Qualcomm: >> Sw5100p Security Vulnerabilities
Transient DOS while parsing the received TID-to-link mapping element of beacon/probe response frame.
CVSS Score
7.5
EPSS Score
0.003
Published
2024-09-02
Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper.
CVSS Score
7.5
EPSS Score
0.003
Published
2024-09-02
Transient DOS while processing TIM IE from beacon frame as there is no check for IE length.
CVSS Score
7.5
EPSS Score
0.002
Published
2024-09-02
Memory corruption while calculating total metadata size when a very high reserved size is requested by gralloc clients.
CVSS Score
8.4
EPSS Score
0.001
Published
2024-09-02
Memory corruption when BTFM client sends new messages over Slimbus to ADSP.
CVSS Score
8.4
EPSS Score
0.001
Published
2024-09-02
memory corruption when an invalid firehose patch command is invoked.
CVSS Score
6.8
EPSS Score
0.001
Published
2024-09-02
Memory corruption as fence object may still be accessed in timeline destruct after isync fence is released.
CVSS Score
8.4
EPSS Score
0.002
Published
2024-08-05
Memory corruption can occur if VBOs hold outdated or invalid GPU SMMU mappings, especially when the binding and reclaiming of memory buffers are performed at the same time.
CVSS Score
8.4
EPSS Score
0.001
Published
2024-08-05
Transient DOS while parsing the ML IE when a beacon with length field inside the common info of ML IE greater than the ML IE length.
CVSS Score
7.5
EPSS Score
0.005
Published
2024-08-05
Transient DOS while parsing the BSS parameter change count or MLD capabilities fields of the ML IE.
CVSS Score
7.5
EPSS Score
0.005
Published
2024-08-05