Qualcomm WCN6745 Firmware vulnerabilities

7 CVEs affecting Qualcomm WCN6745 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-30260, published 2021-09-17.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-1971, published 2021-09-09. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. Possible assertion due to lack of physical layer state validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial…
CVE-2021-1925, published 2021-05-07. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. Possible denial of service scenario due to improper handling of group management action frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics…
CVE-2021-1953, published 2021-07-13. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. Improper handling of received malformed FTMR request frame can lead to reachable assertion while responding with FTM1 frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
CVE-2021-1938, published 2021-07-13. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. Possible assertion due to improper verification while creating and deleting the peer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity,…
CVE-2021-1937, published 2021-06-09. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. Reachable assertion is possible while processing peer association WLAN message from host and nonstandard incoming packet in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
CVE-2021-1960, published 2021-09-09. Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days. Improper handling of ASB-C broadcast packets with crafted opcode in LMP can lead to uncontrolled resource consumption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
CVE-2021-30260, published 2021-09-17. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Possible Integer overflow to buffer overflow issue can occur due to improper validation of input parameters when extscan hostlist configuration command is received in Snapdragon Auto, Snapdragon…