QF
Product
Qca1990 Firmware
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 5Medium 0Low 0
Watch
Add Qca1990 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-11303 | 8.6 | Oct 20 | Accepting AMSDU frames with mismatched destination and source address can lead to information disclosure in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2023-28560 | 7.8 | Sep 5 | Memory corruption in WLAN HAL while processing devIndex from untrusted WMI payload Affected: All versions, or not specified |
| CVE-2021-1959 | 7.8 | Oct 20 | Possible memory corruption due to lack of bound check of input index in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30261 | 7.8 | Sep 17 | Possible integer and heap overflow due to lack of input command size validation while handling beacon template update command from HLOS in Snapdragon Auto, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2020-11292 | 7.8 | Jun 9 | Possible buffer overflow in voice service due to lack of input validation of parameters in QMI Voice API in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
Showing 5
