Qualcomm Qcn7606 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Qualcomm Qcn7606 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (166)

• CVE-2020-11134 — CVSS 9.8 (critical): Possible stack out of bound write might happen due to time bitmap length and bit duration fields of the attributes like NAN ranging setup…
• CVE-2021-35081 — CVSS 9.8 (critical): Possible buffer overflow due to improper validation of SSID length received from beacon or probe response during an IBSS session in…
• CVE-2022-25748 — CVSS 9.8 (critical): Memory corruption in WLAN due to integer overflow to buffer overflow while parsing GTK frames. in Snapdragon Auto, Snapdragon Compute…
• CVE-2022-25720 — CVSS 9.8 (critical): Memory corruption in WLAN due to out of bound array access during connect/roaming in Snapdragon Auto, Snapdragon Compute, Snapdragon…
• CVE-2022-22088 — CVSS 9.8 (critical): Memory corruption in Bluetooth HOST due to buffer overflow while parsing the command response received from remote
• CVE-2023-28561 — CVSS 9.8 (critical): Memory corruption in QESL while processing payload from external ESL device to firmware.
• CVE-2023-28562 — CVSS 9.8 (critical): Memory corruption while handling payloads from remote ESL.
• CVE-2020-11272 — CVSS 9.8 (critical): Before enqueuing a frame to the PE queue for further processing, an entry in a hash table can be deleted and using a stale version later…
• CVE-2023-21651 — CVSS 9.3 (critical): Memory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE.
• CVE-2022-33231 — CVSS 9.3 (critical): Memory corruption due to double free in core while initializing the encryption key.
• CVE-2023-33072 — CVSS 9.3 (critical): Memory corruption in Core while processing control functions.
• CVE-2021-30317 — CVSS 9.3 (critical): Improper validation of program headers containing ELF metadata can lead to image verification bypass in Snapdragon Auto, Snapdragon…
• CVE-2022-33257 — CVSS 9.3 (critical): Memory corruption in Core due to time-of-check time-of-use race condition during dump collection in trust zone.
• CVE-2023-33030 — CVSS 9.3 (critical): Memory corruption in HLOS while running playready use-case.
• CVE-2020-11126 — CVSS 9.1 (critical): Possible out of bound read while WLAN frame parsing due to lack of check for body and header length in Snapdragon Auto, Snapdragon Compute…
• CVE-2020-11275 — CVSS 9.1 (critical): Possible buffer over-read while parsing quiet IE in Rx beacon frame due to improper check of IE length in received beacon in Snapdragon…
• CVE-2020-11276 — CVSS 9.1 (critical): Possible buffer over read while processing P2P IE and NOA attribute of beacon and probe response frames due to improper validation of P2P…
• CVE-2020-11169 — CVSS 9.1 (critical): u'Buffer over-read while processing received L2CAP packet due to lack of integer overflow check' in Snapdragon Auto, Snapdragon Compute…
• CVE-2020-11159 — CVSS 9.1 (critical): Buffer over-read can happen while processing WPA,RSN IE of beacon and response frames if IE length is less than length of frame pointer…
• CVE-2020-11301 — CVSS 9.1 (critical): Improper authentication of un-encrypted plaintext Wi-Fi frames in an encrypted network can lead to information disclosure in Snapdragon…
• CVE-2020-11269 — CVSS 8.8 (high): Possible memory corruption while processing EAPOL frames due to lack of validation of key length before using it in Snapdragon Auto…
• CVE-2020-11155 — CVSS 8.8 (high): u'Buffer overflow while processing PDU packet in bluetooth due to lack of check of buffer length before copying into it.' in Snapdragon…
• CVE-2020-11154 — CVSS 8.8 (high): u'Buffer overflow while processing a crafted PDU data packet in bluetooth due to lack of check of buffer size before copying' in Snapdragon…
• CVE-2023-33022 — CVSS 8.4 (high): Memory corruption in HLOS while invoking IOCTL calls from user-space.
• CVE-2023-21628 — CVSS 8.4 (high): Memory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command.
