QF
Product
Qca6584au Firmware
On CISA KEVExploited in the wild
391
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 47High 278Medium 66Low 0
Watch
Add Qca6584au Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-33016 | 6.8 | Sep 2 | Improper Restriction of Operations within the Bounds of a Memory Buffer in Storage Affected: 0 |
| CVE-2022-33289 | 6.8 | Apr 4 | Improper validation of array index in Modem Affected: 0 |
| CVE-2025-47319 | 6.7 | Dec 18 | Exposure of Sensitive System Information to an Unauthorized Control Sphere in HLOS Affected: All versions, or not specified |
| CVE-2024-49848 | 6.7 | Apr 7 | Use After Free in DSP Service Affected: All versions, or not specified |
| CVE-2024-33030 | 6.7 | Nov 4 | Buffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in Performance Affected: 0 |
| CVE-2024-33029 | 6.7 | Nov 4 | Use After Free in DSP Services Affected: 0 |
| CVE-2024-23379 | 6.7 | Oct 7 | Double Free in DSP Services Affected: 0 |
| CVE-2024-23378 | 6.7 | Oct 7 | Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Audio Affected: 0 |
| CVE-2024-23374 | 6.7 | Oct 7 | Stack-based Buffer Overflow in Power Management IC Affected: 0 |
| CVE-2024-23370 | 6.7 | Oct 7 | Use After Free in Automotive Multimedia Affected: 0 |
| CVE-2021-30265 | 6.7 | Nov 12 | Possible memory corruption due to improper validation of memory address while processing user-space IOCTL for clearing Filter and Route statistics in Snapdragon Auto, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30264 | 6.7 | Nov 12 | Possible use after free due improper validation of reference from call back to internal store table in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2021-1963 | 6.7 | Sep 9 | Possible use-after-free due to lack of validation for the rule count in filter table in IPA driver in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1962 | 6.7 | Sep 9 | Buffer Overflow while processing IOCTL for getting peripheral endpoint information there is no proper validation for input maximum endpoint pair and its size in Snapdragon Auto,… Affected: All versions, or not specified |
| CVE-2021-1961 | 6.7 | Sep 9 | Possible buffer overflow due to lack of offset length check while updating the buffer value in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2021-1931 | 6.7 | Jul 13 | Possible buffer overflow due to improper validation of buffer length while processing fast boot commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2020-11160 | 6.7 | Jun 9 | Resource leakage issue during dci client registration due to reference count is not decremented if dci client registration fails in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2025-47371 | 6.5 | Mar 2 | Reachable Assertion in Modem Affected: All versions, or not specified |
| CVE-2025-47402 | 6.5 | Feb 2 | Buffer Over-read in WLAN Firmware Affected: All versions, or not specified |
| CVE-2025-47370 | 6.5 | Nov 4 | Reachable Assertion in BT Controller Affected: All versions, or not specified |
| CVE-2024-38405 | 6.5 | Nov 4 | Buffer Over-read in WLAN Host Affected: 0 |
| CVE-2024-38403 | 6.5 | Nov 4 | Buffer Over-read in WLAN Firmware Affected: 0 |
| CVE-2024-33068 | 6.5 | Nov 4 | Use After Free in WLAN Host Communication Affected: 0 |
| CVE-2024-23385 | 6.5 | Nov 4 | Reachable Assertion in Modem Affected: 0 |
| CVE-2024-23350 | 6.5 | Aug 5 | Reachable Assertion in Multi Mode Call Processor Affected: 0 |
| CVE-2022-33284 | 6.5 | Jan 9 | Information disclosure due to buffer over-read in WLAN while parsing BTM action frame Affected: All versions, or not specified |
| CVE-2022-33283 | 6.5 | Jan 9 | Information disclosure due to buffer over-read in WLAN while WLAN frame parsing due to missing frame length check Affected: All versions, or not specified |
| CVE-2021-1960 | 6.5 | Sep 9 | Improper handling of ASB-C broadcast packets with crafted opcode in LMP can lead to uncontrolled resource consumption in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1956 | 6.5 | Sep 9 | Improper handling of ASB-U packet with L2CAP channel ID by slave host can lead to interference with piconet in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2024-45551 | 6.2 | Apr 7 | Weak Authentication in HLOS Affected: All versions, or not specified |
| CVE-2025-47362 | 6.1 | Nov 4 | Buffer Over-read in Automotive Software platform based on QNX Affected: All versions, or not specified |
| CVE-2025-27064 | 6.1 | Nov 4 | Buffer Over-read in Core Services Affected: All versions, or not specified |
| CVE-2025-27030 | 6.1 | Sep 24 | Buffer Over-read in Audio Affected: All versions, or not specified |
| CVE-2025-21457 | 6.1 | Aug 6 | Buffer Over-read in Automotive OS Platform Android Affected: All versions, or not specified |
| CVE-2021-30342 | 5.9 | Jun 14 | Improper integrity check can lead to race condition between tasks PDCP and RRC? after a valid RRC Command packet has been received in Snapdragon Auto, Snapdragon Compute,… Affected: All versions, or not specified |
| CVE-2025-47330 | 5.5 | Jan 6 | Buffer Over-read in Video Affected: All versions, or not specified |
| CVE-2025-27041 | 5.5 | Oct 9 | Buffer Over-read in Video Affected: All versions, or not specified |
| CVE-2024-43051 | 5.5 | Mar 3 | Improper Authorization in SPS-HLOS Affected: All versions, or not specified |
| CVE-2024-38417 | 5.5 | Feb 3 | Buffer Over-read in Automotive Multimedia Affected: All versions, or not specified |
| CVE-2024-38416 | 5.5 | Feb 3 | Buffer Over-read in Audio Affected: All versions, or not specified |
| CVE-2024-33067 | 5.5 | Jan 6 | Buffer Over-read in Audio Affected: All versions, or not specified |
| CVE-2024-23357 | 5.5 | Aug 5 | NULL Pointer Dereference in HLOS Affected: All versions, or not specified |
| CVE-2024-21462 | 5.5 | Jul 1 | Buffer Over-read in TZ Secure OS Affected: All versions, or not specified |
| CVE-2023-43528 | 5.5 | May 6 | Buffer Over-read in Audio Affected: All versions, or not specified |
| CVE-2023-33111 | 5.5 | Apr 1 | Improper Validation of Array Index in Audio Affected: All versions, or not specified |
| CVE-2023-33090 | 5.5 | Mar 4 | Buffer Over-read in Audio Affected: All versions, or not specified |
| CVE-2023-33064 | 5.5 | Feb 6 | Buffer Over-read in Audio Affected: All versions, or not specified |
| CVE-2023-33060 | 5.5 | Feb 6 | Buffer Over-read in Core Affected: All versions, or not specified |
| CVE-2023-28569 | 5.5 | Nov 7 | Buffer Over-read in WLAN HAL Affected: All versions, or not specified |
| CVE-2023-28566 | 5.5 | Nov 7 | Buffer Over-read in WLAN HAL Affected: All versions, or not specified |