Summary
| Detail | |||
|---|---|---|---|
| Vendor | Qualcomm | First view | 2022-02-11 |
| Product | qcn6102 Firmware | Last view | 2024-02-06 |
| Version | Type | Os | |
| Update | |||
| Edition | |||
| Language | |||
| Sofware Edition | |||
| Target Software | |||
| Target Hardware | |||
| Other | |||
Activity : Overall
COMMON PLATFORM ENUMERATION: Repartition per Version
| CPE Name | Affected CVE |
|---|---|
| cpe:2.3:o:qualcomm:qcn6102_firmware:-:*:*:*:*:*:*:* | 60 |
Related : CVE
| Date | Alert | Description | |
|---|---|---|---|
| 7.5 | 2024-02-06 | CVE-2023-43536 | Transient DOS while parse fils IE with length equal to 1. |
| 7.5 | 2024-02-06 | CVE-2023-43522 | Transient DOS while key unwrapping process, when the given encrypted key is empty or NULL. |
| 7.5 | 2024-01-02 | CVE-2023-43511 | Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header. |
| 7.5 | 2024-01-02 | CVE-2023-33109 | Transient DOS while processing a WMI P2P listen start command (0xD00A) sent from host. |
| 7.5 | 2024-01-02 | CVE-2023-33062 | Transient DOS in WLAN Firmware while parsing a BTM request. |
| 7.5 | 2023-12-05 | CVE-2023-33098 | Transient DOS while parsing WPA IES, when it is passed with length more than expected size. |
| 7.5 | 2023-12-05 | CVE-2023-33089 | Transient DOS when processing a NULL buffer while parsing WLAN vdev. |
| 7.8 | 2023-12-05 | CVE-2023-33088 | Memory corruption when processing cmd parameters while parsing vdev. |
| 7.5 | 2023-12-05 | CVE-2023-33080 | Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame. |
| 7.5 | 2023-11-07 | CVE-2023-33047 | Transient DOS in WLAN Firmware while parsing no-inherit IES. |
| 9.8 | 2023-10-03 | CVE-2023-33028 | Memory corruption in WLAN Firmware while doing a memory copy of pmk cache. |
| 7.5 | 2023-10-03 | CVE-2023-33027 | Transient DOS in WLAN Firmware while parsing rsn ies. |
| 7.5 | 2023-10-03 | CVE-2023-33026 | Transient DOS in WLAN Firmware while parsing a NAN management frame. |
| 7.8 | 2023-09-05 | CVE-2023-28573 | Memory corruption in WLAN HAL while parsing WMI command parameters. |
| 7.8 | 2023-09-05 | CVE-2023-28567 | Memory corruption in WLAN HAL while handling command through WMI interfaces. |
| 7.8 | 2023-09-05 | CVE-2023-28557 | Memory corruption in WLAN HAL while processing command parameters from untrusted WMI payload. |
| 7.8 | 2023-09-05 | CVE-2023-28549 | Memory corruption in WLAN HAL while parsing Rx buffer in processing TLV payload. |
| 7.8 | 2023-09-05 | CVE-2023-28548 | Memory corruption in WLAN HAL while processing Tx/Rx commands from QDART. |
| 7.8 | 2023-09-05 | CVE-2022-33275 | Memory corruption due to improper validation of array index in WLAN HAL when received lm_itemNum is out of range. |
| 7.8 | 2023-07-04 | CVE-2023-22386 | Memory Corruption in WLAN HOST while processing WLAN FW request to allocate memory. |
| 7.5 | 2023-06-06 | CVE-2023-21661 | Transient DOS while parsing WLAN beacon or probe-response frame. |
| 7.5 | 2023-06-06 | CVE-2023-21659 | Transient DOS in WLAN Firmware while processing frames with missing header fields. |
| 7.5 | 2023-06-06 | CVE-2023-21658 | Transient DOS in WLAN Firmware while processing the received beacon or probe response frame. |
| 5.5 | 2023-06-06 | CVE-2022-22076 | information disclosure due to cryptographic issue in Core during RPMB read request. |
| 7.8 | 2023-04-13 | CVE-2022-40532 | Memory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target. |
CWE : Common Weakness Enumeration
| % | id | Name |
|---|---|---|
| 44% (24) | CWE-125 | Out-of-bounds Read |
| 12% (7) | CWE-787 | Out-of-bounds Write |
| 7% (4) | CWE-476 | NULL Pointer Dereference |
| 7% (4) | CWE-190 | Integer Overflow or Wraparound |
| 5% (3) | CWE-129 | Improper Validation of Array Index |
| 5% (3) | CWE-120 | Buffer Copy without Checking Size of Input ('Classic Buffer Overflo... |
| 3% (2) | CWE-287 | Improper Authentication |
| 3% (2) | CWE-20 | Improper Input Validation |
| 1% (1) | CWE-704 | Incorrect Type Conversion or Cast |
| 1% (1) | CWE-617 | Reachable Assertion |
| 1% (1) | CWE-416 | Use After Free |
| 1% (1) | CWE-400 | Uncontrolled Resource Consumption ('Resource Exhaustion') |
| 1% (1) | CWE-119 | Failure to Constrain Operations within the Bounds of a Memory Buffer |
