Qca6584au Firmware vulnerabilities | LiveThreat CVE Feed

Product

Qca6584au Firmware

by Qualcomm · last CVE Sep 17, 2026

On CISA KEVExploited in the wild

391

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities391 In the news0 Timeline

Severity mix

Critical 47High 278Medium 66Low 0

Severity

All severities391 Critical47 High278 Medium66 Low0

Exploitation

On CISA KEV1 Exploited in the wild1

Watch

Add Qca6584au Firmware to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-43047 In wildKEV	7.8	1%	Oct 7	Use After Free in DSP Service Affected: 0
CVE-2023-28585	8.8	0%	Dec 5	Integer Overflow to Buffer Overflow in TZ Secure OS Affected: All versions, or not specified
CVE-2023-28572	8.8	0%	Nov 7	Buffer Over-read in WLAN HOST Affected: All versions, or not specified
CVE-2022-33280	8.8	0%	Feb 12	Memory corruption due to access of uninitialized pointer in Bluetooth HOST while processing the AVRCP packet Affected: All versions, or not specified
CVE-2022-22088	8.8	1%	Jan 9	Memory corruption in Bluetooth HOST due to buffer overflow while parsing the command response received from remote Affected: All versions, or not specified
CVE-2020-11303	8.6	1%	Oct 20	Accepting AMSDU frames with mismatched destination and source address can lead to information disclosure in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified
CVE-2025-47345	8.4	0%	Jan 6	Reusing a Nonce, Key Pair in Encryption in Automotive Platform Affected: All versions, or not specified
CVE-2024-21481	8.4	0%	Aug 5	Improper Restriction of Operations within the Bounds of a Memory Buffer in Hypervisor Affected: 0
CVE-2021-1913	8.4	0%	Oct 20	Possible integer overflow due to improper length check while updating grace period and count record in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified
CVE-2024-33073	8.2	0%	Oct 7	Buffer Over-read in WLAN Host Communication Affected: 0
CVE-2024-23359	8.2	0%	Sep 2	Buffer Over-read in Multi Mode Call Processor Affected: 0
CVE-2023-22382	8.2	0%	Oct 3	Improper Input Validation in Automotive Affected: All versions, or not specified
CVE-2026-24079	8.1	0%	Aug 4	Missing Authentication for Critical Function in Data Modem Affected: All versions, or not specified
CVE-2022-33268	8.1	0%	Dec 13	Information disclosure due to buffer over-read in Bluetooth HOST while pairing and connecting A2DP Affected: All versions, or not specified
CVE-2025-47386	7.8	0%	Mar 2	Use After Free in Automotive Audio Affected: All versions, or not specified
CVE-2025-47377	7.8	0%	Mar 2	Use After Free in Automotive Audio Affected: All versions, or not specified
CVE-2025-47376	7.8	0%	Mar 2	Use After Free in Automotive Audio Affected: All versions, or not specified
CVE-2025-47375	7.8	0%	Mar 2	Use After Free in Automotive Audio Affected: All versions, or not specified
CVE-2025-47373	7.8	0%	Mar 2	Out-of-bounds Write in Automotive Affected: All versions, or not specified
CVE-2025-47366	7.8	0%	Feb 2	Exposed Dangerous Method or Function in HLOS Affected: All versions, or not specified
CVE-2025-47346	7.8	0%	Jan 6	Out-of-bounds Write in HLOS Affected: All versions, or not specified
CVE-2025-47323	7.8	0%	Dec 18	Integer Overflow or Wraparound in Audio Affected: All versions, or not specified
CVE-2025-47322	7.8	0%	Dec 18	Use After Free in Automotive Linux OS Affected: All versions, or not specified
CVE-2025-27074	7.8	0%	Nov 4	Incorrect Calculation of Buffer Size in SCE-Mink Affected: All versions, or not specified
CVE-2025-21456	7.8	0%	Aug 6	Use After Free in NPU Affected: All versions, or not specified
CVE-2025-27061	7.8	0%	Jul 8	Out-of-bounds Write in Video Affected: All versions, or not specified
CVE-2025-21432	7.8	0%	Jul 8	Double Free in SPS-HLOS Affected: All versions, or not specified
CVE-2025-21422	7.8	0%	Jul 8	Cryptographic Issues in Automotive Affected: All versions, or not specified
CVE-2024-49845	7.8	0%	May 6	Improper Input Validation in HLOS Affected: All versions, or not specified
CVE-2024-49842	7.8	0%	May 6	Improper Access Control in Hypervisor Affected: All versions, or not specified
CVE-2024-45557	7.8	0%	Apr 7	Use of Out-of-range Pointer Offset in Trust Management Engine Affected: All versions, or not specified
CVE-2024-53030	7.8	0%	Mar 3	Improper Input Validation in Automotive OS Platform Affected: All versions, or not specified
CVE-2024-53023	7.8	0%	Mar 3	Use After Free in Automotive Android OS Affected: All versions, or not specified
CVE-2024-45584	7.8	0%	Feb 3	Untrusted Pointer Dereference in Automotive Android OS Affected: All versions, or not specified
CVE-2024-45571	7.8	0%	Feb 3	Use After Free in WLAN Host Communication Affected: All versions, or not specified
CVE-2024-38420	7.8	0%	Feb 3	Improper Input Validation in Hypervisor Affected: All versions, or not specified
CVE-2024-45555	7.8	0%	Jan 6	Integer Overflow to Buffer Overflow in Automotive OS Platform Affected: All versions, or not specified
CVE-2024-45553	7.8	0%	Jan 6	Use After Free in DSP Services Affected: All versions, or not specified
CVE-2024-33044	7.8	0%	Dec 2	Improper Validation of Array Index in Hypervisor Affected: 0
CVE-2024-38424	7.8	0%	Nov 4	Use After Free in GPS Affected: 0
CVE-2024-38423	7.8	0%	Nov 4	Buffer Copy Without Checking Size of Input in Graphics Linux Affected: 0
CVE-2024-38422	7.8	0%	Nov 4	Integer Overflow to Buffer Overflow in Audio Affected: 0
CVE-2024-38419	7.8	0%	Nov 4	Use After Free in Automotive GPU Affected: 0
CVE-2024-23369	7.8	0%	Oct 7	Improper Restriction of Operations within the Bounds of a Memory Buffer in HLOS Affected: 0
CVE-2024-21455	7.8	0%	Oct 7	Untrusted Pointer Dereference in DSP Service Affected: 0
CVE-2024-38402	7.8	0%	Sep 2	Use After Free in DSP Services Affected: 0
CVE-2024-38401	7.8	0%	Sep 2	Use After Free in Qualcomm IPC Affected: 0
CVE-2024-33060	7.8	0%	Sep 2	Use After Free in DSP Service Affected: 0
CVE-2024-33045	7.8	0%	Sep 2	Return of Stack Variable Address in Buses Affected: 0
CVE-2024-33028	7.8	0%	Aug 5	Use After Free in Automotive Telematics Affected: 0