description: Information disclosure due to buffer over-read in WLAN firmware while parsing security context info attributes. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
problem types: Buffer over-read in WLAN firmware
affected:
{
vendor: Qualcomm, Inc.
product: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
versions:
version: APQ8009, status: affected
version: APQ8096AU, status: affected
version: AQT1000, status: affected
version: AR8031, status: affected
version: AR8035, status: affected
version: AR9380, status: affected
version: CSR8811, status: affected
version: CSRA6620, status: affected
version: CSRA6640, status: affected
version: CSRB31024, status: affected
version: IPQ4018, status: affected
version: IPQ4028, status: affected
version: IPQ4029, status: affected
version: IPQ5010, status: affected
version: IPQ5018, status: affected
version: IPQ5028, status: affected
version: IPQ6000, status: affected
version: IPQ6010, status: affected
version: IPQ6018, status: affected
version: IPQ6028, status: affected
version: IPQ8064, status: affected
version: IPQ8069, status: affected
version: IPQ8070, status: affected
version: IPQ8070A, status: affected
version: IPQ8071, status: affected
version: IPQ8071A, status: affected
version: IPQ8072, status: affected
version: IPQ8072A, status: affected
version: IPQ8074, status: affected
version: IPQ8074A, status: affected
version: IPQ8076, status: affected
version: IPQ8076A, status: affected
version: IPQ8078, status: affected
version: IPQ8078A, status: affected
version: IPQ8173, status: affected
version: IPQ8174, status: affected
version: IPQ9008, status: affected
version: IPQ9574, status: affected
version: MDM9640, status: affected
version: MSM8996AU, status: affected
version: PMP8074, status: affected
version: QAM8295P, status: affected
version: QCA1062, status: affected
version: QCA1064, status: affected
version: QCA2062, status: affected
version: QCA2064, status: affected
version: QCA2065, status: affected
version: QCA2066, status: affected
version: QCA4020, status: affected
version: QCA4024, status: affected
version: QCA6174A, status: affected
version: QCA6310, status: affected
version: QCA6335, status: affected
version: QCA6390, status: affected
version: QCA6391, status: affected
version: QCA6420, status: affected
version: QCA6421, status: affected
version: QCA6426, status: affected
version: QCA6428, status: affected
version: QCA6430, status: affected
version: QCA6431, status: affected
version: QCA6436, status: affected
version: QCA6438, status: affected
version: QCA6554A, status: affected
version: QCA6564A, status: affected
version: QCA6564AU, status: affected
version: QCA6574, status: affected
version: QCA6574A, status: affected
version: QCA6574AU, status: affected
version: QCA6584AU, status: affected
version: QCA6595, status: affected
version: QCA6595AU, status: affected
version: QCA6696, status: affected
version: QCA8072, status: affected
version: QCA8075, status: affected
version: QCA8081, status: affected
version: QCA8082, status: affected
version: QCA8084, status: affected
version: QCA8085, status: affected
version: QCA8337, status: affected
version: QCA8386, status: affected
version: QCA9367, status: affected
version: QCA9377, status: affected
version: QCA9379, status: affected
version: QCA9888, status: affected
version: QCA9889, status: affected
version: QCA9898, status: affected
version: QCA9980, status: affected
version: QCA9984, status: affected
version: QCA9990, status: affected
version: QCA9992, status: affected
version: QCA9994, status: affected
version: QCC5100, status: affected
version: QCM2290, status: affected
version: QCM4290, status: affected
version: QCM6125, status: affected
version: QCM6490, status: affected
version: QCN5021, status: affected
version: QCN5022, status: affected
version: QCN5024, status: affected
version: QCN5052, status: affected
version: QCN5054, status: affected
version: QCN5122, status: affected
version: QCN5124, status: affected
version: QCN5152, status: affected
version: QCN5154, status: affected
version: QCN5164, status: affected
version: QCN6023, status: affected
version: QCN6024, status: affected
version: QCN6100, status: affected
version: QCN6102, status: affected
version: QCN6112, status: affected
version: QCN6122, status: affected
version: QCN6132, status: affected
version: QCN7605, status: affected
version: QCN7606, status: affected
version: QCN9000, status: affected
version: QCN9001, status: affected
version: QCN9002, status: affected
