QF
Product
Qca6574 Firmware
On CISA KEVExploited in the wild
515
CVEs
3
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 58High 381Medium 61Low 0
Watch
Add Qca6574 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-30330 | 7.5 | Jan 13 | Possible null pointer dereference due to improper validation of APE clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30300 | 7.5 | Jan 13 | Possible denial of service due to incorrectly decoding hex data for the SIB2 OTA message and assigning a garbage value to choice when processing the SRS configuration in… Affected: All versions, or not specified |
| CVE-2021-30273 | 7.5 | Jan 3 | Possible assertion due to improper handling of IPV6 packet with invalid length in destination options header in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2021-30312 | 7.5 | Oct 20 | Improper authentication of sub-frames of a multicast AMSDU frame can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30310 | 7.5 | Oct 20 | Possible buffer overflow due to Improper validation of received CF-ACK and CF-Poll data frames in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics… Affected: All versions, or not specified |
| CVE-2021-1936 | 7.5 | Oct 20 | Null pointer dereference can occur due to lack of null check for user provided input in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2021-1974 | 7.5 | Sep 9 | Possible buffer over read due to lack of alignment between map or unmap length of IPA SMMU and WLAN SMMU in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2021-1971 | 7.5 | Sep 9 | Possible assertion due to lack of physical layer state validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity,… Affected: All versions, or not specified |
| CVE-2021-1914 | 7.5 | Sep 8 | Loop with unreachable exit condition may occur due to improper handling of unsupported input in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2021-1970 | 7.5 | Jul 13 | Possible out of bound read due to lack of length check of FT sub-elements in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1964 | 7.5 | Jul 13 | Possible buffer over read due to improper validation of IE size while parsing beacon from peer device in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1955 | 7.5 | Jul 13 | Denial of service in SAP case due to improper handling of connections when association is rejected in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1954 | 7.5 | Jul 13 | Possible buffer over read due to improper validation of data pointer while parsing FILS indication IE in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1945 | 7.5 | Jul 13 | Possible out of bound read due to lack of length check of Bandwidth-NSS IE in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1943 | 7.5 | Jul 13 | Possible buffer out of bound read can occur due to improper validation of TBTT count and length while parsing the beacon response in Snapdragon Auto, Snapdragon Compute,… Affected: All versions, or not specified |
| CVE-2021-1907 | 7.5 | Jul 13 | Possible buffer overflow due to lack of length check in BA request in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial… Affected: All versions, or not specified |
| CVE-2021-1937 | 7.5 | Jun 9 | Reachable assertion is possible while processing peer association WLAN message from host and nonstandard incoming packet in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2018-11291 | 7.5 | Sep 20 | In Snapdragon (Automobile, Mobile, Wear) in version IPQ8074, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA4531, QCA6174A, QCA6564, QCA6574, QCA6574AU, QCA6584, QCA6584AU,… Affected: All versions, or not specified |
| CVE-2017-18126 | 7.5 | Apr 11 | In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9640, MDM9650, QCA6174A, QCA6574, QCA6574AU, QCA6584,… Affected: All versions, or not specified |
| CVE-2017-18072 | 7.5 | Apr 11 | In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9640, MDM9650, QCA4531, QCA6174A, QCA6564, QCA6574,… Affected: All versions, or not specified |
| CVE-2026-24085 | 7.2 | Jun 1 | Stack-based Buffer Overflow in Display Affected: All versions, or not specified |
| CVE-2024-43065 | 7.1 | Apr 7 | Exposed Dangerous Method or Function in HLOS Affected: All versions, or not specified |
| CVE-2024-23362 | 7.1 | Sep 2 | Improper Input Validation in Trusted Execution Environment Affected: 0 |
| CVE-2023-21652 | 7.1 | Aug 8 | Key Management Errors in HLOS Affected: 0 |
| CVE-2023-21626 | 7.1 | Aug 8 | Improper Authentication in HLOS. Affected: All versions, or not specified |
| CVE-2022-25665 | 7.1 | Oct 12 | Information disclosure due to buffer over read in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile Affected: All versions, or not specified |
| CVE-2021-35116 | 7.1 | Jun 14 | APK can load a crafted model into the CDSP which can lead to a compromise of CDSP and other APK`s data executing there in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-35085 | 7.1 | Jun 14 | Possible buffer overflow due to lack of buffer length check during management frame Rx handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-35084 | 7.1 | Jun 14 | Possible out of bound read due to lack of length check of data length for a DIAG event in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2021-30306 | 7.1 | Oct 20 | Possible buffer over read due to improper buffer allocation for file length passed from user space in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Industrial IOT,… Affected: All versions, or not specified |
| CVE-2021-1930 | 7.1 | Sep 8 | Possible out of bounds read due to incorrect validation of incoming buffer length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2020-11304 | 7.1 | Jun 9 | Possible out of bound read in DRM due to improper buffer length check Affected: All versions, or not specified |
| CVE-2020-11203 | 7.1 | Feb 22 | Stack overflow may occur if GSM/WCDMA broadcast config size received from user is larger than variable length array in Snapdragon Auto, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2023-33119 | 7.0 | May 6 | Time-of-check Time-of-use (TOCTOU) Race Condition in Hypervisor Affected: All versions, or not specified |
| CVE-2022-33257 | 7.0 | Mar 7 | Time-of-check time-of-use race condition in Core Affected: 0 |
| CVE-2022-33214 | 7.0 | Oct 17 | Memory corruption in display due to time-of-check time-of-use of metadata reserved size in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT,… Affected: All versions, or not specified |
| CVE-2022-25696 | 7.0 | Sep 16 | Memory corruption in display due to time-of-check time-of-use race condition during map or unmap in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30290 | 7.0 | Sep 9 | Possible null pointer dereference due to race condition between timeline fence signal and time line fence destroy in Snapdragon Auto, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1900 | 7.0 | Jun 9 | Possible use after free in Display due to race condition while creating an external display in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2024-33016 | 6.8 | Sep 2 | Improper Restriction of Operations within the Bounds of a Memory Buffer in Storage Affected: 0 |
| CVE-2022-33289 | 6.8 | Apr 4 | Improper validation of array index in Modem Affected: 0 |
| CVE-2021-35097 | 6.8 | Sep 2 | Possible authentication bypass due to improper order of signature verification and hashing in the signature verification call in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2025-47319 | 6.7 | Dec 18 | Exposure of Sensitive System Information to an Unauthorized Control Sphere in HLOS Affected: All versions, or not specified |
| CVE-2024-49848 | 6.7 | Apr 7 | Use After Free in DSP Service Affected: All versions, or not specified |
| CVE-2022-25666 | 6.7 | Oct 19 | Memory corruption due to use after free in service while trying to access maps by different threads in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-35120 | 6.7 | Jun 14 | Improper handling between export and release functions on the same handle from client can lead to use after free in Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-35118 | 6.7 | Jun 14 | An out-of-bounds write can occur due to an incorrect input check in the camera driver in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2021-30349 | 6.7 | Jun 14 | Improper access control sequence for AC database after memory allocation can lead to possible memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2021-30325 | 6.7 | Feb 11 | Possible out of bound access of DCI resources due to lack of validation process and resource allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30324 | 6.7 | Feb 11 | Possible out of bound write due to lack of boundary check for the maximum size of buffer when sending a DCI packet to remote process in Snapdragon Auto, Snapdragon Compute,… Affected: All versions, or not specified |
The 500 most important CVEs for this product (exploited first, then by severity)