Qualcomm: >> Wcn3950 Firmware Security Vulnerabilities
Transient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at UE.
CVSS Score
7.5
EPSS Score
0.003
Published
2024-11-04
CVE-2024-43047
Memory corruption while maintaining memory maps of HLOS memory.
Known exploited
CVSS Score
7.8
EPSS Score
0.007
Published
2024-10-07
Memory corruption while processing user packets to generate page faults.
CVSS Score
8.4
EPSS Score
0.001
Published
2024-10-07
Transient DOS while parsing noninheritance IE of Extension element when length of IE is 2 of beacon frame.
CVSS Score
7.5
EPSS Score
0.003
Published
2024-10-07
Memory corruption when a compat IOCTL call is followed by another IOCTL call from userspace to a driver.
CVSS Score
7.8
EPSS Score
0.002
Published
2024-10-07
Memory corruption when invalid length is provided from HLOS for FRS/UDS request/response buffers.
CVSS Score
7.8
EPSS Score
0.001
Published
2024-10-07
Memory corruption while processing IOCTL call for getting group info.
CVSS Score
7.8
EPSS Score
0.002
Published
2024-09-02
Memory corruption when user provides data for FM HCI command control operations.
CVSS Score
7.8
EPSS Score
0.001
Published
2024-09-02
Memory corruption when two threads try to map and unmap a single node simultaneously.
CVSS Score
8.4
EPSS Score
0.002
Published
2024-09-02
Memory corruption while processing concurrent IOCTL calls.
CVSS Score
7.8
EPSS Score
0.001
Published
2024-09-02