QF
Product
Qca6174 Firmware
52
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 9High 40Medium 3Low 0
Watch
Add Qca6174 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-33213 | 8.8 | Mar 10 | Memory corruption in modem due to buffer overflow while processing a PPP packet Affected: All versions, or not specified |
| CVE-2020-11303 | 8.6 | Oct 20 | Accepting AMSDU frames with mismatched destination and source address can lead to information disclosure in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2025-21438 | 7.8 | Apr 7 | Out-of-bounds Read in Windows WLAN Host Affected: All versions, or not specified |
| CVE-2024-43050 | 7.8 | Dec 2 | Stack-based Buffer Overflow in WLAN Windows Host Affected: 0 |
| CVE-2024-38423 | 7.8 | Nov 4 | Buffer Copy Without Checking Size of Input in Graphics Linux Affected: 0 |
| CVE-2024-38422 | 7.8 | Nov 4 | Integer Overflow to Buffer Overflow in Audio Affected: 0 |
| CVE-2024-21468 | 7.8 | Apr 1 | Use After Free in Kernel Affected: 0 |
| CVE-2023-33120 | 7.8 | Jan 2 | Use After Free in Audio Affected: All versions, or not specified |
| CVE-2023-33033 | 7.8 | Jan 2 | Use of Out-of-range Pointer Offset in Audio Affected: All versions, or not specified |
| CVE-2023-33059 | 7.8 | Nov 7 | Memory corruption in Audio while processing the VOC packet data from ADSP Affected: All versions, or not specified |
| CVE-2022-33264 | 7.8 | Jun 6 | Memory corruption in modem due to stack based buffer overflow while parsing OTASP Key Generation Request Message Affected: All versions, or not specified |
| CVE-2023-21666 | 7.8 | May 2 | Memory Corruption in Graphics while accessing a buffer allocated through the graphics pool Affected: All versions, or not specified |
| CVE-2023-21665 | 7.8 | May 2 | Memory corruption in Graphics while importing a file Affected: All versions, or not specified |
| CVE-2022-33302 | 7.8 | Apr 13 | Memory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than command length Affected: All versions, or not specified |
| CVE-2022-25705 | 7.8 | Mar 10 | Memory corruption in modem due to integer overflow to buffer overflow while handling APDU response Affected: All versions, or not specified |
| CVE-2022-25694 | 7.8 | Mar 10 | Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM Affected: All versions, or not specified |
| CVE-2022-33233 | 7.8 | Feb 12 | Memory corruption due to configuration weakness in modem wile sending command to write protected files Affected: All versions, or not specified |
| CVE-2022-22063 | 7.8 | Dec 15 | Memory corruption in Core due to improper configuration in boot remapper Affected: All versions, or not specified |
| CVE-2022-25695 | 7.8 | Dec 13 | Memory corruption in MODEM due to Improper Validation of Array Index while processing GSTK Proactive commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2022-25682 | 7.8 | Dec 13 | Memory corruption in MODEM UIM due to usage of out of range pointer offset while decoding command from card in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2022-25743 | 7.8 | Nov 15 | Memory corruption in graphics due to use-after-free while importing graphics buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2022-25724 | 7.8 | Nov 15 | Memory corruption in graphics due to buffer overflow while validating the user address in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2021-30255 | 7.8 | Nov 12 | Possible buffer overflow due to improper input validation in PDM DIAG command in FTM in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2021-30254 | 7.8 | Nov 12 | Possible buffer overflow due to improper input validation in factory calibration and test DIAG command in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1973 | 7.8 | Nov 12 | A FTM Diag command can allow an arbitrary write into modem OS space in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial… Affected: All versions, or not specified |
| CVE-2021-1959 | 7.8 | Oct 20 | Possible memory corruption due to lack of bound check of input index in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30261 | 7.8 | Sep 17 | Possible integer and heap overflow due to lack of input command size validation while handling beacon template update command from HLOS in Snapdragon Auto, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2020-11292 | 7.8 | Jun 9 | Possible buffer overflow in voice service due to lack of input validation of parameters in QMI Voice API in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2021-1892 | 7.8 | Apr 7 | Memory corruption due to improper input validation while processing IO control which is nonstandard in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics… Affected: All versions, or not specified |
| CVE-2019-10617 | 7.8 | Nov 21 | Low privilege users can access service configuration which contains registry data that admins uses to create or delete entries in the registry in QCA6174_9377.WIN.1.0 in… Affected: All versions, or not specified |
| CVE-2025-21428 | 7.5 | Apr 7 | Buffer Over-read in WLAN Host Affected: All versions, or not specified |
| CVE-2024-33051 | 7.5 | Sep 2 | Buffer Over-read in WLAN Firmware Affected: 0 |
| CVE-2024-23353 | 7.5 | Aug 5 | Buffer Over-read in Multi Mode Call Processor Affected: 0 |
| CVE-2023-43551 | 7.5 | Jun 3 | Improper Authentication in Multi-Mode Call Processor Affected: All versions, or not specified |
| CVE-2023-24848 | 7.5 | Oct 3 | Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value Affected: All versions, or not specified |
| CVE-2022-40521 | 7.5 | Jun 6 | Transient DOS due to improper authorization in Modem Affected: All versions, or not specified |
| CVE-2022-33239 | 7.5 | Nov 15 | Transient DOS due to loop with unreachable exit condition in WLAN firmware while parsing IPV6 extension header Affected: All versions, or not specified |
| CVE-2021-1941 | 7.5 | Sep 9 | Possible buffer over read issue due to improper length check on WPA IE string sent by peer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2021-1955 | 7.5 | Jul 13 | Denial of service in SAP case due to improper handling of connections when association is rejected in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2020-11233 | 7.0 | Jun 9 | Time-of-check time-of-use race condition While processing partition entries due to newly created buffer was read again from mmc without validation in Snapdragon Auto, Snapdragon… Affected: All versions, or not specified |
Showing 40