• CVE-2023-24852 — CVSS 8.4 (high): Memory Corruption in Core due to secure memory access by user while loading modem image.
• CVE-2023-28538 — CVSS 8.4 (high): Memory corruption in WIN Product while invoking WinAcpi update driver in the UEFI region.
• CVE-2023-28547 — CVSS 8.4 (high): Memory corruption in SPS Application while requesting for public key in sorter TA.
• CVE-2021-30260 — CVSS 8.4 (high): Possible Integer overflow to buffer overflow issue can occur due to improper validation of input parameters when extscan hostlist…
• CVE-2021-30288 — CVSS 8.4 (high): Possible stack overflow due to improper length check of TLV while copying the TLV to a local stack variable in Snapdragon Auto, Snapdragon…
• CVE-2022-22058 — CVSS 8.4 (high): Memory corruption due to use after free issue in kernel while processing ION handles in Snapdragon Auto, Snapdragon Compute, Snapdragon…
• CVE-2022-33214 — CVSS 8.4 (high): Memory corruption in display due to time-of-check time-of-use of metadata reserved size in Snapdragon Auto, Snapdragon Compute, Snapdragon…
• CVE-2024-21461 — CVSS 8.4 (high): Memory corruption while performing finish HMAC operation when context is freed by keymaster.
• CVE-2022-33277 — CVSS 8.4 (high): Memory corruption in modem due to buffer copy without checking size of input while receiving WMI command.
• CVE-2020-11234 — CVSS 8.4 (high): When sending a socket event message to a user application, invalid information will be passed if socket is freed by other thread resulting…
• CVE-2022-40507 — CVSS 8.4 (high): Memory corruption due to double free in Core while mapping HLOS address to the list.
• CVE-2021-1892 — CVSS 8.4 (high): Memory corruption due to improper input validation while processing IO control which is nonstandard in Snapdragon Compute, Snapdragon…
• CVE-2023-33088 — CVSS 8.4 (high): Memory corruption when processing cmd parameters while parsing vdev.
• CVE-2022-40516 — CVSS 8.4 (high): Memory corruption in Core due to stack-based buffer overflow.
• CVE-2022-40517 — CVSS 8.4 (high): Memory corruption in core due to stack-based buffer overflow
• CVE-2023-33023 — CVSS 8.4 (high): Memory corruption while processing finish_sign command to pass a rsp buffer.
• CVE-2022-40530 — CVSS 8.4 (high): Memory corruption in WLAN due to integer overflow to buffer overflow in WLAN during initialization phase.
• CVE-2022-40531 — CVSS 8.4 (high): Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message.
• CVE-2022-40532 — CVSS 8.4 (high): Memory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target.
• CVE-2022-33271 — CVSS 8.2 (high): Information disclosure due to buffer over-read in WLAN while parsing NMF frame.
• CVE-2022-40503 — CVSS 8.2 (high): Information disclosure due to buffer over-read in Bluetooth Host while A2DP streaming.
• CVE-2022-33235 — CVSS 8.2 (high): Information disclosure due to buffer over-read in WLAN firmware while parsing security context info attributes. in Snapdragon Auto…
• CVE-2023-28545 — CVSS 8.2 (high): Memory corruption in TZ Secure OS while loading an app ELF.
• CVE-2024-38408 — CVSS 8.2 (high): Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.
• CVE-2021-35083 — CVSS 8.2 (high): Possible out of bound read due to improper validation of certificate chain in SSL or Internet key exchange in Snapdragon Auto, Snapdragon…
• CVE-2023-28585 — CVSS 8.2 (high): Memory corruption while loading an ELF segment in TEE Kernel.
• CVE-2022-22062 — CVSS 8.2 (high): An out-of-bounds read can occur while parsing a server certificate due to improper length check in Snapdragon Auto, Snapdragon Compute…
• CVE-2023-28558 — CVSS 7.8 (high): Memory corruption in WLAN handler while processing PhyID in Tx status handler.
• CVE-2023-28557 — CVSS 7.8 (high): Memory corruption in WLAN HAL while processing command parameters from untrusted WMI payload.
