-02-09 06h58 +00:00 Information disclosure in modem due to buffer over-red while performing checksum of packet received
8.2
Haute
CVE-2022-25734 2023-02-09 06h58 +00:00 Denial of service in modem due to missing null check while processing IP packets with padding
7.5
Haute
CVE-2022-25733 2023-02-09 06h58 +00:00 Denial of service in modem due to null pointer dereference while processing DNS packets
7.5
Haute
CVE-2022-25674 2022-11-15 00h00 +00:00 Cryptographic issues in WLAN during the group key handshake of the WPA/WPA2 protocol in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music
9.8
Critique
CVE-2022-25727 2022-11-15 00h00 +00:00 Memory Corruption in modem due to improper length check while copying into memory in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music
9.8
Critique
CVE-2022-25742 2022-11-15 00h00 +00:00 Denial of service in modem due to infinite loop while parsing IGMPv2 packet from server in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music
7.5
Haute
CVE-2022-25718 2022-10-18 22h00 +00:00 Cryptographic issue in WLAN due to improper check on return value while authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
9.8
Critique
CVE-2022-25719 2022-10-18 22h00 +00:00 Information disclosure in WLAN due to improper length check while processing authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
9.1
Critique
CVE-2021-30288 2021-10-20 04h31 +00:00 Possible stack overflow due to improper length check of TLV while copying the TLV to a local stack variable in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
8.4
Haute
CVE-2020-11269 2021-02-22 05h25 +00:00 Possible memory corruption while processing EAPOL frames due to lack of validation of key length before using it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
8.8
Haute
CVE-2019-14135 2020-04-16 08h46 +00:00 Possible integer overflow to buffer overflow in WLAN while parsing nonstandard NAN IE messages. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, IPQ8074, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA4010, QCA6174A, QCA6574AU, QCA6584AU, QCA8081, QCA9377, QCA9379, QCA9886, QCN7605, QCS405, QCS605, SA6155P, Saipan, SDA845, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SM6150, SM7150, SM8150, SXR1130
7.8
Haute
Les informations affichées sur CVE Find proviennent de plusieurs sources de référence rigoureusement sélectionnées. Les données CVE sont fournies par MITRE Corporation et la National Vulnerability Database (NVD). Le catalogue des vulnérabilités activement exploitées (KEV) provient de la Cybersecurity and Infrastructure Security Agency (CISA), tandis que les scores EPSS sont issus de FIRST.org. Enfin, les données relatives aux faiblesses logicielles (CWE) et aux schémas d'attaque courants (CAPEC) sont maintenues par MITRE Corporation, et les informations sur les configurations logicielles et matérielles (CPE) proviennent du NVD.