QF
Product
Qca4004 Firmware
126
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 18High 94Medium 14Low 0
Watch
Add Qca4004 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-22388 | 9.8 | Nov 7 | Use of Out-of-range Pointer Offset in Multi-mode Call Processor Affected: All versions, or not specified |
| CVE-2023-22385 | 9.8 | Oct 3 | Buffer Over-read in Data Modem Affected: All versions, or not specified |
| CVE-2023-21631 | 9.8 | Jul 4 | Improper Input Validation in Modem Affected: All versions, or not specified |
| CVE-2022-33259 | 9.8 | Apr 4 | Buffer copy without checking the size of input in Modem Affected: All versions, or not specified |
| CVE-2022-33211 | 9.8 | Apr 4 | Improper Input Validation in MODEM Affected: All versions, or not specified |
| CVE-2022-25745 | 9.8 | Apr 4 | Always Incorrect Control Flow Implementation in MODEM Affected: All versions, or not specified |
| CVE-2022-25740 | 9.8 | Apr 4 | Buffer Copy Without Checking Size of Input in MODEM Affected: All versions, or not specified |
| CVE-2022-25678 | 9.8 | Apr 4 | Buffer Copy Without Checking Size of Input in MODEM Affected: All versions, or not specified |
| CVE-2022-25729 | 9.8 | Feb 9 | Improper Input Validation in MODEM Affected: All versions, or not specified |
| CVE-2022-25727 | 9.8 | Nov 15 | Memory Corruption in modem due to improper length check while copying into memory in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music Affected: All versions, or not specified |
| CVE-2022-25674 | 9.8 | Nov 15 | Cryptographic issues in WLAN during the group key handshake of the WPA/WPA2 protocol in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music Affected: All versions, or not specified |
| CVE-2022-25718 | 9.8 | Oct 19 | Cryptographic issue in WLAN due to improper check on return value while authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics… Affected: All versions, or not specified |
| CVE-2021-30341 | 9.8 | Jun 14 | Improper buffer size validation of DSM packet received can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2021-1975 | 9.8 | Nov 12 | Possible heap overflow due to improper length check of domain while parsing the DNS response in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2021-1920 | 9.8 | Sep 8 | Integer underflow can occur due to improper handling of incoming RTCP packets in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1916 | 9.8 | Sep 8 | Possible buffer underflow due to lack of check for negative indices values when processing user provided input in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2022-25719 | 9.1 | Oct 19 | Information disclosure in WLAN due to improper length check while processing authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics… Affected: All versions, or not specified |
| CVE-2021-30284 | 9.1 | Nov 12 | Possible information exposure and denial of service due to NAS not dropping messages when integrity check fails in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2023-28585 | 8.8 | Dec 5 | Integer Overflow to Buffer Overflow in TZ Secure OS Affected: All versions, or not specified |
| CVE-2022-33213 | 8.8 | Mar 7 | Memory Corruption in MODEM Affected: 0 |
| CVE-2021-30285 | 8.8 | Jan 13 | Improper validation of memory region in Hypervisor can lead to incorrect region mapping in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2024-23359 | 8.2 | Sep 2 | Buffer Over-read in Multi Mode Call Processor Affected: 0 |
| CVE-2025-27053 | 7.8 | Oct 9 | Incorrect Calculation of Buffer Size in HLOS Affected: All versions, or not specified |
| CVE-2024-21469 | 7.8 | Jul 1 | Permissions, Privileges, and Access Control issues in TZ Secure OS Affected: 0 |
| CVE-2024-21465 | 7.8 | Jul 1 | Buffer Over-read in Trusted Execution Environment Affected: 0 |
| CVE-2024-21461 | 7.8 | Jul 1 | Double Free in HLOS Affected: 0 |
| CVE-2023-43542 | 7.8 | Jun 3 | Buffer Copy Without Checking Size of Input in Trusted Execution Environment Affected: 0 |
| CVE-2023-28547 | 7.8 | Apr 1 | Buffer Copy Without Checking Size of Input in SPS Applications Affected: 0 |
| CVE-2023-33072 | 7.8 | Feb 6 | Buffer copy without checking size of Input in Core Affected: All versions, or not specified |
| CVE-2023-33033 | 7.8 | Jan 2 | Use of Out-of-range Pointer Offset in Audio Affected: All versions, or not specified |
| CVE-2023-33032 | 7.8 | Jan 2 | Integer Overflow or Wraparound in TZ Secure OS Affected: All versions, or not specified |
| CVE-2023-33030 | 7.8 | Jan 2 | Buffer Copy without Checking Size of Input in HLOS Affected: All versions, or not specified |
| CVE-2023-33018 | 7.8 | Dec 5 | Integer Overflow to Buffer Overflow in User Identity Module Affected: All versions, or not specified |
| CVE-2023-33017 | 7.8 | Dec 5 | Buffer Copy Without Checking Size of Input in Boot Affected: All versions, or not specified |
| CVE-2023-28551 | 7.8 | Dec 5 | Improper Restriction of Operations within the Bounds of a Memory Buffer in UTILS Affected: All versions, or not specified |
| CVE-2023-28546 | 7.8 | Dec 5 | Buffer Copy Without Checking Size of Input in SPS Applications Affected: All versions, or not specified |
| CVE-2023-28556 | 7.8 | Nov 7 | Improper Authorization in HLOS Affected: All versions, or not specified |
| CVE-2023-28545 | 7.8 | Nov 7 | Improper Restriction of Operations within the Bounds of a Memory Buffer in TZ Secure OS Affected: All versions, or not specified |
| CVE-2023-24852 | 7.8 | Nov 7 | Improper Authentication in Core Affected: All versions, or not specified |
| CVE-2023-21651 | 7.8 | Aug 8 | Incorrect Type Conversion or Cast in Core Affected: 0 |
| CVE-2022-40507 | 7.8 | Jun 6 | Double free in Core Affected: All versions, or not specified |
| CVE-2022-33302 | 7.8 | Apr 4 | Improper validation of array index in User Identity Module Affected: All versions, or not specified |
| CVE-2022-33231 | 7.8 | Apr 4 | Double free in Core Affected: All versions, or not specified |
| CVE-2022-40531 | 7.8 | Mar 7 | Incorrect type conversion in WLAN Affected: All versions, or not specified |
| CVE-2022-25705 | 7.8 | Mar 7 | Integer Overflow to Buffer Overflow in Modem Affected: All versions, or not specified |
| CVE-2022-25694 | 7.8 | Mar 7 | Use of Out-of-range Pointer Offset in MODEM Affected: All versions, or not specified |
| CVE-2022-33233 | 7.8 | Feb 9 | Configuration weakness in modem Affected: All versions, or not specified |
| CVE-2022-40520 | 7.8 | Jan 6 | Stack based buffer overflow in Core Affected: All versions, or not specified |
| CVE-2022-40517 | 7.8 | Jan 6 | Stack based buffer overflow in Core Affected: All versions, or not specified |
| CVE-2022-40516 | 7.8 | Jan 6 | Stack-based buffer overflow in Core Affected: All versions, or not specified |