• CVE-2023-28587 — CVSS 7.8 (high): Memory corruption in BT controller while parsing debug commands with specific sub-opcodes at HCI interface level.
• CVE-2023-28550 — CVSS 7.8 (high): Memory corruption in MPP performance while accessing DSM watermark using external memory address.
• CVE-2025-27054 — CVSS 7.8 (high): Memory corruption while processing a malformed license file during reboot.
• CVE-2023-28546 — CVSS 7.8 (high): Memory Corruption in SPS Application while exporting public key in sorter TA.
• CVE-2023-28544 — CVSS 7.8 (high): Memory corruption in WLAN while sending transmit command from HLOS to UTF handlers.
• CVE-2023-28541 — CVSS 7.8 (high): Memory Corruption in Data Modem while processing DMA buffer release event about CFR data.
• CVE-2023-43542 — CVSS 7.8 (high): Memory corruption while copying a keyblob`s material when the key material`s size is not accurately checked.
• CVE-2023-24850 — CVSS 7.8 (high): Memory Corruption in HLOS while importing a cryptographic key into KeyMaster Trusted Application.
• CVE-2020-11235 — CVSS 7.8 (high): Buffer overflow might occur while parsing unified command due to lack of check of input data received in Snapdragon Auto, Snapdragon…
• CVE-2019-14037 — CVSS 7.8 (high): Close and bind operations done on a socket can lead to a Use-After-Free condition. in Snapdragon Auto, Snapdragon Compute, Snapdragon…
• CVE-2021-1915 — CVSS 7.8 (high): Buffer overflow can occur due to improper validation of NDP application information length in Snapdragon Auto, Snapdragon Compute…
• CVE-2025-21481 — CVSS 7.8 (high): Memory corruption while performing private key encryption in trusted application.
• CVE-2025-21439 — CVSS 7.8 (high): Memory corruption may occur while reading board data via IOCTL call when the WLAN driver copies the content to the provided output buffer.
• CVE-2023-33017 — CVSS 7.8 (high): Memory corruption in Boot while running a ListVars test in UEFI Menu during boot.
• CVE-2025-21438 — CVSS 7.8 (high): Memory corruption while IOCTL call is invoked from user-space to read board data.
• CVE-2025-21432 — CVSS 7.8 (high): Memory corruption while retrieving the CBOR data from TA.
• CVE-2024-49835 — CVSS 7.8 (high): Memory corruption while reading secure file.
• CVE-2022-33278 — CVSS 7.8 (high): Memory corruption due to buffer copy without checking the size of input in HLOS when input message size is larger than the buffer capacity.
• CVE-2024-45541 — CVSS 7.8 (high): Memory corruption when IOCTL call is invoked from user-space to read board data.
• CVE-2025-27053 — CVSS 7.8 (high): Memory corruption during PlayReady APP usecase while processing TA commands.
• CVE-2023-28567 — CVSS 7.8 (high): Memory corruption in WLAN HAL while handling command through WMI interfaces.
• CVE-2024-45542 — CVSS 7.8 (high): Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver.
• CVE-2023-28565 — CVSS 7.8 (high): Memory corruption in WLAN HAL while handling command streams through WMI interfaces.
• CVE-2021-30303 — CVSS 7.8 (high): Possible buffer overflow due to lack of buffer length check when segmented WMI command is received in Snapdragon Auto, Snapdragon Compute…
• CVE-2023-28564 — CVSS 7.8 (high): Memory corruption in WLAN HAL while passing command parameters through WMI interfaces.
• CVE-2024-43050 — CVSS 7.8 (high): Memory corruption while invoking IOCTL calls from user space to issue factory test command inside WLAN driver.
• CVE-2023-28560 — CVSS 7.8 (high): Memory corruption in WLAN HAL while processing devIndex from untrusted WMI payload.
• CVE-2019-10527 — CVSS 7.8 (high): u'SMEM partition can be manipulated in case of any compromise on HLOS, thus resulting in access to memory outside of SMEM address range…
• CVE-2024-23356 — CVSS 7.8 (high): Memory corruption during session sign renewal request calls in HLOS.
