QF
Product
Qca6421 Firmware
On CISA KEVExploited in the wild
316
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 22High 249Medium 45Low 0
Watch
Add Qca6421 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-33096 | 7.5 | Mar 4 | Reachable Assertion in Multi-Mode Call Processor Affected: 0 |
| CVE-2023-33095 | 7.5 | Mar 4 | Reachable Assertion in Multi-Mode Call Processor Affected: 0 |
| CVE-2023-33086 | 7.5 | Mar 4 | Improper Release of Memory Before Removing Last Reference in Data Modem Affected: 0 |
| CVE-2023-43533 | 7.5 | Feb 6 | Buffer Over-read in WLAN Firmware Affected: All versions, or not specified |
| CVE-2023-33057 | 7.5 | Feb 6 | Improper Input Validation in Multi-Mode Call Processor Affected: All versions, or not specified |
| CVE-2023-33049 | 7.5 | Feb 6 | Improper Release of Memory Before Removing Last Reference in Multi-Mode Call Processor Affected: All versions, or not specified |
| CVE-2023-33040 | 7.5 | Jan 2 | Buffer Over-read in Data Modem Affected: All versions, or not specified |
| CVE-2023-33089 | 7.5 | Dec 5 | NULL Pointer Dereference in WLAN Firmware Affected: All versions, or not specified |
| CVE-2023-33081 | 7.5 | Dec 5 | Buffer over-read in WLAN Firmware Affected: All versions, or not specified |
| CVE-2023-33044 | 7.5 | Dec 5 | Reachable Assertion in Data Modem Affected: All versions, or not specified |
| CVE-2023-33042 | 7.5 | Dec 5 | Improper Input Validation in Modem Affected: All versions, or not specified |
| CVE-2023-28588 | 7.5 | Dec 5 | Integer Overflow or Wraparound in Bluetooth Host Affected: All versions, or not specified |
| CVE-2023-33026 | 7.5 | Oct 3 | Buffer over-read in WLAN Firmware Affected: 0 |
| CVE-2023-28540 | 7.5 | Oct 3 | Improper Authentication in Data Modem Affected: All versions, or not specified |
| CVE-2023-24849 | 7.5 | Oct 3 | Buffer Over-read in Data Modem Affected: All versions, or not specified |
| CVE-2023-24848 | 7.5 | Oct 3 | Buffer Over-read in Data Modem Affected: All versions, or not specified |
| CVE-2023-24847 | 7.5 | Oct 3 | NULL pointer Dereference in Modem Affected: 0 |
| CVE-2023-24843 | 7.5 | Oct 3 | Reachable Assertion in Modem Affected: All versions, or not specified |
| CVE-2023-33015 | 7.5 | Sep 5 | Buffer Over-read in WLAN Firmware Affected: All versions, or not specified |
| CVE-2023-21669 | 7.5 | Jun 6 | Information Disclosure in WLAN HOST while sending DPP action frame to peer with an invalid source address Affected: All versions, or not specified |
| CVE-2023-21659 | 7.5 | Jun 6 | Transient DOS in WLAN Firmware while processing frames with missing header fields Affected: All versions, or not specified |
| CVE-2022-40536 | 7.5 | Jun 6 | Transient DOS due to improper authentication in modem while receiving plain TLB OTA request message from network Affected: All versions, or not specified |
| CVE-2022-40521 | 7.5 | Jun 6 | Transient DOS due to improper authorization in Modem Affected: All versions, or not specified |
| CVE-2022-33251 | 7.5 | Jun 6 | Transient DOS due to reachable assertion in Modem because of invalid network configuration Affected: All versions, or not specified |
| CVE-2022-22060 | 7.5 | Jun 6 | Assertion occurs while processing Reconfiguration message due to improper validation Affected: All versions, or not specified |
| CVE-2022-40504 | 7.5 | May 2 | Transient DOS due to reachable assertion in Modem when UE received Downlink Data Indication message from the network Affected: All versions, or not specified |
| CVE-2022-40508 | 7.5 | May 2 | Transient DOS due to reachable assertion in Modem while processing config related to cross carrier scheduling, which is not supported Affected: All versions, or not specified |
| CVE-2022-40535 | 7.5 | Mar 10 | Transient DOS due to buffer over-read in WLAN while sending a packet to device Affected: All versions, or not specified |
| CVE-2022-33254 | 7.5 | Mar 10 | Transient DOS due to reachable assertion in Modem while processing SIB1 Message Affected: All versions, or not specified |
| CVE-2022-33250 | 7.5 | Mar 10 | Transient DOS due to reachable assertion in modem when network repeatedly sent invalid message container for NR to LTE handover Affected: All versions, or not specified |
| CVE-2022-33271 | 7.5 | Feb 12 | Information disclosure due to buffer over-read in WLAN while parsing NMF frame Affected: All versions, or not specified |
| CVE-2022-33235 | 7.5 | Dec 13 | Information disclosure due to buffer over-read in WLAN firmware while parsing security context info attributes Affected: All versions, or not specified |
| CVE-2022-25702 | 7.5 | Dec 13 | Denial of service in modem due to reachable assertion while processing reconfiguration message in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2022-25685 | 7.5 | Dec 13 | Denial of service in Modem module due to improper authorization while error handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT,… Affected: All versions, or not specified |
| CVE-2022-33239 | 7.5 | Nov 15 | Transient DOS due to loop with unreachable exit condition in WLAN firmware while parsing IPV6 extension header Affected: All versions, or not specified |
| CVE-2022-33237 | 7.5 | Nov 15 | Transient DOS due to buffer over-read in WLAN firmware while processing PPE threshold Affected: All versions, or not specified |
| CVE-2022-25741 | 7.5 | Nov 15 | Denial of service in WLAN due to potential null pointer dereference while accessing the memory location in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2022-25736 | 7.5 | Oct 19 | Denial of service in WLAN due to out-of-bound read happens while processing VHT action frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2022-25662 | 7.5 | Oct 12 | Information disclosure due to untrusted pointer dereference in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2022-25690 | 7.5 | Sep 16 | Information disclosure in WLAN due to improper validation of array index while parsing crafted ANQP action frames in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2022-22091 | 7.5 | Sep 16 | Improper authorization of a replayed LTE security mode command can lead to a denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2021-35096 | 7.5 | Jun 14 | Improper memory allocation during counter check DLM handling can lead to denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial… Affected: All versions, or not specified |
| CVE-2021-35086 | 7.5 | Jun 14 | Possible buffer over read due to improper validation of SIB type when processing a NR system Information message in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2021-35078 | 7.5 | Jun 14 | Possible memory leak due to improper validation of certificate chain length while parsing server certificate chain in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2021-35076 | 7.5 | Jun 14 | Possible null pointer dereference due to improper validation of RRC connection reconfiguration message in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-35073 | 7.5 | Jun 14 | Possible assertion due to improper validation of rank restriction field in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1982 | 7.5 | Nov 12 | Possible denial of service scenario due to improper input validation of received NAS OTA message in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30312 | 7.5 | Oct 20 | Improper authentication of sub-frames of a multicast AMSDU frame can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30302 | 7.5 | Oct 20 | Improper authentication of EAP WAPI EAPOL frames from unauthenticated user can lead to information disclosure in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2021-1936 | 7.5 | Oct 20 | Null pointer dereference can occur due to lack of null check for user provided input in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |