QF
Product
Qca2066 Firmware
On CISA KEVExploited in the wild
81
CVEs
1
On KEV
9.8
Max CVSS
2
New 30D
Severity mix
Critical 7High 64Medium 10Low 0
Watch
Add Qca2066 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-27038 In wildKEV | 7.5 | Jun 3 | Use After Free in Graphics Affected: All versions, or not specified |
| CVE-2026-57545 | 7.8 | Oct 6 | Untrusted Pointer Dereference in Graphics Affected: All versions, or not specified |
| CVE-2025-59600 | 7.8 | Mar 2 | Buffer Over-read in Graphics Affected: All versions, or not specified |
| CVE-2025-47386 | 7.8 | Mar 2 | Use After Free in Automotive Audio Affected: All versions, or not specified |
| CVE-2025-47376 | 7.8 | Mar 2 | Use After Free in Automotive Audio Affected: All versions, or not specified |
| CVE-2025-47397 | 7.8 | Feb 2 | Improper Release of Memory Before Removing Last Reference in Graphics Affected: All versions, or not specified |
| CVE-2025-47322 | 7.8 | Dec 18 | Use After Free in Automotive Linux OS Affected: All versions, or not specified |
| CVE-2025-47321 | 7.8 | Dec 18 | Buffer Copy Without Checking Size of Input in Core Services Affected: All versions, or not specified |
| CVE-2025-21441 | 7.8 | Apr 7 | Out-of-bounds Read in Windows WLAN Host Affected: All versions, or not specified |
| CVE-2025-21440 | 7.8 | Apr 7 | Out-of-bounds Read in Windows WLAN Host Affected: All versions, or not specified |
| CVE-2024-45542 | 7.8 | Jan 6 | Stack-based Buffer Overflow in WLAN Windows Host Affected: All versions, or not specified |
| CVE-2024-45541 | 7.8 | Jan 6 | Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Windows Host Affected: All versions, or not specified |
| CVE-2024-43053 | 7.8 | Dec 2 | Improper Restriction of Operations within the Bounds of a Memory Buffer in WLAN Windows Host Affected: 0 |
| CVE-2024-43050 | 7.8 | Dec 2 | Stack-based Buffer Overflow in WLAN Windows Host Affected: 0 |
| CVE-2023-33088 | 7.8 | Dec 5 | NULL pointer dereference in WLAN Firmware Affected: All versions, or not specified |
| CVE-2023-28587 | 7.8 | Dec 5 | Improper Restriction of Operations within the Bounds of a Memory Buffer in BT Controller Affected: All versions, or not specified |
| CVE-2023-28573 | 7.8 | Sep 5 | Improper Validation of Array Index in WLAN HAL Affected: All versions, or not specified |
| CVE-2023-28567 | 7.8 | Sep 5 | Improper Validation of Array Index in WLAN HAL Affected: All versions, or not specified |
| CVE-2023-28558 | 7.8 | Sep 5 | Improper Validation of Array Index in WLAN HAL Affected: 0 |
| CVE-2023-28557 | 7.8 | Sep 5 | Improper Validation of Array Index in WLAN HAL Affected: 0 |
| CVE-2023-28549 | 7.8 | Sep 5 | Improper Restriction of Operations within the Bounds of a Memory Buffer in WLAN HAL Affected: All versions, or not specified |
| CVE-2023-28548 | 7.8 | Sep 5 | Improper Validation of Array Index in WLAN HAL Affected: All versions, or not specified |
| CVE-2022-33275 | 7.8 | Sep 5 | Improper validation of array index in WLAN HAL Affected: All versions, or not specified |
| CVE-2022-40531 | 7.8 | Mar 7 | Incorrect type conversion in WLAN Affected: All versions, or not specified |
| CVE-2022-40530 | 7.8 | Mar 7 | Integer overflow to buffer overflow in WLAN Affected: All versions, or not specified |
| CVE-2022-33277 | 7.8 | Feb 9 | Buffer copy without checking size of input in modem Affected: All versions, or not specified |
| CVE-2022-33276 | 7.8 | Jan 6 | Buffer copy without checking size of input in Modem Affected: All versions, or not specified |
| CVE-2021-35129 | 7.8 | Jun 14 | Memory corruption in BT controller due to improper length check while processing vendor specific commands in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2021-30303 | 7.8 | Jan 3 | Possible buffer overflow due to lack of buffer length check when segmented WMI command is received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30271 | 7.8 | Jan 3 | Possible null pointer dereference in trap handler due to lack of thread ID validation before dereferencing it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2021-30270 | 7.8 | Jan 3 | Possible null pointer dereference in thread profile trap handler due to lack of thread ID validation before dereferencing it in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30269 | 7.8 | Jan 3 | Possible null pointer dereference due to lack of TLB validation for user provided address in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2021-30288 | 7.8 | Oct 20 | Possible stack overflow due to improper length check of TLV while copying the TLV to a local stack variable in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2021-1892 | 7.8 | Apr 7 | Memory corruption due to improper input validation while processing IO control which is nonstandard in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics… Affected: All versions, or not specified |
| CVE-2026-25275 | 7.5 | Sep 17 | Buffer Over-read in WLAN Firmware Affected: All versions, or not specified |
| CVE-2025-21446 | 7.5 | Jul 8 | Buffer Over-read in WLAN Firmware Affected: All versions, or not specified |
| CVE-2024-33051 | 7.5 | Sep 2 | Buffer Over-read in WLAN Firmware Affected: 0 |
| CVE-2024-23364 | 7.5 | Sep 2 | Buffer Over-read in WLAN Firmware Affected: 0 |
| CVE-2023-43536 | 7.5 | Feb 6 | Buffer Over-read in WLAN Firmware Affected: All versions, or not specified |
| CVE-2023-43533 | 7.5 | Feb 6 | Buffer Over-read in WLAN Firmware Affected: All versions, or not specified |
| CVE-2023-43522 | 7.5 | Feb 6 | NULL Pointer Dereference in WLAN Firmware Affected: 0 |
| CVE-2023-33062 | 7.5 | Jan 2 | Buffer Over-read in WLAN Firmware Affected: All versions, or not specified |
| CVE-2023-33098 | 7.5 | Dec 5 | Buffer Over-read in WLAN Firmware Affected: All versions, or not specified |
| CVE-2023-33089 | 7.5 | Dec 5 | NULL Pointer Dereference in WLAN Firmware Affected: All versions, or not specified |
| CVE-2023-33047 | 7.5 | Nov 7 | Buffer Over-read in WLAN Firmware Affected: All versions, or not specified |
| CVE-2023-33026 | 7.5 | Oct 3 | Buffer over-read in WLAN Firmware Affected: 0 |
| CVE-2023-33015 | 7.5 | Sep 5 | Buffer Over-read in WLAN Firmware Affected: All versions, or not specified |
| CVE-2023-21659 | 7.5 | Jun 6 | Buffer Over-read in WLAN Firmware Affected: All versions, or not specified |
| CVE-2023-21658 | 7.5 | Jun 6 | Buffer Over-Read in WLAN Firmware Affected: All versions, or not specified |
| CVE-2022-33306 | 7.5 | Feb 9 | Buffer over-read in WLAN Affected: All versions, or not specified |