QF
Product
Qca6574 Firmware
On CISA KEVExploited in the wild
515
CVEs
3
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 58High 381Medium 61Low 0
Watch
Add Qca6574 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-10539 | 9.8 | Sep 30 | Possible buffer overflow issue due to lack of length check when parsing the extended cap IE header length in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics… Affected: All versions, or not specified |
| CVE-2018-11936 | 9.8 | May 24 | Index of array is processed in a wrong way inside a while loop and result in invalid index (-1 or something else) leads to out of bound memory access Affected: All versions, or not specified |
| CVE-2024-38408 | 9.1 | Nov 4 | Cryptographic Issues in BT Controller Affected: 0 |
| CVE-2024-21456 | 9.1 | Jul 1 | Buffer Over-read in WLAN HOST Affected: 0 |
| CVE-2023-33054 | 9.1 | Dec 5 | Cryptographic issue in GPS HLOS Driver while downloading Qualcomm GNSS assistance data Affected: All versions, or not specified |
| CVE-2022-22062 | 9.1 | Sep 2 | An out-of-bounds read can occur while parsing a server certificate due to improper length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-35083 | 9.1 | Jun 14 | Possible out of bound read due to improper validation of certificate chain in SSL or Internet key exchange in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2021-35117 | 9.1 | Apr 1 | An Out of Bounds read may potentially occur while processing an IBSS beacon, in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-35088 | 9.1 | Apr 1 | Possible out of bound read due to improper validation of IE length during SSID IE parse when channel is DFS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2021-30284 | 9.1 | Nov 12 | Possible information exposure and denial of service due to NAS not dropping messages when integrity check fails in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2021-1977 | 9.1 | Oct 20 | Possible buffer over read due to improper validation of frame length while processing AEAD decryption during ASSOC response in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2023-28585 | 8.8 | Dec 5 | Memory corruption while loading an ELF segment in TEE Kernel Affected: All versions, or not specified |
| CVE-2023-28572 | 8.8 | Nov 7 | Memory corruption in WLAN HOST while processing the WLAN scan descriptor list Affected: All versions, or not specified |
| CVE-2022-33288 | 8.8 | Apr 13 | Memory corruption due to buffer copy without checking the size of input in Core while sending SCM command to get write protection information Affected: All versions, or not specified |
| CVE-2022-22088 | 8.8 | Jan 9 | Memory corruption in Bluetooth HOST due to buffer overflow while parsing the command response received from remote Affected: All versions, or not specified |
| CVE-2021-1942 | 8.8 | Apr 1 | Improper handling of permissions of a shared memory region can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2021-30285 | 8.8 | Jan 13 | Improper validation of memory region in Hypervisor can lead to incorrect region mapping in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2020-11303 | 8.6 | Oct 20 | Accepting AMSDU frames with mismatched destination and source address can lead to information disclosure in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2024-33035 | 8.4 | Sep 2 | Integer Overflow or Wraparound in Display Affected: 0 |
| CVE-2024-23365 | 8.4 | Sep 2 | Use After Free in SCE-Mink Affected: 0 |
| CVE-2024-23384 | 8.4 | Aug 5 | Use After Free in Graphics Linux Affected: 0 |
| CVE-2024-21481 | 8.4 | Aug 5 | Improper Restriction of Operations within the Bounds of a Memory Buffer in Hypervisor Affected: 0 |
| CVE-2021-1949 | 8.4 | Oct 20 | Possible integer overflow due to improper check of batch count value while sanitizer is enabled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1917 | 8.4 | Oct 20 | Null pointer dereference can occur due to memory allocation failure in DIAG in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2025-21488 | 8.2 | Sep 24 | Buffer Over-read in Data Network Stack & Connectivity Affected: All versions, or not specified |
| CVE-2024-33073 | 8.2 | Oct 7 | Buffer Over-read in WLAN Host Communication Affected: 0 |
| CVE-2022-33268 | 8.1 | Dec 13 | Information disclosure due to buffer over-read in Bluetooth HOST while pairing and connecting A2DP Affected: All versions, or not specified |
| CVE-2024-53011 | 7.9 | Mar 3 | Permissions, Privileges, and Access Controls in Video Analytics and Processing Affected: All versions, or not specified |
| CVE-2026-57545 | 7.8 | Oct 6 | Untrusted Pointer Dereference in Graphics Affected: All versions, or not specified |
| CVE-2025-59606 | 7.8 | Jun 1 | NULL Pointer Dereference in HLOS Affected: All versions, or not specified |
| CVE-2025-59605 | 7.8 | Jun 1 | Out-of-bounds Write in HLOS Affected: All versions, or not specified |
| CVE-2025-59600 | 7.8 | Mar 2 | Buffer Over-read in Graphics Affected: All versions, or not specified |
| CVE-2025-47386 | 7.8 | Mar 2 | Use After Free in Automotive Audio Affected: All versions, or not specified |
| CVE-2025-47385 | 7.8 | Mar 2 | Improper Access Control for Register Interface in SCE-Mink Affected: All versions, or not specified |
| CVE-2025-47381 | 7.8 | Mar 2 | Use After Free in Automotive Audio Affected: All versions, or not specified |
| CVE-2025-47377 | 7.8 | Mar 2 | Use After Free in Automotive Audio Affected: All versions, or not specified |
| CVE-2025-47376 | 7.8 | Mar 2 | Use After Free in Automotive Audio Affected: All versions, or not specified |
| CVE-2025-47373 | 7.8 | Mar 2 | Out-of-bounds Write in Automotive Affected: All versions, or not specified |
| CVE-2025-47397 | 7.8 | Feb 2 | Improper Release of Memory Before Removing Last Reference in Graphics Affected: All versions, or not specified |
| CVE-2025-47366 | 7.8 | Feb 2 | Exposed Dangerous Method or Function in HLOS Affected: All versions, or not specified |
| CVE-2025-47346 | 7.8 | Jan 6 | Out-of-bounds Write in HLOS Affected: All versions, or not specified |
| CVE-2025-47382 | 7.8 | Dec 18 | Incorrect Authorization in Boot Affected: All versions, or not specified |
| CVE-2025-47323 | 7.8 | Dec 18 | Integer Overflow or Wraparound in Audio Affected: All versions, or not specified |
| CVE-2025-47322 | 7.8 | Dec 18 | Use After Free in Automotive Linux OS Affected: All versions, or not specified |
| CVE-2025-47321 | 7.8 | Dec 18 | Buffer Copy Without Checking Size of Input in Core Services Affected: All versions, or not specified |
| CVE-2025-27063 | 7.8 | Dec 18 | Use After Free in Video Affected: All versions, or not specified |
| CVE-2025-27074 | 7.8 | Nov 4 | Incorrect Calculation of Buffer Size in SCE-Mink Affected: All versions, or not specified |
| CVE-2025-27070 | 7.8 | Nov 4 | Out-of-bounds Write in Windows Compute Affected: All versions, or not specified |
| CVE-2025-47329 | 7.8 | Sep 24 | Release of Invalid Pointer or Reference in Android Core Affected: All versions, or not specified |
| CVE-2025-27061 | 7.8 | Jul 8 | Out-of-bounds Write in Video Affected: All versions, or not specified |
The 500 most important CVEs for this product (exploited first, then by severity)