QF
Product
Qca6420 Firmware
On CISA KEVExploited in the wild
457
CVEs
2
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 41High 338Medium 78Low 0
Watch
Add Qca6420 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-33107 In wildKEV | 7.8 | Dec 5 | Integer Overflow or Wraparound in Graphics Linux Affected: 0 |
| CVE-2023-33063 In wildKEV | 7.8 | Dec 5 | Use After Free in DSP Services Affected: 0 |
| CVE-2023-28585 | 8.8 | Dec 5 | Integer Overflow to Buffer Overflow in TZ Secure OS Affected: All versions, or not specified |
| CVE-2022-33288 | 8.8 | Apr 13 | Memory corruption due to buffer copy without checking the size of input in Core while sending SCM command to get write protection information Affected: All versions, or not specified |
| CVE-2022-33213 | 8.8 | Mar 10 | Memory corruption in modem due to buffer overflow while processing a PPP packet Affected: All versions, or not specified |
| CVE-2022-22088 | 8.8 | Jan 9 | Memory corruption in Bluetooth HOST due to buffer overflow while parsing the command response received from remote Affected: All versions, or not specified |
| CVE-2021-1942 | 8.8 | Apr 1 | Improper handling of permissions of a shared memory region can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2024-21481 | 8.4 | Aug 5 | Improper Restriction of Operations within the Bounds of a Memory Buffer in Hypervisor Affected: 0 |
| CVE-2021-1949 | 8.4 | Oct 20 | Possible integer overflow due to improper check of batch count value while sanitizer is enabled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1932 | 8.4 | Oct 20 | Improper access control in trusted application environment can cause unauthorized access to CDSP or ADSP VM memory with either privilege in Snapdragon Auto, Snapdragon Compute,… Affected: All versions, or not specified |
| CVE-2021-1917 | 8.4 | Oct 20 | Null pointer dereference can occur due to memory allocation failure in DIAG in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1913 | 8.4 | Oct 20 | Possible integer overflow due to improper length check while updating grace period and count record in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2025-21484 | 8.2 | Sep 24 | Buffer Over-read in Data Network Stack & Connectivity Affected: All versions, or not specified |
| CVE-2024-53021 | 8.2 | Jun 3 | Buffer Over-read in Data Network Stack & Connectivity Affected: All versions, or not specified |
| CVE-2024-23359 | 8.2 | Sep 2 | Buffer Over-read in Multi Mode Call Processor Affected: 0 |
| CVE-2026-21379 | 7.8 | Jul 6 | Buffer Over-read in Windows Compute Affected: All versions, or not specified |
| CVE-2026-21378 | 7.8 | Apr 6 | Buffer Over-read in Camera Affected: All versions, or not specified |
| CVE-2026-21376 | 7.8 | Apr 6 | Buffer Over-read in Camera Affected: All versions, or not specified |
| CVE-2026-21374 | 7.8 | Apr 6 | Buffer Over-read in Camera Affected: All versions, or not specified |
| CVE-2026-21373 | 7.8 | Apr 6 | Buffer Over-read in Camera Affected: All versions, or not specified |
| CVE-2026-21371 | 7.8 | Apr 6 | Buffer Over-read in WinBlast Driver Affected: All versions, or not specified |
| CVE-2025-47359 | 7.8 | Feb 2 | Use After Free in Secure Processor Affected: All versions, or not specified |
| CVE-2025-47387 | 7.8 | Dec 18 | Untrusted Pointer Dereference in Camera Affected: All versions, or not specified |
| CVE-2025-27053 | 7.8 | Oct 9 | Incorrect Calculation of Buffer Size in HLOS Affected: All versions, or not specified |
| CVE-2025-47327 | 7.8 | Sep 24 | Use After Free in Camera Affected: All versions, or not specified |
| CVE-2025-47316 | 7.8 | Sep 24 | Double Free in Video Affected: All versions, or not specified |
| CVE-2025-27075 | 7.8 | Aug 6 | Improper Validation of Array Index in Bluetooth HOST Affected: All versions, or not specified |
| CVE-2025-27061 | 7.8 | Jul 8 | Out-of-bounds Write in Video Affected: All versions, or not specified |
| CVE-2025-27055 | 7.8 | Jul 8 | Buffer Over-read in Camera Affected: All versions, or not specified |
| CVE-2025-27050 | 7.8 | Jul 8 | Use After Free in Camera Affected: All versions, or not specified |
| CVE-2025-27046 | 7.8 | Jul 8 | Double Free in Display Affected: All versions, or not specified |
| CVE-2025-21466 | 7.8 | Jul 8 | Use After Free in Display Affected: All versions, or not specified |
| CVE-2025-21432 | 7.8 | Jul 8 | Double Free in SPS-HLOS Affected: All versions, or not specified |
| CVE-2025-21422 | 7.8 | Jul 8 | Cryptographic Issues in Automotive Affected: All versions, or not specified |
| CVE-2024-53009 | 7.8 | Jul 8 | Improper Validation of Array Index in Automotive Autonomy Affected: All versions, or not specified |
| CVE-2024-53010 | 7.8 | Jun 3 | Improper Access Control in Core Affected: All versions, or not specified |
| CVE-2025-21475 | 7.8 | May 6 | Buffer Over-read in Display Affected: All versions, or not specified |
| CVE-2025-21470 | 7.8 | May 6 | Improper Access Control in Camera Driver Affected: All versions, or not specified |
| CVE-2024-49842 | 7.8 | May 6 | Improper Access Control in Hypervisor Affected: All versions, or not specified |
| CVE-2024-49841 | 7.8 | May 6 | Detection of Error Condition Without Action in Hypervisor Affected: All versions, or not specified |
| CVE-2024-49835 | 7.8 | May 6 | Out-of-bounds Write in SPS Applications Affected: All versions, or not specified |
| CVE-2025-21441 | 7.8 | Apr 7 | Out-of-bounds Read in Windows WLAN Host Affected: All versions, or not specified |
| CVE-2025-21440 | 7.8 | Apr 7 | Out-of-bounds Read in Windows WLAN Host Affected: All versions, or not specified |
| CVE-2025-21423 | 7.8 | Apr 7 | Improper Validation of Array Index in Display Affected: All versions, or not specified |
| CVE-2025-21421 | 7.8 | Apr 7 | Buffer Over-read in Display Affected: All versions, or not specified |
| CVE-2024-45561 | 7.8 | Feb 3 | Use After Free in Windows WLAN Host Affected: All versions, or not specified |
| CVE-2024-38420 | 7.8 | Feb 3 | Improper Input Validation in Hypervisor Affected: All versions, or not specified |
| CVE-2024-45542 | 7.8 | Jan 6 | Stack-based Buffer Overflow in WLAN Windows Host Affected: All versions, or not specified |
| CVE-2024-45541 | 7.8 | Jan 6 | Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Windows Host Affected: All versions, or not specified |
| CVE-2024-43050 | 7.8 | Dec 2 | Stack-based Buffer Overflow in WLAN Windows Host Affected: 0 |
