U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Search Results (Refine Search)

Search Parameters:
  • Results Type: Overview
  • Keyword (text search): cpe:2.3:o:qualcomm:qcs2290_firmware:-:*:*:*:*:*:*:*
  • CPE Name Search: true
There are 348 matching records.
Displaying matches 1 through 20.
Vuln ID Summary CVSS Severity
CVE-2023-43536

Transient DOS while parse fils IE with length equal to 1.

Published: February 06, 2024; 1:16:03 AM -0500
V3.1: 7.5 HIGH
V2.0:(not available)
CVE-2023-43533

Transient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame.

Published: February 06, 2024; 1:16:02 AM -0500
V3.1: 7.5 HIGH
V2.0:(not available)
CVE-2023-43522

Transient DOS while key unwrapping process, when the given encrypted key is empty or NULL.

Published: February 06, 2024; 1:16:02 AM -0500
V3.1: 7.5 HIGH
V2.0:(not available)
CVE-2023-43519

Memory corruption in video while parsing the Videoinfo, when the size of atom is greater than the videoinfo size.

Published: February 06, 2024; 1:16:01 AM -0500
V3.1: 9.8 CRITICAL
V2.0:(not available)
CVE-2023-43518

Memory corruption in video while parsing invalid mp2 clip.

Published: February 06, 2024; 1:16:01 AM -0500
V3.1: 9.8 CRITICAL
V2.0:(not available)
CVE-2023-43513

Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element.

Published: February 06, 2024; 1:16:01 AM -0500
V3.1: 7.8 HIGH
V2.0:(not available)
CVE-2023-33072

Memory corruption in Core while processing control functions.

Published: February 06, 2024; 1:16:00 AM -0500
V3.1: 7.8 HIGH
V2.0:(not available)
CVE-2023-43511

Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header.

Published: January 02, 2024; 1:15:13 AM -0500
V3.1: 7.5 HIGH
V2.0:(not available)
CVE-2023-33120

Memory corruption in Audio when memory map command is executed consecutively in ADSP.

Published: January 02, 2024; 1:15:12 AM -0500
V3.1: 7.8 HIGH
V2.0:(not available)
CVE-2023-33118

Memory corruption while processing Listen Sound Model client payload buffer when there is a request for Listen Sound session get parameter from ST HAL.

Published: January 02, 2024; 1:15:12 AM -0500
V3.1: 7.8 HIGH
V2.0:(not available)
CVE-2023-33117

Memory corruption when HLOS allocates the response payload buffer to copy the data received from ADSP in response to AVCS_LOAD_MODULE command.

Published: January 02, 2024; 1:15:12 AM -0500
V3.1: 7.8 HIGH
V2.0:(not available)
CVE-2023-33109

Transient DOS while processing a WMI P2P listen start command (0xD00A) sent from host.

Published: January 02, 2024; 1:15:11 AM -0500
V3.1: 7.5 HIGH
V2.0:(not available)
CVE-2023-33062

Transient DOS in WLAN Firmware while parsing a BTM request.

Published: January 02, 2024; 1:15:10 AM -0500
V3.1: 7.5 HIGH
V2.0:(not available)
CVE-2023-33040

Transient DOS in Data Modem during DTLS handshake.

Published: January 02, 2024; 1:15:10 AM -0500
V3.1: 7.5 HIGH
V2.0:(not available)
CVE-2023-33038

Memory corruption while receiving a message in Bus Socket Transport Server.

Published: January 02, 2024; 1:15:10 AM -0500
V3.1: 7.8 HIGH
V2.0:(not available)
CVE-2023-33033

Memory corruption in Audio during playback with speaker protection.

Published: January 02, 2024; 1:15:09 AM -0500
V3.1: 7.8 HIGH
V2.0:(not available)
CVE-2023-33030

Memory corruption in HLOS while running playready use-case.

Published: January 02, 2024; 1:15:09 AM -0500
V3.1: 7.8 HIGH
V2.0:(not available)
CVE-2023-33107

Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.

Published: December 04, 2023; 10:15:14 PM -0500
V3.1: 7.8 HIGH
V2.0:(not available)
CVE-2023-33106

Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.

Published: December 04, 2023; 10:15:14 PM -0500
V3.1: 7.8 HIGH
V2.0:(not available)
CVE-2023-33098

Transient DOS while parsing WPA IES, when it is passed with length more than expected size.

Published: December 04, 2023; 10:15:14 PM -0500
V3.1: 7.5 HIGH
V2.0:(not available)