QF
Product
Qca6574a Firmware
On CISA KEVExploited in the wild
653
CVEs
3
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 60High 440Medium 0Low 0
Watch
Add Qca6574a Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-24849 | 7.5 | Oct 3 | Buffer Over-read in Data Modem Affected: All versions, or not specified |
| CVE-2023-24848 | 7.5 | Oct 3 | Buffer Over-read in Data Modem Affected: All versions, or not specified |
| CVE-2023-24847 | 7.5 | Oct 3 | NULL pointer Dereference in Modem Affected: 0 |
| CVE-2023-24843 | 7.5 | Oct 3 | Reachable Assertion in Modem Affected: All versions, or not specified |
| CVE-2023-33020 | 7.5 | Sep 5 | Improper Authorization in WLAN Host Affected: All versions, or not specified |
| CVE-2023-33019 | 7.5 | Sep 5 | Improper Authorization in WLAN Host Affected: All versions, or not specified |
| CVE-2023-28584 | 7.5 | Sep 5 | Improper Authorization in WLAN Host Affected: All versions, or not specified |
| CVE-2023-21646 | 7.5 | Sep 5 | Reachable Assertion in Modem Affected: All versions, or not specified |
| CVE-2023-28555 | 7.5 | Aug 8 | Buffer Over-read in Audio Affected: All versions, or not specified |
| CVE-2023-21625 | 7.5 | Aug 8 | Buffer Over-read in Network Services Affected: All versions, or not specified |
| CVE-2023-21658 | 7.5 | Jun 6 | Buffer Over-Read in WLAN Firmware Affected: All versions, or not specified |
| CVE-2022-40536 | 7.5 | Jun 6 | Improper authentication in Modem Affected: All versions, or not specified |
| CVE-2022-40521 | 7.5 | Jun 6 | Improper authorization in Modem Affected: All versions, or not specified |
| CVE-2022-33251 | 7.5 | Jun 6 | Reachable assertion in Modem Affected: All versions, or not specified |
| CVE-2022-22060 | 7.5 | Jun 6 | Reachable Assertion in Modem Affected: 0 |
| CVE-2022-40504 | 7.5 | May 2 | Reachable assertion in Modem Affected: All versions, or not specified |
| CVE-2022-40508 | 7.5 | May 2 | Reachable assertion in Modem Affected: 0 |
| CVE-2022-34144 | 7.5 | May 2 | Reachable assertion in Modem Affected: All versions, or not specified |
| CVE-2022-33305 | 7.5 | May 2 | Null pointer dereference in Modem Affected: All versions, or not specified |
| CVE-2022-40503 | 7.5 | Apr 4 | Buffer over-read in Bluetooth Host. Affected: All versions, or not specified |
| CVE-2022-33254 | 7.5 | Mar 7 | Reachable assertion in Modem Affected: All versions, or not specified |
| CVE-2022-33250 | 7.5 | Mar 7 | Reachable assertion in Modem Affected: All versions, or not specified |
| CVE-2022-40502 | 7.5 | Feb 9 | Improper input validation in WLAN Host Affected: All versions, or not specified |
| CVE-2022-34146 | 7.5 | Feb 9 | Improper input validation in WLAN Host Affected: All versions, or not specified |
| CVE-2022-34145 | 7.5 | Feb 9 | Buffer over-read in WLAN Host Affected: All versions, or not specified |
| CVE-2022-33306 | 7.5 | Feb 9 | Buffer over-read in WLAN Affected: All versions, or not specified |
| CVE-2022-33271 | 7.5 | Feb 9 | Buffer over-read in WLAN Affected: 0 |
| CVE-2022-33299 | 7.5 | Jan 9 | Transient DOS due to null pointer dereference in Bluetooth HOST while receiving an attribute protocol PDU with zero length data Affected: All versions, or not specified |
| CVE-2022-33290 | 7.5 | Jan 9 | Transient DOS in Bluetooth HOST due to null pointer dereference when a mismatched argument is passed Affected: All versions, or not specified |
| CVE-2022-25692 | 7.5 | Dec 13 | Denial of service in Modem due to reachable assertion while processing the common config procedure in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2022-25685 | 7.5 | Dec 13 | Denial of service in Modem module due to improper authorization while error handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT,… Affected: All versions, or not specified |
| CVE-2022-25741 | 7.5 | Nov 15 | Denial of service in WLAN due to potential null pointer dereference while accessing the memory location in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2022-25710 | 7.5 | Nov 15 | Denial of service due to null pointer dereference when GATT is disconnected in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon… Affected: All versions, or not specified |
| CVE-2022-25662 | 7.5 | Oct 12 | Information disclosure due to untrusted pointer dereference in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2022-25706 | 7.5 | Sep 16 | Information disclosure in Bluetooth driver due to buffer over-read while reading l2cap length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2022-25690 | 7.5 | Sep 16 | Information disclosure in WLAN due to improper validation of array index while parsing crafted ANQP action frames in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2022-25670 | 7.5 | Sep 16 | Denial of service in WLAN HOST due to buffer over read while unpacking frames in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics… Affected: All versions, or not specified |
| CVE-2022-25669 | 7.5 | Sep 16 | Denial of service in video due to buffer over read while parsing MP4 clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2022-22091 | 7.5 | Sep 16 | Improper authorization of a replayed LTE security mode command can lead to a denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2022-22083 | 7.5 | Jun 14 | Denial of service due to memory corruption while extracting ape header from clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2022-22065 | 7.5 | Jun 14 | Out of bound read in WLAN HOST due to improper length check can lead to DOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics… Affected: All versions, or not specified |
| CVE-2022-22064 | 7.5 | Jun 14 | Possible buffer over read due to lack of size validation while unpacking frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics… Affected: All versions, or not specified |
| CVE-2021-35100 | 7.5 | Jun 14 | Possible buffer over read due to improper calculation of string length while parsing Id3 tag in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2021-35096 | 7.5 | Jun 14 | Improper memory allocation during counter check DLM handling can lead to denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial… Affected: All versions, or not specified |
| CVE-2021-35086 | 7.5 | Jun 14 | Possible buffer over read due to improper validation of SIB type when processing a NR system Information message in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2021-35078 | 7.5 | Jun 14 | Possible memory leak due to improper validation of certificate chain length while parsing server certificate chain in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2021-35076 | 7.5 | Jun 14 | Possible null pointer dereference due to improper validation of RRC connection reconfiguration message in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-35073 | 7.5 | Jun 14 | Possible assertion due to improper validation of rank restriction field in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30344 | 7.5 | Jun 14 | Improper authorization of a replayed LTE security mode command can lead to a denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2021-30340 | 7.5 | Jun 14 | Reachable assertion due to improper validation of coreset in PDCCH configuration in SA mode in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial… Affected: All versions, or not specified |
The 500 most important CVEs for this product (exploited first, then by severity)