QF
Product
Qca4004 Firmware
126
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 18High 94Medium 14Low 0
Watch
Add Qca4004 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-25682 | 7.8 | Dec 13 | Memory corruption in MODEM UIM due to usage of out of range pointer offset while decoding command from card in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2022-25695 | 7.8 | Dec 13 | Memory corruption in MODEM due to Improper Validation of Array Index while processing GSTK Proactive commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2021-30281 | 7.8 | Jun 14 | Possible unauthorized access to secure space due to improper check of data allowed while flashing the no access control device configuration in Snapdragon Auto, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30323 | 7.8 | Feb 11 | Improper validation of maximum size of data write to EFS file can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial… Affected: All versions, or not specified |
| CVE-2021-30289 | 7.8 | Jan 3 | Possible buffer overflow due to lack of range check while processing a DIAG command for COEX management in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30282 | 7.8 | Jan 3 | Possible out of bound write in RAM partition table due to improper validation on number of partitions provided in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2021-30275 | 7.8 | Jan 3 | Possible integer overflow in page alignment interface due to lack of address and size validation before alignment in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2021-30274 | 7.8 | Jan 3 | Possible integer overflow in access control initialization interface due to lack and size and address validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2021-30272 | 7.8 | Jan 3 | Possible null pointer dereference in thread cache operation handler due to lack of validation of user provided input in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30271 | 7.8 | Jan 3 | Possible null pointer dereference in trap handler due to lack of thread ID validation before dereferencing it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2021-30270 | 7.8 | Jan 3 | Possible null pointer dereference in thread profile trap handler due to lack of thread ID validation before dereferencing it in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30269 | 7.8 | Jan 3 | Possible null pointer dereference due to lack of TLB validation for user provided address in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2021-30268 | 7.8 | Jan 3 | Possible heap Memory Corruption Issue due to lack of input validation when sending HWTC IQ Capture command in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2021-1894 | 7.8 | Jan 3 | Improper access control in TrustZone due to improper error handling while handling the signing key in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30259 | 7.8 | Nov 12 | Possible out of bound access due to improper validation of function table entries in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2021-30255 | 7.8 | Nov 12 | Possible buffer overflow due to improper input validation in PDM DIAG command in FTM in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2021-30254 | 7.8 | Nov 12 | Possible buffer overflow due to improper input validation in factory calibration and test DIAG command in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1973 | 7.8 | Nov 12 | A FTM Diag command can allow an arbitrary write into modem OS space in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial… Affected: All versions, or not specified |
| CVE-2021-30261 | 7.8 | Sep 17 | Possible integer and heap overflow due to lack of input command size validation while handling beacon template update command from HLOS in Snapdragon Auto, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2021-1952 | 7.8 | Sep 9 | Possible buffer over read occurs due to lack of length check of request buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1890 | 7.8 | Jul 13 | Improper length check of public exponent in RSA import key function could cause memory corruption Affected: All versions, or not specified |
| CVE-2021-1889 | 7.8 | Jul 13 | Possible buffer overflow due to lack of length check in Trusted Application in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1888 | 7.8 | Jul 13 | Memory corruption in key parsing and import function due to double freeing the same heap allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1886 | 7.8 | Jul 13 | Incorrect handling of pointers in trusted application key import mechanism could cause memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2020-11292 | 7.8 | Jun 9 | Possible buffer overflow in voice service due to lack of input validation of parameters in QMI Voice API in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2024-23353 | 7.5 | Aug 5 | Buffer Over-read in Multi Mode Call Processor Affected: 0 |
| CVE-2023-43551 | 7.5 | Jun 3 | Improper Authentication in Multi-Mode Call Processor Affected: All versions, or not specified |
| CVE-2023-21625 | 7.5 | Aug 8 | Buffer Over-read in Network Services Affected: All versions, or not specified |
| CVE-2022-40521 | 7.5 | Jun 6 | Improper authorization in Modem Affected: All versions, or not specified |
| CVE-2022-40505 | 7.5 | May 2 | Buffer over-read in Modem Affected: 0 |
| CVE-2022-33304 | 7.5 | May 2 | NULL pointers dereference in Modem Affected: All versions, or not specified |
| CVE-2022-33295 | 7.5 | Apr 4 | Buffer over-read in Modem Affected: All versions, or not specified |
| CVE-2022-33294 | 7.5 | Apr 4 | NULL pointer dereference in Modem Affected: All versions, or not specified |
| CVE-2022-33291 | 7.5 | Apr 4 | Buffer over-read in Modem Affected: All versions, or not specified |
| CVE-2022-33287 | 7.5 | Apr 4 | Buffer over-read in Modem Affected: 0 |
| CVE-2022-33258 | 7.5 | Apr 4 | Buffer over-read in Modem Affected: 0 |
| CVE-2022-33228 | 7.5 | Apr 4 | Buffer over-read in Modem Affected: All versions, or not specified |
| CVE-2022-33223 | 7.5 | Apr 4 | Null pointer dereference in Modem Affected: All versions, or not specified |
| CVE-2022-33222 | 7.5 | Apr 4 | Buffer over-read in Modem Affected: All versions, or not specified |
| CVE-2022-25747 | 7.5 | Apr 4 | Buffer Over-read in MODEM Affected: All versions, or not specified |
| CVE-2022-25739 | 7.5 | Apr 4 | Null Point Dereference in MODEM Affected: All versions, or not specified |
| CVE-2022-25737 | 7.5 | Apr 4 | Use of Uninitialized Variable in MODEM Affected: All versions, or not specified |
| CVE-2022-25731 | 7.5 | Apr 4 | Incorrect Calculation of Buffer Size in MODEM Affected: All versions, or not specified |
| CVE-2022-25730 | 7.5 | Apr 4 | Buffer Over-read in MODEM Affected: All versions, or not specified |
| CVE-2022-25726 | 7.5 | Apr 4 | Buffer Over-read in MODEM Affected: 0 |
| CVE-2022-33229 | 7.5 | Feb 9 | Buffer over-read in Modem Affected: 0 |
| CVE-2022-25738 | 7.5 | Feb 9 | Buffer Over-read in MODEM Affected: All versions, or not specified |
| CVE-2022-25735 | 7.5 | Feb 9 | Null Pointer Dereference in MODEM Affected: 0 |
| CVE-2022-25734 | 7.5 | Feb 9 | Loop with Unreachable Exit Condition in MODEM Affected: All versions, or not specified |
| CVE-2022-25733 | 7.5 | Feb 9 | Null Pointer Dereference in MODEM Affected: 0 |