QF
Product
Qca4024 Firmware
On CISA KEVExploited in the wild
200
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 21High 150Medium 29Low 0
Watch
Add Qca4024 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-33048 | 7.5 | Nov 7 | Buffer over-read in WLAN Firmware Affected: 0 |
| CVE-2023-33047 | 7.5 | Nov 7 | Buffer Over-read in WLAN Firmware Affected: All versions, or not specified |
| CVE-2023-33026 | 7.5 | Oct 3 | Buffer over-read in WLAN Firmware Affected: 0 |
| CVE-2023-24847 | 7.5 | Oct 3 | NULL pointer Dereference in Modem Affected: 0 |
| CVE-2023-33016 | 7.5 | Sep 5 | Buffer Over-read in WLAN Firmware Affected: All versions, or not specified |
| CVE-2023-33015 | 7.5 | Sep 5 | Buffer Over-read in WLAN Firmware Affected: All versions, or not specified |
| CVE-2023-21625 | 7.5 | Aug 8 | Buffer Over-read in Network Services Affected: All versions, or not specified |
| CVE-2023-21661 | 7.5 | Jun 6 | Buffer Over-read in WLAN Firmware Affected: All versions, or not specified |
| CVE-2023-21660 | 7.5 | Jun 6 | Buffer Over-read in WLAN Firmware Affected: All versions, or not specified |
| CVE-2023-21659 | 7.5 | Jun 6 | Buffer Over-read in WLAN Firmware Affected: All versions, or not specified |
| CVE-2023-21658 | 7.5 | Jun 6 | Buffer Over-Read in WLAN Firmware Affected: All versions, or not specified |
| CVE-2022-33304 | 7.5 | May 2 | NULL pointers dereference in Modem Affected: All versions, or not specified |
| CVE-2022-33291 | 7.5 | Apr 4 | Buffer over-read in Modem Affected: All versions, or not specified |
| CVE-2022-33287 | 7.5 | Apr 4 | Buffer over-read in Modem Affected: 0 |
| CVE-2022-40535 | 7.5 | Mar 7 | Buffer Over-read in WLAN Affected: All versions, or not specified |
| CVE-2022-40527 | 7.5 | Mar 7 | Reachable Assertion in WLAN Embedded SW Affected: All versions, or not specified |
| CVE-2022-33309 | 7.5 | Mar 7 | Buiffer over-read in WLAN Firmware. Affected: All versions, or not specified |
| CVE-2022-40513 | 7.5 | Feb 9 | Uncontrolled resource consumption in WLAN Firmware. Affected: All versions, or not specified |
| CVE-2022-40502 | 7.5 | Feb 9 | Improper input validation in WLAN Host Affected: All versions, or not specified |
| CVE-2022-34146 | 7.5 | Feb 9 | Improper input validation in WLAN Host Affected: All versions, or not specified |
| CVE-2022-34145 | 7.5 | Feb 9 | Buffer over-read in WLAN Host Affected: All versions, or not specified |
| CVE-2022-33306 | 7.5 | Feb 9 | Buffer over-read in WLAN Affected: All versions, or not specified |
| CVE-2022-33271 | 7.5 | Feb 9 | Buffer over-read in WLAN Affected: 0 |
| CVE-2022-33229 | 7.5 | Feb 9 | Buffer over-read in Modem Affected: 0 |
| CVE-2022-25738 | 7.5 | Feb 9 | Buffer Over-read in MODEM Affected: All versions, or not specified |
| CVE-2022-25735 | 7.5 | Feb 9 | Null Pointer Dereference in MODEM Affected: 0 |
| CVE-2022-25734 | 7.5 | Feb 9 | Loop with Unreachable Exit Condition in MODEM Affected: All versions, or not specified |
| CVE-2022-25733 | 7.5 | Feb 9 | Null Pointer Dereference in MODEM Affected: 0 |
| CVE-2022-25732 | 7.5 | Feb 9 | Buffer Over-read in MODEM Affected: All versions, or not specified |
| CVE-2022-25728 | 7.5 | Feb 9 | Buffer Over-read in MODEM Affected: All versions, or not specified |
| CVE-2022-33235 | 7.5 | Dec 13 | Information disclosure due to buffer over-read in WLAN firmware while parsing security context info attributes Affected: All versions, or not specified |
| CVE-2022-25742 | 7.5 | Nov 15 | Denial of service in modem due to infinite loop while parsing IGMPv2 packet from server in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music Affected: All versions, or not specified |
| CVE-2022-33237 | 7.5 | Nov 15 | Transient DOS due to buffer over-read in WLAN firmware while processing PPE threshold Affected: All versions, or not specified |
| CVE-2022-33236 | 7.5 | Nov 15 | Transient DOS due to buffer over-read in WLAN firmware while parsing cipher suite info attributes Affected: All versions, or not specified |
| CVE-2022-33239 | 7.5 | Nov 15 | Transient DOS due to loop with unreachable exit condition in WLAN firmware while parsing IPV6 extension header Affected: All versions, or not specified |
| CVE-2022-25667 | 7.5 | Nov 15 | Information disclosure in kernel due to improper handling of ICMP requests in Snapdragon Wired Infrastructure and Networking Affected: All versions, or not specified |
| CVE-2022-25736 | 7.5 | Oct 19 | Denial of service in WLAN due to out-of-bound read happens while processing VHT action frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2021-30312 | 7.5 | Oct 20 | Improper authentication of sub-frames of a multicast AMSDU frame can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30302 | 7.5 | Oct 20 | Improper authentication of EAP WAPI EAPOL frames from unauthenticated user can lead to information disclosure in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2021-1974 | 7.5 | Sep 9 | Possible buffer over read due to lack of alignment between map or unmap length of IPA SMMU and WLAN SMMU in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2021-1971 | 7.5 | Sep 9 | Possible assertion due to lack of physical layer state validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity,… Affected: All versions, or not specified |
| CVE-2021-1948 | 7.5 | Sep 9 | Possible out of bound read due to lack of length check of data while parsing the beacon or probe response in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2021-1941 | 7.5 | Sep 9 | Possible buffer over read issue due to improper length check on WPA IE string sent by peer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2021-1964 | 7.5 | Jul 13 | Possible buffer over read due to improper validation of IE size while parsing beacon from peer device in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1954 | 7.5 | Jul 13 | Possible buffer over read due to improper validation of data pointer while parsing FILS indication IE in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1953 | 7.5 | Jul 13 | Improper handling of received malformed FTMR request frame can lead to reachable assertion while responding with FTM1 frame in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1945 | 7.5 | Jul 13 | Possible out of bound read due to lack of length check of Bandwidth-NSS IE in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1943 | 7.5 | Jul 13 | Possible buffer out of bound read can occur due to improper validation of TBTT count and length while parsing the beacon response in Snapdragon Auto, Snapdragon Compute,… Affected: All versions, or not specified |
| CVE-2021-1938 | 7.5 | Jul 13 | Possible assertion due to improper verification while creating and deleting the peer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2021-1937 | 7.5 | Jun 9 | Reachable assertion is possible while processing peer association WLAN message from host and nonstandard incoming packet in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |