QF
Product
Qca6426 Firmware
by Qualcomm · last CVE Nov 4, 2025
On CISA KEVExploited in the wild
536
CVEs
5
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 46High 400Medium 54Low 0
Watch

Add Qca6426 Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-24853
7.8
0%
Oct 3
Improper Input Validation in HLOS
Affected: All versions, or not specified
CVE-2023-24850
7.8
0%
Oct 3
Improper Validation of Array Index in HLOS
Affected: All versions, or not specified
CVE-2023-21673
7.8
0%
Oct 3
Improper Access Control in Kernel
Affected: All versions, or not specified
CVE-2023-33021
7.8
0%
Sep 5
Use After Free in Graphics
Affected: All versions, or not specified
CVE-2023-28573
7.8
0%
Sep 5
Improper Validation of Array Index in WLAN HAL
Affected: All versions, or not specified
CVE-2023-28558
7.8
0%
Sep 5
Improper Validation of Array Index in WLAN HAL
Affected: 0
CVE-2023-28549
7.8
0%
Sep 5
Improper Restriction of Operations within the Bounds of a Memory Buffer in WLAN HAL
Affected: All versions, or not specified
CVE-2023-28548
7.8
0%
Sep 5
Improper Validation of Array Index in WLAN HAL
Affected: All versions, or not specified
CVE-2023-28538
7.8
0%
Sep 5
Stack-based Buffer Overflow in WIN Product
Affected: All versions, or not specified
CVE-2023-21664
7.8
0%
Sep 5
Buffer Copy without Checking the Size of Input(Classic Buffer Overflow) in Core Platform
Affected: All versions, or not specified
CVE-2023-21662
7.8
0%
Sep 5
Buffer Copy without Checking the Size of Input(Classic Buffer Overflow) in Core Platform
Affected: All versions, or not specified
CVE-2023-21654
7.8
0%
Sep 5
Improper Restriction of Operations within the Bounds of a Memory Buffer in Audio
Affected: All versions, or not specified
CVE-2023-21644
7.8
0%
Sep 5
Integer Overflow to Buffer Overflow in RIL
Affected: 0
CVE-2023-21636
7.8
0%
Sep 5
Improper Validation of Array Index in Linux
Affected: All versions, or not specified
CVE-2022-40524
7.8
0%
Sep 5
Buffer over-read in Modem
Affected: All versions, or not specified
CVE-2023-28577
7.8
0%
Aug 8
Multiple Dmabuf Kernel Address UAF Vulnerability
Affected: 0
CVE-2023-28575
7.8
0%
Aug 8
Multiple Type Confusion Vulnerability
Affected: All versions, or not specified
CVE-2023-28537
7.8
0%
Aug 8
Integer Overflow or Wraparound in Audio
Affected: All versions, or not specified
CVE-2023-22666
7.8
0%
Aug 8
Integer Overflow or Wraparound in Audio
Affected: All versions, or not specified
CVE-2023-21651
7.8
0%
Aug 8
Incorrect Type Conversion or Cast in Core
Affected: 0
CVE-2023-21650
7.8
0%
Aug 8
Improper Validation of Array Index in GPS HLOS Driver
Affected: All versions, or not specified
CVE-2023-21649
7.8
0%
Aug 8
Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN
Affected: 0
CVE-2023-21627
7.8
0%
Aug 8
Incorrect Type Conversion or Cast in Trusted Execution Environment
Affected: All versions, or not specified
CVE-2023-28542
7.8
0%
Jul 4
Buffer Over-read in WLAN HOST
Affected: 0
CVE-2023-22667
7.8
0%
Jul 4
Integer Overflow or Wraparound in Audio
Affected: All versions, or not specified
CVE-2023-22387
7.8
0%
Jul 4
Use of Out-of-range Pointer Offset in Qualcomm IPC
Affected: All versions, or not specified
CVE-2023-22386
7.8
0%
Jul 4
Buffer Copy Without Checking Size of Input in WLAN HOST
Affected: 0
CVE-2023-21638
7.8
0%
Jul 4
Incorrect Type Conversion or Cast in Video
Affected: 0
CVE-2023-21637
7.8
0%
Jul 4
Improper Restrictions of Operations within the Bounds of a Memory Buffer in Linux
Affected: All versions, or not specified
CVE-2023-21635
7.8
0%
Jul 4
Buffer Copy without Checking Size of Input in Data Network Stack & Connectivity
Affected: All versions, or not specified
CVE-2023-21633
7.8
0%
Jul 4
Improper Restriction of Operations within the Bounds of a Memory Buffer in Linux
Affected: 0
CVE-2023-21670
7.8
0%
Jun 6
Improper Access control in GPU Subsystem
Affected: All versions, or not specified
CVE-2023-21657
7.8
0%
Jun 6
Improper Input Validation in Audio
Affected: 0
CVE-2023-21656
7.8
0%
Jun 6
Improper Input Validation in WLAN HOST
Affected: All versions, or not specified
CVE-2022-40529
7.8
0%
Jun 6
Improper access control in Kernel
Affected: All versions, or not specified
CVE-2022-40507
7.8
1%
Jun 6
Double free in Core
Affected: All versions, or not specified
CVE-2022-33307
7.8
0%
Jun 6
Double free in Automotive
Affected: 0
CVE-2022-33267
7.8
0%
Jun 6
Improper restriction of operations within the bounds of memory buffer in Linux
Affected: 0
CVE-2022-33264
7.8
0%
Jun 6
Stack-based buffer overflow in Modem
Affected: 0
CVE-2022-33227
7.8
0%
Jun 6
Double free in Linux-Android
Affected: 0
CVE-2023-21666
7.8
0%
May 2
Improper Release of Memory Before Removing Last Reference (`Memory Leak`) in Graphics
Affected: All versions, or not specified
CVE-2023-21665
7.8
0%
May 2
Incorrect Type Conversion or Cast in Graphics
Affected: 0
CVE-2022-25713
7.8
0%
May 2
Improper Restriction of Operations within the Bounds of a Memory Buffer in Automotive
Affected: All versions, or not specified
CVE-2022-33302
7.8
0%
Apr 4
Improper validation of array index in User Identity Module
Affected: All versions, or not specified
CVE-2022-33298
7.8
0%
Apr 4
Use after free in Modem
Affected: 0
CVE-2022-33296
7.8
0%
Apr 4
Integer overflow to buffer overflow in Modem
Affected: All versions, or not specified
CVE-2022-33269
7.8
0%
Apr 4
Integer overflow or wraparound in Core
Affected: All versions, or not specified
CVE-2022-33231
7.8
0%
Apr 4
Double free in Core
Affected: All versions, or not specified
CVE-2022-40530
7.8
0%
Mar 7
Integer overflow to buffer overflow in WLAN
Affected: All versions, or not specified
CVE-2022-33278
7.8
0%
Mar 7
Buffer copy without checking the size of input in HLOS
Affected: All versions, or not specified
Page 3 of 8 · 400 total
The 500 most important CVEs for this product (exploited first, then by severity)