Description

Possible buffer out of bound read can occur due to improper validation of TBTT count and length while parsing the beacon response in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity

Related CPE's

o

qualcomm

qca2062_firmware

-

Vulnerable

h

qualcomm

qca2062

-

o

qualcomm

qca2064_firmware

-

Vulnerable

h

qualcomm

qca2064

-

o

qualcomm

qca2065_firmware

-

Vulnerable

h

qualcomm

qca2065

-

o

qualcomm

qca2066_firmware

-

Vulnerable

h

qualcomm

qca2066

-

o

qualcomm

sc8280xp_firmware

-

Vulnerable

h

qualcomm

sc8280xp

-

o

qualcomm

wcd9380_firmware

-

Vulnerable

h

qualcomm

wcd9380

-

o

qualcomm

wcd9385_firmware

-

Vulnerable

h

qualcomm

wcd9385

-

o

qualcomm

wcn6850_firmware

-

Vulnerable

h

qualcomm

wcn6850

-

o

qualcomm

wcn6851_firmware

-

Vulnerable

h

qualcomm

wcn6851

-

o

qualcomm

wcn6855_firmware

-

Vulnerable

h

qualcomm

wcn6855

-

o

qualcomm

wcn6856_firmware

-

Vulnerable

h

qualcomm

wcn6856

-

o

qualcomm

wsa8830_firmware

-

Vulnerable

h

qualcomm

wsa8830

-

o

qualcomm

wsa8835_firmware

-

Vulnerable

h

qualcomm

wsa8835

-

References

https://www.qualcomm.com/company/product-security/bulletins/october-2021-bulletin

Vendor Advisory

Weaknesses

[email protected]

Primary
CWE-125

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

9.1 · Critical

  • CVSS V3.1

  • CVSS V3.0

  • CVSS V2.0

Information

Source identifier

[email protected]

Vulnerability status

Analyzed

Published

2021-10-20T07:15:08.737

3 years ago

Last modified

2021-10-26T18:46:28.613

3 years ago