CVSS: 9.8EPSS: 0%CPEs: 458EXPL: 0CVE-2022-40514 – Buffer copy without checking size of input in WLAN Firmware
https://notcve.org/view.php?id=CVE-2022-40514
Memory corruption due to buffer copy without checking the size of input in WLAN Firmware while processing CCKM IE in reassoc response frame. • https://www.qualcomm.com/company/product-security/bulletins/february-2023-bulletin • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') CWE-787: Out-of-bounds Write •
CVSS: 7.5EPSS: 0%CPEs: 592EXPL: 0CVE-2022-40512 – Buffer over-read in WLAN Firmware.
https://notcve.org/view.php?id=CVE-2022-40512
Transient DOS in WLAN Firmware due to buffer over-read while processing probe response or beacon. • https://www.qualcomm.com/company/product-security/bulletins/february-2023-bulletin • CWE-125: Out-of-bounds Read CWE-126: Buffer Over-read •
CVSS: 7.5EPSS: 0%CPEs: 262EXPL: 0CVE-2022-33306 – Buffer over-read in WLAN
https://notcve.org/view.php?id=CVE-2022-33306
Transient DOS due to buffer over-read in WLAN while processing an incoming management frame with incorrectly filled IEs. • https://www.qualcomm.com/company/product-security/bulletins/february-2023-bulletin • CWE-125: Out-of-bounds Read CWE-126: Buffer Over-read •
CVSS: 8.8EPSS: 0%CPEs: 124EXPL: 0CVE-2022-33280 – Access of uninitialized pointer in Bluetooth HOST
https://notcve.org/view.php?id=CVE-2022-33280
Memory corruption due to access of uninitialized pointer in Bluetooth HOST while processing the AVRCP packet. • https://www.qualcomm.com/company/product-security/bulletins/february-2023-bulletin • CWE-824: Access of Uninitialized Pointer •
CVSS: 9.8EPSS: 0%CPEs: 148EXPL: 0CVE-2022-33279 – Stack based buffer overflow in WLAN
https://notcve.org/view.php?id=CVE-2022-33279
Memory corruption due to stack based buffer overflow in WLAN having invalid WNM frame length. • https://www.qualcomm.com/company/product-security/bulletins/february-2023-bulletin • CWE-121: Stack-based Buffer Overflow CWE-787: Out-of-bounds Write •