QF
Product
Qca4004 Firmware
126
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 18High 94Medium 14Low 0
Watch
Add Qca4004 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-33016 | 6.8 | Sep 2 | Improper Restriction of Operations within the Bounds of a Memory Buffer in Storage Affected: 0 |
| CVE-2022-33289 | 6.8 | Apr 13 | Memory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card Affected: All versions, or not specified |
| CVE-2021-30349 | 6.7 | Jun 14 | Improper access control sequence for AC database after memory allocation can lead to possible memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2023-28586 | 6.5 | Dec 5 | Improper Restriction of Operation within the Bounds of a Memory Buffer in TZ Secure OS Affected: All versions, or not specified |
| CVE-2021-30342 | 5.9 | Jun 14 | Improper integrity check can lead to race condition between tasks PDCP and RRC? after a valid RRC Command packet has been received in Snapdragon Auto, Snapdragon Compute,… Affected: All versions, or not specified |
| CVE-2024-43046 | 5.5 | Apr 7 | Information Exposure in TZ Secure OS Affected: All versions, or not specified |
| CVE-2024-21462 | 5.5 | Jul 1 | Buffer Over-read in TZ Secure OS Affected: All versions, or not specified |
| CVE-2023-28563 | 5.5 | Nov 7 | Buffer Over-read in IOE Firmware Affected: All versions, or not specified |
| CVE-2022-40523 | 5.5 | Jun 6 | Information exposure in Kernel Affected: All versions, or not specified |
| CVE-2022-40519 | 5.5 | Jan 9 | Information disclosure due to buffer overread in Core Affected: All versions, or not specified |
| CVE-2022-40518 | 5.5 | Jan 9 | Information disclosure due to buffer overread in Core Affected: All versions, or not specified |
| CVE-2021-30278 | 5.5 | Jan 3 | Improper input validation in TrustZone memory transfer interface can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1935 | 5.5 | Sep 9 | Possible null pointer dereference due to lack of validation check for passed pointer during key import in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2024-38426 | 5.3 | Mar 3 | Improper Authentication in Modem Affected: All versions, or not specified |
Showing 14