QF
Product
Qca4024 Firmware
On CISA KEVExploited in the wild
200
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 21High 150Medium 29Low 0
Watch
Add Qca4024 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-49839 | 9.8 | Feb 3 | Buffer Over-read in WLAN Host Cmn Affected: All versions, or not specified |
| CVE-2024-45569 | 9.8 | Feb 3 | Improper Validation of Array Index in WLAN Host Communication Affected: All versions, or not specified |
| CVE-2024-33066 | 9.8 | Oct 7 | Improper Input Validation in WLAN Resource Manager Affected: 0 |
| CVE-2024-21473 | 9.8 | Apr 1 | Improper Input Validation in WIN SON Affected: All versions, or not specified |
| CVE-2023-43553 | 9.8 | Mar 4 | Use of Out-of-range Pointer Offset in WLAN HOST Affected: 0 |
| CVE-2023-43552 | 9.8 | Mar 4 | Use After Free in WLAN Host Communication Affected: 0 |
| CVE-2023-33083 | 9.8 | Dec 5 | Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Host Affected: All versions, or not specified |
| CVE-2023-33082 | 9.8 | Dec 5 | Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Host Affected: All versions, or not specified |
| CVE-2023-33045 | 9.8 | Nov 7 | Buffer Copy Without Checking Size of Input in WLAN Firmware Affected: 0 |
| CVE-2023-33028 | 9.8 | Oct 3 | Buffer Copy without Checking Size of Input in WLAN Firmware Affected: All versions, or not specified |
| CVE-2022-40514 | 9.8 | Feb 9 | Buffer copy without checking size of input in WLAN Firmware Affected: All versions, or not specified |
| CVE-2022-33279 | 9.8 | Feb 9 | Stack based buffer overflow in WLAN Affected: All versions, or not specified |
| CVE-2022-25729 | 9.8 | Feb 9 | Improper Input Validation in MODEM Affected: All versions, or not specified |
| CVE-2022-25674 | 9.8 | Nov 15 | Cryptographic issues in WLAN during the group key handshake of the WPA/WPA2 protocol in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music Affected: All versions, or not specified |
| CVE-2022-25727 | 9.8 | Nov 15 | Memory Corruption in modem due to improper length check while copying into memory in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music Affected: All versions, or not specified |
| CVE-2022-25718 | 9.8 | Oct 19 | Cryptographic issue in WLAN due to improper check on return value while authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics… Affected: All versions, or not specified |
| CVE-2021-35104 | 9.8 | Jun 14 | Possible buffer overflow due to improper parsing of headers while playing the FLAC audio clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2021-30351 | 9.8 | Jan 3 | An out of bound memory access can occur due to improper validation of number of frames being passed during music playback in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1965 | 9.8 | Jul 13 | Possible buffer overflow due to lack of parameter length check during MBSSID scan IE parse in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile,… Affected: All versions, or not specified |
| CVE-2021-35088 | 9.1 | Apr 1 | Possible out of bound read due to improper validation of IE length during SSID IE parse when channel is DFS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2021-1980 | 9.1 | Oct 20 | Possible buffer over read due to lack of length check while parsing beacon IE response in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
Showing 21