• CVE-2024-21465 — CVSS 7.8 (high): Memory corruption while processing key blob passed by the user.
• CVE-2023-28559 — CVSS 7.8 (high): Memory corruption in WLAN FW while processing command parameters from untrusted WMI payload.
• CVE-2023-21652 — CVSS 7.7 (high): Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use.
• CVE-2024-33051 — CVSS 7.5 (high): Transient DOS while processing TIM IE from beacon frame as there is no check for IE length.
• CVE-2020-11119 — CVSS 7.5 (high): Buffer over-read can happen when the buffer length received from response handlers is more than the size of the payload in Snapdragon Auto…
• CVE-2020-11238 — CVSS 7.5 (high): Possible Buffer over-read in ARP/NS parsing due to lack of check of packet length received in Snapdragon Auto, Snapdragon Compute…
• CVE-2020-11241 — CVSS 7.5 (high): Out of bound read will happen if EAPOL Key length is less than expected while processing NAN shared key descriptor attribute in Snapdragon…
• CVE-2020-11270 — CVSS 7.5 (high): Possible denial of service due to RTT responder consistently rejects all FTMR by transmitting FTM1 with failure status in the FTM parameter…
• CVE-2020-11278 — CVSS 7.5 (high): Possible denial of service while handling host WMI command due to improper validation in Snapdragon Auto, Snapdragon Compute, Snapdragon…
• CVE-2020-11280 — CVSS 7.5 (high): Denial of service while processing fine timing measurement request (FTMR) frame with reserved bits set in the FTM parameter IE due to…
• CVE-2020-11281 — CVSS 7.5 (high): Allowing RTT frames to be linked with non randomized MAC address by comparing the sequence numbers can lead to information disclosure. in…
• CVE-2020-11296 — CVSS 7.5 (high): Arithmetic overflow can happen while processing NOA IE due to improper error handling in Snapdragon Auto, Snapdragon Compute, Snapdragon…
• CVE-2020-11297 — CVSS 7.5 (high): Denial of service in WLAN module due to improper check of subtypes in logic where excessive frames are dropped in Snapdragon Auto…
• CVE-2021-1925 — CVSS 7.5 (high): Possible denial of service scenario due to improper handling of group management action frame in Snapdragon Auto, Snapdragon Compute…
• CVE-2021-1938 — CVSS 7.5 (high): Possible assertion due to improper verification while creating and deleting the peer in Snapdragon Auto, Snapdragon Compute, Snapdragon…
• CVE-2021-1953 — CVSS 7.5 (high): Improper handling of received malformed FTMR request frame can lead to reachable assertion while responding with FTM1 frame in Snapdragon…
• CVE-2021-30327 — CVSS 7.5 (high): Buffer overflow in sahara protocol while processing commands leads to overwrite of secure configuration data in Snapdragon Mobile…
• CVE-2022-22064 — CVSS 7.5 (high): Possible buffer over read due to lack of size validation while unpacking frame in Snapdragon Auto, Snapdragon Compute, Snapdragon…
• CVE-2022-22065 — CVSS 7.5 (high): Out of bound read in WLAN HOST due to improper length check can lead to DOS in Snapdragon Auto, Snapdragon Compute, Snapdragon…
• CVE-2022-25690 — CVSS 7.5 (high): Information disclosure in WLAN due to improper validation of array index while parsing crafted ANQP action frames in Snapdragon Auto…
• CVE-2022-25736 — CVSS 7.5 (high): Denial of service in WLAN due to out-of-bound read happens while processing VHT action frame in Snapdragon Auto, Snapdragon Compute…
• CVE-2022-25749 — CVSS 7.5 (high): Transient Denial-of-Service in WLAN due to buffer over-read while parsing MDNS frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon…
• CVE-2022-33237 — CVSS 7.5 (high): Transient DOS due to buffer over-read in WLAN firmware while processing PPE threshold. in Snapdragon Auto, Snapdragon Compute, Snapdragon…
• CVE-2022-33238 — CVSS 7.5 (high): Transient DOS due to loop with unreachable exit condition in WLAN while processing an incoming FTM frames. in Snapdragon Auto, Snapdragon…
• CVE-2022-33239 — CVSS 7.5 (high): Transient DOS due to loop with unreachable exit condition in WLAN firmware while parsing IPV6 extension header. in Snapdragon Auto…
• CVE-2022-33285 — CVSS 7.5 (high): Transient DOS due to buffer over-read in WLAN while parsing WLAN CSA action frames.
• CVE-2022-33286 — CVSS 7.5 (high): Transient DOS due to buffer over-read in WLAN while processing 802.11 management frames.
• CVE-2022-40512 — CVSS 7.5 (high): Transient DOS in WLAN Firmware due to buffer over-read while processing probe response or beacon.
• CVE-2023-24847 — CVSS 7.5 (high): Transient DOS in Modem while allocating DSM items.
• CVE-2023-28588 — CVSS 7.5 (high): Transient DOS in Bluetooth Host while rfc slot allocation.
• CVE-2023-33015 — CVSS 7.5 (high): Transient DOS in WLAN Firmware while interpreting MBSSID IE of a received beacon frame.
• CVE-2023-33027 — CVSS 7.5 (high): Transient DOS in WLAN Firmware while parsing rsn ies.
• CVE-2023-33062 — CVSS 7.5 (high): Transient DOS in WLAN Firmware while parsing a BTM request.
• CVE-2023-33080 — CVSS 7.5 (high): Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame.
• CVE-2023-33098 — CVSS 7.5 (high): Transient DOS while parsing WPA IES, when it is passed with length more than expected size.
• CVE-2023-33109 — CVSS 7.5 (high): Transient DOS while processing a WMI P2P listen start command (0xD00A) sent from host.
• CVE-2023-43511 — CVSS 7.5 (high): Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next…
• CVE-2023-43512 — CVSS 7.5 (high): Transient DOS while parsing GATT service data when the total amount of memory that is required by the multiple services is greater than the…
• CVE-2023-43536 — CVSS 7.5 (high): Transient DOS while parse fils IE with length equal to 1.
• CVE-2025-27066 — CVSS 7.5 (high): Transient DOS while processing an ANQP message.
• CVE-2025-47318 — CVSS 7.5 (high): Transient DOS while parsing the EPTM test control message to get the test pattern.
• CVE-2023-43548 — CVSS 7.3 (high): Memory corruption while parsing qcp clip with invalid chunk data size.
• CVE-2022-33234 — CVSS 7.3 (high): Memory corruption in video due to configuration weakness. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
• CVE-2021-30271 — CVSS 7.3 (high): Possible null pointer dereference in trap handler due to lack of thread ID validation before dereferencing it in Snapdragon Auto…
• CVE-2022-25687 — CVSS 7.3 (high): memory corruption in video due to buffer overflow while parsing asf clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity…
• CVE-2022-40515 — CVSS 7.3 (high): Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms.
• CVE-2021-30272 — CVSS 7.3 (high): Possible null pointer dereference in thread cache operation handler due to lack of validation of user provided input in Snapdragon Auto…
• CVE-2021-1909 — CVSS 7.3 (high): Buffer overflow occurs in trusted applications due to lack of length check of parameters in Snapdragon Auto, Snapdragon Compute, Snapdragon…
• CVE-2022-40537 — CVSS 7.3 (high): Memory corruption in Bluetooth HOST while processing the AVRC_PDU_GET_PLAYER_APP_VALUE_TEXT AVRCP response.
• CVE-2023-43518 — CVSS 7.3 (high): Memory corruption in video while parsing invalid mp2 clip.
• CVE-2023-43519 — CVSS 7.3 (high): Memory corruption in video while parsing the Videoinfo, when the size of atom is greater than the videoinfo size.
• CVE-2021-30269 — CVSS 7.3 (high): Possible null pointer dereference due to lack of TLB validation for user provided address in Snapdragon Auto, Snapdragon Compute…
• CVE-2024-21469 — CVSS 7.3 (high): Memory corruption when an invoke call and a TEE call are bound for the same trusted application.
