QF
Product
Qca6436 Firmware
by Qualcomm · last CVE Nov 4, 2025
On CISA KEVExploited in the wild
514
CVEs
5
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 43High 384Medium 73Low 0
Watch

Add Qca6436 Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-28538
7.8
0%
Sep 5
Stack-based Buffer Overflow in WIN Product
Affected: All versions, or not specified
CVE-2023-21664
7.8
0%
Sep 5
Buffer Copy without Checking the Size of Input(Classic Buffer Overflow) in Core Platform
Affected: All versions, or not specified
CVE-2023-21662
7.8
0%
Sep 5
Buffer Copy without Checking the Size of Input(Classic Buffer Overflow) in Core Platform
Affected: All versions, or not specified
CVE-2023-21654
7.8
0%
Sep 5
Improper Restriction of Operations within the Bounds of a Memory Buffer in Audio
Affected: All versions, or not specified
CVE-2023-21644
7.8
0%
Sep 5
Integer Overflow to Buffer Overflow in RIL
Affected: 0
CVE-2023-21636
7.8
0%
Sep 5
Improper Validation of Array Index in Linux
Affected: All versions, or not specified
CVE-2022-40524
7.8
0%
Sep 5
Buffer over-read in Modem
Affected: All versions, or not specified
CVE-2023-28577
7.8
0%
Aug 8
Multiple Dmabuf Kernel Address UAF Vulnerability
Affected: 0
CVE-2023-28575
7.8
0%
Aug 8
Multiple Type Confusion Vulnerability
Affected: All versions, or not specified
CVE-2023-28537
7.8
0%
Aug 8
Integer Overflow or Wraparound in Audio
Affected: All versions, or not specified
CVE-2023-22666
7.8
0%
Aug 8
Integer Overflow or Wraparound in Audio
Affected: All versions, or not specified
CVE-2023-21651
7.8
0%
Aug 8
Incorrect Type Conversion or Cast in Core
Affected: 0
CVE-2023-21650
7.8
0%
Aug 8
Improper Validation of Array Index in GPS HLOS Driver
Affected: All versions, or not specified
CVE-2023-21649
7.8
0%
Aug 8
Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN
Affected: 0
CVE-2023-21627
7.8
0%
Aug 8
Incorrect Type Conversion or Cast in Trusted Execution Environment
Affected: All versions, or not specified
CVE-2023-28542
7.8
0%
Jul 4
Buffer Over-read in WLAN HOST
Affected: 0
CVE-2023-22667
7.8
0%
Jul 4
Integer Overflow or Wraparound in Audio
Affected: All versions, or not specified
CVE-2023-22386
7.8
0%
Jul 4
Buffer Copy Without Checking Size of Input in WLAN HOST
Affected: 0
CVE-2023-21638
7.8
0%
Jul 4
Incorrect Type Conversion or Cast in Video
Affected: 0
CVE-2023-21637
7.8
0%
Jul 4
Improper Restrictions of Operations within the Bounds of a Memory Buffer in Linux
Affected: All versions, or not specified
CVE-2023-21635
7.8
0%
Jul 4
Buffer Copy without Checking Size of Input in Data Network Stack & Connectivity
Affected: All versions, or not specified
CVE-2023-21633
7.8
0%
Jul 4
Improper Restriction of Operations within the Bounds of a Memory Buffer in Linux
Affected: 0
CVE-2023-21670
7.8
0%
Jun 6
Improper Access control in GPU Subsystem
Affected: All versions, or not specified
CVE-2023-21657
7.8
0%
Jun 6
Improper Input Validation in Audio
Affected: 0
CVE-2023-21656
7.8
0%
Jun 6
Improper Input Validation in WLAN HOST
Affected: All versions, or not specified
CVE-2022-40529
7.8
0%
Jun 6
Improper access control in Kernel
Affected: All versions, or not specified
CVE-2022-40507
7.8
1%
Jun 6
Double free in Core
Affected: All versions, or not specified
CVE-2022-33307
7.8
0%
Jun 6
Double free in Automotive
Affected: 0
CVE-2022-33267
7.8
0%
Jun 6
Improper restriction of operations within the bounds of memory buffer in Linux
Affected: 0
CVE-2022-33264
7.8
0%
Jun 6
Stack-based buffer overflow in Modem
Affected: 0
CVE-2022-33227
7.8
0%
Jun 6
Double free in Linux-Android
Affected: 0
CVE-2023-21666
7.8
0%
May 2
Improper Release of Memory Before Removing Last Reference (`Memory Leak`) in Graphics
Affected: All versions, or not specified
CVE-2023-21665
7.8
0%
May 2
Incorrect Type Conversion or Cast in Graphics
Affected: 0
CVE-2022-25713
7.8
0%
May 2
Improper Restriction of Operations within the Bounds of a Memory Buffer in Automotive
Affected: All versions, or not specified
CVE-2022-33302
7.8
0%
Apr 4
Improper validation of array index in User Identity Module
Affected: All versions, or not specified
CVE-2022-33298
7.8
0%
Apr 4
Use after free in Modem
Affected: 0
CVE-2022-33296
7.8
0%
Apr 4
Integer overflow to buffer overflow in Modem
Affected: All versions, or not specified
CVE-2022-33269
7.8
0%
Apr 4
Integer overflow or wraparound in Core
Affected: All versions, or not specified
CVE-2022-33231
7.8
0%
Apr 4
Double free in Core
Affected: All versions, or not specified
CVE-2022-40530
7.8
0%
Mar 7
Integer overflow to buffer overflow in WLAN
Affected: All versions, or not specified
CVE-2022-33278
7.8
0%
Mar 7
Buffer copy without checking the size of input in HLOS
Affected: All versions, or not specified
CVE-2022-33242
7.8
0%
Mar 7
Improper authentication in Qualcomm IPC
Affected: 0
CVE-2022-25709
7.8
0%
Mar 7
Use of Out-of-range Pointer Offset in Data Modem
Affected: All versions, or not specified
CVE-2022-25705
7.8
0%
Mar 7
Integer Overflow to Buffer Overflow in Modem
Affected: All versions, or not specified
CVE-2022-33277
7.8
0%
Feb 9
Buffer copy without checking size of input in modem
Affected: All versions, or not specified
CVE-2022-33248
7.8
0%
Feb 9
Integer overflow to buffer overflow in User Identity Module
Affected: All versions, or not specified
CVE-2022-33246
7.8
0%
Feb 9
Use of out-of-range pointer offset in Audio
Affected: All versions, or not specified
CVE-2022-33243
7.8
0%
Feb 9
Improper access control in Qualcomm IPC
Affected: All versions, or not specified
CVE-2022-33233
7.8
0%
Feb 9
Configuration weakness in modem
Affected: All versions, or not specified
CVE-2022-33232
7.8
0%
Feb 9
Buffer copy without checking size of input in Hypervisor
Affected: 0
Page 4 of 10 · 500 total
1…345…10
The 500 most important CVEs for this product (exploited first, then by severity)