version: QCN9003, status: affected
version: QCN9011, status: affected
version: QCN9012, status: affected
version: QCN9022, status: affected
version: QCN9024, status: affected
version: QCN9070, status: affected
version: QCN9072, status: affected
version: QCN9074, status: affected
version: QCN9100, status: affected
version: QCN9274, status: affected
version: QCS2290, status: affected
version: QCS405, status: affected
version: QCS410, status: affected
version: QCS4290, status: affected
version: QCS603, status: affected
version: QCS605, status: affected
version: QCS610, status: affected
version: QCS6125, status: affected
version: QCS6490, status: affected
version: QCX315, status: affected
version: QRB5165, status: affected
version: QRB5165M, status: affected
version: QRB5165N, status: affected
version: QSM8250, status: affected
version: QSM8350, status: affected
version: SA4150P, status: affected
version: SA415M, status: affected
version: SA515M, status: affected
version: SA6145P, status: affected
version: SA6150P, status: affected
version: SA6155, status: affected
version: SA6155P, status: affected
version: SA8145P, status: affected
version: SA8150P, status: affected
version: SA8155, status: affected
version: SA8155P, status: affected
version: SA8195P, status: affected
version: SA8295P, status: affected
version: SC8180X+SDX55, status: affected
version: SD 675, status: affected
version: SD 8 Gen1 5G, status: affected
version: SD 8CX, status: affected
version: SD 8cx Gen2, status: affected
version: SD 8cx Gen3, status: affected
version: SD460, status: affected
version: SD480, status: affected
version: SD660, status: affected
version: SD662, status: affected
version: SD665, status: affected
version: SD670, status: affected
version: SD675, status: affected
version: SD678, status: affected
version: SD680, status: affected
version: SD690 5G, status: affected
version: SD695, status: affected
version: SD710, status: affected
version: SD712, status: affected
version: SD720G, status: affected
version: SD730, status: affected
version: SD750G, status: affected
version: SD765, status: affected
version: SD765G, status: affected
version: SD768G, status: affected
version: SD778G, status: affected
version: SD780G, status: affected
version: SD7c, status: affected
version: SD820, status: affected
version: SD845, status: affected
version: SD850, status: affected
version: SD855, status: affected
version: SD865 5G, status: affected
version: SD870, status: affected
version: SD888, status: affected
version: SD888 5G, status: affected
version: SDX20, status: affected
version: SDX20M, status: affected
version: SDX24, status: affected
version: SDX50M, status: affected
version: SDX55, status: affected
version: SDX55M, status: affected
version: SDX65, status: affected
version: SDXR1, status: affected
version: SDXR2 5G, status: affected
version: SM4125, status: affected
version: SM4375, status: affected
version: SM6250, status: affected
version: SM6250P, status: affected
version: SM7250P, status: affected
version: SM7315, status: affected
version: SM7325P, status: affected
version: SW5100, status: affected
version: SW5100P, status: affected
version: SXR2150P, status: affected
version: WCD9326, status: affected
version: WCD9330, status: affected
version: WCD9335, status: affected
version: WCD9340, status: affected
version: WCD9341, status: affected
version: WCD9360, status: affected
version: WCD9370, status: affected
version: WCD9371, status: affected
version: WCD9375, status: affected
version: WCD9380, status: affected
version: WCD9385, status: affected
version: WCN3610, status: affected
version: WCN3615, status: affected
version: WCN3660B, status: affected
version: WCN3910, status: affected
version: WCN3950, status: affected
version: WCN3980, status: affected
version: WCN3988, status: affected
version: WCN3990, status: affected
version: WCN3991, status: affected
version: WCN3998, status: affected
version: WCN3999, status: affected
version: WCN6740, status: affected
version: WCN6750, status: affected
version: WCN6850, status: affected
version: WCN6851, status: affected
version: WCN6855, status: affected
version: WCN6856, status: affected
version: WCN7850, status: affected
version: WCN7851, status: affected
version: WSA8810, status: affected
version: WSA8815, status: affected
version: WSA8830, status: affected
version: WSA8835, status: affected
}
metrics:
cvssV3_1: [
version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: NONE
availabilityImpact: LOW
baseScore: 8.2
baseSeverity: HIGH
]