QF
Product
Qca6430 Firmware
On CISA KEVExploited in the wild
432
CVEs
2
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 38High 318Medium 76Low 0
Watch
Add Qca6430 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-21379 | 7.8 | Jul 6 | Buffer Over-read in Windows Compute Affected: All versions, or not specified |
| CVE-2026-21378 | 7.8 | Apr 6 | Buffer Over-read in Camera Affected: All versions, or not specified |
| CVE-2026-21376 | 7.8 | Apr 6 | Buffer Over-read in Camera Affected: All versions, or not specified |
| CVE-2026-21374 | 7.8 | Apr 6 | Buffer Over-read in Camera Affected: All versions, or not specified |
| CVE-2026-21373 | 7.8 | Apr 6 | Buffer Over-read in Camera Affected: All versions, or not specified |
| CVE-2026-21371 | 7.8 | Apr 6 | Buffer Over-read in WinBlast Driver Affected: All versions, or not specified |
| CVE-2025-47359 | 7.8 | Feb 2 | Use After Free in Secure Processor Affected: All versions, or not specified |
| CVE-2025-47387 | 7.8 | Dec 18 | Untrusted Pointer Dereference in Camera Affected: All versions, or not specified |
| CVE-2025-47327 | 7.8 | Sep 24 | Use After Free in Camera Affected: All versions, or not specified |
| CVE-2025-47316 | 7.8 | Sep 24 | Double Free in Video Affected: All versions, or not specified |
| CVE-2025-27075 | 7.8 | Aug 6 | Improper Validation of Array Index in Bluetooth HOST Affected: All versions, or not specified |
| CVE-2025-27061 | 7.8 | Jul 8 | Out-of-bounds Write in Video Affected: All versions, or not specified |
| CVE-2025-27055 | 7.8 | Jul 8 | Buffer Over-read in Camera Affected: All versions, or not specified |
| CVE-2025-27050 | 7.8 | Jul 8 | Use After Free in Camera Affected: All versions, or not specified |
| CVE-2025-27046 | 7.8 | Jul 8 | Double Free in Display Affected: All versions, or not specified |
| CVE-2025-21466 | 7.8 | Jul 8 | Use After Free in Display Affected: All versions, or not specified |
| CVE-2025-21432 | 7.8 | Jul 8 | Double Free in SPS-HLOS Affected: All versions, or not specified |
| CVE-2025-21422 | 7.8 | Jul 8 | Cryptographic Issues in Automotive Affected: All versions, or not specified |
| CVE-2025-21475 | 7.8 | May 6 | Buffer Over-read in Display Affected: All versions, or not specified |
| CVE-2025-21470 | 7.8 | May 6 | Improper Access Control in Camera Driver Affected: All versions, or not specified |
| CVE-2024-49842 | 7.8 | May 6 | Improper Access Control in Hypervisor Affected: All versions, or not specified |
| CVE-2025-21441 | 7.8 | Apr 7 | Out-of-bounds Read in Windows WLAN Host Affected: All versions, or not specified |
| CVE-2025-21440 | 7.8 | Apr 7 | Out-of-bounds Read in Windows WLAN Host Affected: All versions, or not specified |
| CVE-2025-21423 | 7.8 | Apr 7 | Improper Validation of Array Index in Display Affected: All versions, or not specified |
| CVE-2025-21421 | 7.8 | Apr 7 | Buffer Over-read in Display Affected: All versions, or not specified |
| CVE-2024-45561 | 7.8 | Feb 3 | Use After Free in Windows WLAN Host Affected: All versions, or not specified |
| CVE-2024-38420 | 7.8 | Feb 3 | Improper Input Validation in Hypervisor Affected: All versions, or not specified |
| CVE-2024-45542 | 7.8 | Jan 6 | Stack-based Buffer Overflow in WLAN Windows Host Affected: All versions, or not specified |
| CVE-2024-45541 | 7.8 | Jan 6 | Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Windows Host Affected: All versions, or not specified |
| CVE-2024-43050 | 7.8 | Dec 2 | Stack-based Buffer Overflow in WLAN Windows Host Affected: 0 |
| CVE-2024-33044 | 7.8 | Dec 2 | Improper Validation of Array Index in Hypervisor Affected: 0 |
| CVE-2024-38423 | 7.8 | Nov 4 | Buffer Copy Without Checking Size of Input in Graphics Linux Affected: 0 |
| CVE-2024-38422 | 7.8 | Nov 4 | Integer Overflow to Buffer Overflow in Audio Affected: 0 |
| CVE-2024-33065 | 7.8 | Oct 7 | Improper Input Validation in Camera Affected: 0 |
| CVE-2024-33060 | 7.8 | Sep 2 | Use After Free in DSP Service Affected: 0 |
| CVE-2024-33052 | 7.8 | Sep 2 | Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in FM Host Affected: 0 |
| CVE-2024-33042 | 7.8 | Sep 2 | Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in FM Host Affected: 0 |
| CVE-2024-33027 | 7.8 | Aug 5 | Improper Access Control in Graphics Linux Affected: 0 |
| CVE-2024-23356 | 7.8 | Aug 5 | Improper Restriction of Operations within the Bounds of a Memory Buffer in HLOS Affected: 0 |
| CVE-2024-23373 | 7.8 | Jul 1 | Use After Free in Graphics Affected: 0 |
| CVE-2024-21469 | 7.8 | Jul 1 | Permissions, Privileges, and Access Control issues in TZ Secure OS Affected: 0 |
| CVE-2024-21465 | 7.8 | Jul 1 | Buffer Over-read in Trusted Execution Environment Affected: 0 |
| CVE-2024-21461 | 7.8 | Jul 1 | Double Free in HLOS Affected: 0 |
| CVE-2023-43554 | 7.8 | Jul 1 | Improper Restriction of Operations withing the Bounds of a Memory Buffer in DSP Services Affected: 0 |
| CVE-2023-43542 | 7.8 | Jun 3 | Buffer Copy Without Checking Size of Input in Trusted Execution Environment Affected: 0 |
| CVE-2023-43538 | 7.8 | Jun 3 | Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in TZ Secure OS Affected: All versions, or not specified |
| CVE-2024-21476 | 7.8 | May 6 | Memory corruption when the channel ID passed by user is not validated and further used Affected: All versions, or not specified |
| CVE-2024-21475 | 7.8 | May 6 | Memory corruption when the payload received from firmware is not as per the expected protocol size Affected: All versions, or not specified |
| CVE-2023-43530 | 7.8 | May 6 | Memory corruption in HLOS while checking for the storage type Affected: All versions, or not specified |
| CVE-2024-21470 | 7.8 | Apr 1 | Memory corruption while allocating memory for graphics Affected: All versions, or not specified |