Qualcomm QCA9378 Firmware vulnerabilities

16 CVEs affecting Qualcomm QCA9378 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-33051, published 2024-09-02.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2015-9220, published 2018-04-18. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear IPQ4019, IPQ8064, MDM9206, MDM9607, MDM9640, MDM9650, QCA4531, QCA6174A, QCA6574AU,…
CVE-2016-10481, published 2018-04-18. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, QCA4531, QCA6174A, QCA6574AU, QCA6584,…
CVE-2014-9998, published 2018-04-18. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear IPQ4019, IPQ8064, MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650,…
CVE-2017-18072, published 2018-04-11. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9640, MDM9650, QCA4531, QCA6174A, QCA6564, QCA6574, QCA6574AU, QCA6584,…
CVE-2020-11276, published 2021-02-22. Critical severity, CVSS 9.1. EPSS: 0.8% chance of exploitation in the next 30 days. Possible buffer over read while processing P2P IE and NOA attribute of beacon and probe response frames due to improper validation of P2P IE and NOA attribute lengths in Snapdragon Auto, Snapdragon…
CVE-2020-11159, published 2021-06-09. Critical severity, CVSS 9.1. EPSS: 0.8% chance of exploitation in the next 30 days. Buffer over-read can happen while processing WPA,RSN IE of beacon and response frames if IE length is less than length of frame pointer being accessed in Snapdragon Auto, Snapdragon Compute,…
CVE-2018-11291, published 2018-09-20. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. In Snapdragon (Automobile, Mobile, Wear) in version IPQ8074, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA4531, QCA6174A, QCA6564, QCA6574, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9378,…
CVE-2020-11296, published 2021-02-22. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. Arithmetic overflow can happen while processing NOA IE due to improper error handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity,…
CVE-2024-33051, published 2024-09-02. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Transient DOS while processing TIM IE from beacon frame as there is no check for IE length.
CVE-2020-11269, published 2021-02-22. High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days. Possible memory corruption while processing EAPOL frames due to lack of validation of key length before using it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…

Latest

CVE-2021-30303, published 2022-01-03. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Possible buffer overflow due to lack of buffer length check when segmented WMI command is received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics…
CVE-2021-1909, published 2021-09-09. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Buffer overflow occurs in trusted applications due to lack of length check of parameters in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity,…
CVE-2020-11235, published 2021-06-09. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Buffer overflow might occur while parsing unified command due to lack of check of input data received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics…
CVE-2018-11871, published 2018-10-29. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Buffer overwrite can happen in WLAN function while processing set pdev parameter command due to lack of input validation in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version…
CVE-2018-11870, published 2018-10-29. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Buffer overwrite can occur when the legacy rates count received from the host is not checked against the maximum number of legacy rates in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in…