QF
Product
Qca6431 Firmware
by Qualcomm · last CVE Nov 4, 2025
On CISA KEVExploited in the wild
294
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 20High 232Medium 42Low 0
Watch

Add Qca6431 Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-22386
7.8
0%
Jul 4
Buffer Copy Without Checking Size of Input in WLAN HOST
Affected: 0
CVE-2023-21633
7.8
0%
Jul 4
Improper Restriction of Operations within the Bounds of a Memory Buffer in Linux
Affected: 0
CVE-2022-40529
7.8
0%
Jun 6
Improper access control in Kernel
Affected: All versions, or not specified
CVE-2022-40507
7.8
1%
Jun 6
Double free in Core
Affected: All versions, or not specified
CVE-2022-33307
7.8
0%
Jun 6
Double free in Automotive
Affected: 0
CVE-2022-33264
7.8
0%
Jun 6
Stack-based buffer overflow in Modem
Affected: 0
CVE-2023-21666
7.8
0%
May 2
Improper Release of Memory Before Removing Last Reference (`Memory Leak`) in Graphics
Affected: All versions, or not specified
CVE-2023-21665
7.8
0%
May 2
Incorrect Type Conversion or Cast in Graphics
Affected: 0
CVE-2022-25713
7.8
0%
May 2
Improper Restriction of Operations within the Bounds of a Memory Buffer in Automotive
Affected: All versions, or not specified
CVE-2022-33302
7.8
0%
Apr 4
Improper validation of array index in User Identity Module
Affected: All versions, or not specified
CVE-2022-33296
7.8
0%
Apr 4
Integer overflow to buffer overflow in Modem
Affected: All versions, or not specified
CVE-2022-33269
7.8
0%
Apr 4
Integer overflow or wraparound in Core
Affected: All versions, or not specified
CVE-2022-33231
7.8
0%
Apr 4
Double free in Core
Affected: All versions, or not specified
CVE-2022-40530
7.8
0%
Mar 7
Integer overflow to buffer overflow in WLAN
Affected: All versions, or not specified
CVE-2022-33278
7.8
0%
Mar 7
Buffer copy without checking the size of input in HLOS
Affected: All versions, or not specified
CVE-2022-33242
7.8
0%
Mar 7
Improper authentication in Qualcomm IPC
Affected: 0
CVE-2022-25709
7.8
0%
Mar 7
Use of Out-of-range Pointer Offset in Data Modem
Affected: All versions, or not specified
CVE-2022-25705
7.8
0%
Mar 7
Integer Overflow to Buffer Overflow in Modem
Affected: All versions, or not specified
CVE-2022-25694
7.8
0%
Mar 7
Use of Out-of-range Pointer Offset in MODEM
Affected: All versions, or not specified
CVE-2022-33277
7.8
0%
Feb 9
Buffer copy without checking size of input in modem
Affected: All versions, or not specified
CVE-2022-33248
7.8
0%
Feb 9
Integer overflow to buffer overflow in User Identity Module
Affected: All versions, or not specified
CVE-2022-33243
7.8
0%
Feb 9
Improper access control in Qualcomm IPC
Affected: All versions, or not specified
CVE-2022-33233
7.8
0%
Feb 9
Configuration weakness in modem
Affected: All versions, or not specified
CVE-2022-33232
7.8
0%
Feb 9
Buffer copy without checking size of input in Hypervisor
Affected: 0
CVE-2022-40520
7.8
1%
Jan 6
Stack based buffer overflow in Core
Affected: All versions, or not specified
CVE-2022-40517
7.8
0%
Jan 6
Stack based buffer overflow in Core
Affected: All versions, or not specified
CVE-2022-40516
7.8
1%
Jan 6
Stack-based buffer overflow in Core
Affected: All versions, or not specified
CVE-2022-33276
7.8
0%
Jan 6
Buffer copy without checking size of input in Modem
Affected: All versions, or not specified
CVE-2022-33266
7.8
0%
Jan 6
Integer overflow to buffer overflow in Audio
Affected: All versions, or not specified
CVE-2022-25746
7.8
0%
Jan 6
Buffer Copy Without Checking Size of Input in Kernel
Affected: All versions, or not specified
CVE-2022-25681
7.8
0%
Dec 13
Possible memory corruption in kernel while performing memory access due to hypervisor not correctly invalidated the processor translation caches in Snapdragon Auto, Snapdragon…
Affected: All versions, or not specified
CVE-2022-25695
7.8
0%
Dec 13
Memory corruption in MODEM due to Improper Validation of Array Index while processing GSTK Proactive commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
Affected: All versions, or not specified
CVE-2022-25743
7.8
0%
Nov 15
Memory corruption in graphics due to use-after-free while importing graphics buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
Affected: All versions, or not specified
CVE-2022-25724
7.8
0%
Nov 15
Memory corruption in graphics due to buffer overflow while validating the user address in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
Affected: All versions, or not specified
CVE-2022-25661
7.8
0%
Oct 12
Memory corruption due to untrusted pointer dereference in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
Affected: All versions, or not specified
CVE-2022-25660
7.8
0%
Oct 12
Memory corruption due to double free issue in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
Affected: All versions, or not specified
CVE-2022-22092
7.8
0%
Sep 16
Memory corruption in kernel due to use after free issue in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
Affected: All versions, or not specified
CVE-2022-22074
7.8
0%
Sep 16
Memory Corruption during wma file playback due to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial…
Affected: All versions, or not specified
CVE-2022-22066
7.8
0%
Sep 16
Memory corruption occurs while processing command received from HLOS due to improper length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
Affected: All versions, or not specified
CVE-2022-22070
7.8
0%
Sep 2
Memory corruption in audio due to lack of check of invalid routing address into APR Routing table in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
Affected: All versions, or not specified
CVE-2022-22069
7.8
0%
Sep 2
Devices with keyprotect off may store unencrypted keybox in RPMB and cause cryptographic issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
Affected: All versions, or not specified
CVE-2022-22067
7.8
0%
Sep 2
Potential memory leak in modem during the processing of NSA RRC Reconfiguration with invalid Radio Bearer Config in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
Affected: All versions, or not specified
CVE-2022-22061
7.8
0%
Sep 2
Out of bounds writing is possible while verifying device IDs due to improper length check before copying the data in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile
Affected: All versions, or not specified
CVE-2021-35132
7.8
0%
Sep 2
Out of bound write in DSP service due to improper bound check for response buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
Affected: All versions, or not specified
CVE-2021-35122
7.8
0%
Sep 2
Non-secure region can try modifying RG permissions of IO space xPUs due to improper input validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
Affected: All versions, or not specified
CVE-2021-35094
7.8
0%
Jun 14
Improper verification of timeout-based authentication in identity credential can lead to invalid authorization in HLOS in Snapdragon Auto, Snapdragon Compute, Snapdragon…
Affected: All versions, or not specified
CVE-2021-35090
7.8
0%
Jun 14
Possible hypervisor memory corruption due to TOC TOU race condition when updating address mappings in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
Affected: All versions, or not specified
CVE-2021-35102
7.8
0%
Jun 14
Possible buffer overflow due to lack of validation for the length of NAI string read from EFS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile
Affected: All versions, or not specified
CVE-2021-30259
7.8
0%
Nov 12
Possible out of bound access due to improper validation of function table entries in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
Affected: All versions, or not specified
CVE-2021-30255
7.8
0%
Nov 12
Possible buffer overflow due to improper input validation in PDM DIAG command in FTM in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
Affected: All versions, or not specified
Page 3 of 6 · 294 total