Qualcomm: >> Qca6554a Firmware Security Vulnerabilities
Transient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame.
CVSS Score
7.5
EPSS Score
0.002
Published
2024-02-06
Memory corruption while validating the TID to Link Mapping action request frame, when a station connects to an access point.
CVSS Score
8.6
EPSS Score
0.002
Published
2024-02-06
Memory corruption when AP includes TID to link mapping IE in the beacons and STA is parsing the beacon TID to link mapping IE.
CVSS Score
8.6
EPSS Score
0.002
Published
2024-02-06
Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header.
CVSS Score
7.5
EPSS Score
0.004
Published
2024-01-02
Memory corruption when resource manager sends the host kernel a reply message with multiple fragments.
CVSS Score
8.4
EPSS Score
0.001
Published
2024-01-02
Transient DOS while processing a WMI P2P listen start command (0xD00A) sent from host.
CVSS Score
7.5
EPSS Score
0.002
Published
2024-01-02
Transient DOS when WLAN firmware receives "reassoc response" frame including RIC_DATA element.
CVSS Score
7.5
EPSS Score
0.003
Published
2024-01-02
Transient DOS in WLAN Firmware while parsing a BTM request.
CVSS Score
7.5
EPSS Score
0.002
Published
2024-01-02
Transient DOS in WLAN Firmware while processing a FTMR frame.
CVSS Score
7.5
EPSS Score
0.002
Published
2023-12-05
Transient DOS while parsing WPA IES, when it is passed with length more than expected size.
CVSS Score
7.5
EPSS Score
0.002
Published
2023-12-05