• CVE-2022-22076 — CVSS 7.1 (high): information disclosure due to cryptographic issue in Core during RPMB read request.
• CVE-2023-21626 — CVSS 7.1 (high): Cryptographic issue in HLOS due to improper authentication while performing key velocity checks using more than one key.
• CVE-2023-28556 — CVSS 7.1 (high): Cryptographic issue in HLOS during key management.
• CVE-2024-21462 — CVSS 7.1 (high): Transient DOS while loading the TA ELF file.
• CVE-2022-40523 — CVSS 7.1 (high): Information disclosure in Kernel due to indirect branch misprediction.
• CVE-2024-23362 — CVSS 7.1 (high): Cryptographic issue while parsing RSA keys in COBR format.
• CVE-2022-25676 — CVSS 6.8 (medium): Information disclosure in video due to buffer over-read while parsing avi files in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer…
• CVE-2022-40519 — CVSS 6.8 (medium): Information disclosure due to buffer overread in Core
• CVE-2024-33016 — CVSS 6.8 (medium): memory corruption when an invalid firehose patch command is invoked.
• CVE-2022-40518 — CVSS 6.8 (medium): Information disclosure due to buffer overread in Core
• CVE-2022-33245 — CVSS 6.7 (medium): Memory corruption in WLAN due to use after free
• CVE-2025-47370 — CVSS 6.5 (medium): Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan.
• CVE-2025-21464 — CVSS 6.5 (medium): Information disclosure while reading data from an image using specified offset and size parameters.
• CVE-2025-21465 — CVSS 6.5 (medium): Information disclosure while processing the hash segment in an MBN file.
• CVE-2021-1956 — CVSS 6.5 (medium): Improper handling of ASB-U packet with L2CAP channel ID by slave host can lead to interference with piconet in Snapdragon Auto, Snapdragon…
• CVE-2021-1960 — CVSS 6.5 (medium): Improper handling of ASB-C broadcast packets with crafted opcode in LMP can lead to uncontrolled resource consumption in Snapdragon Auto…
• CVE-2021-30348 — CVSS 6.5 (medium): Improper validation of LLM utility timers availability can lead to denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon…
• CVE-2022-25679 — CVSS 6.2 (medium): Denial of service in video due to improper access control in broadcast receivers in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon…
• CVE-2024-45551 — CVSS 6.2 (medium): Cryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can be dropped on verification failure…
• CVE-2025-21433 — CVSS 6.2 (medium): Transient DOS when importing a PKCS#8-encoded RSA private key with a zero-sized modulus.
• CVE-2024-23357 — CVSS 6.2 (medium): Transient DOS while importing a PKCS#8-encoded RSA key with zero bytes modulus.
• CVE-2022-22075 — CVSS 6.2 (medium): Information Disclosure in Graphics during GPU context switch.
• CVE-2023-28569 — CVSS 6.1 (medium): Information disclosure in WLAN HAL while handling command through WMI interfaces.
• CVE-2023-28563 — CVSS 6.1 (medium): Information disclosure in IOE Firmware while handling WMI command.
• CVE-2023-28566 — CVSS 6.1 (medium): Information disclosure in WLAN HAL while handling the WMI state info command.
• CVE-2023-28586 — CVSS 6.0 (medium): Information disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE.
• CVE-2024-43051 — CVSS 5.5 (medium): Information disclosure while deriving keys for a session for any Widevine use case.
• CVE-2021-35084 — CVSS 5.5 (medium): Possible out of bound read due to lack of length check of data length for a DIAG event in Snapdragon Auto, Snapdragon Compute, Snapdragon…
• CVE-2024-43046 — CVSS 5.5 (medium): There may be information disclosure during memory re-allocation in TZ Secure OS.
• CVE-2021-1903 — CVSS 5.3 (medium): Possible denial of service scenario can occur due to lack of length check on Channel Switch Announcement IE in beacon or probe response…