QF
Product
Qca6595 Firmware
On CISA KEVExploited in the wild
423
CVEs
3
On KEV
9.8
Max CVSS
2
New 30D
Severity mix
Critical 28High 330Medium 65Low 0
Watch
Add Qca6595 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-23363 | 7.5 | Jun 3 | Buffer Over-read in WLAN Firmware Affected: 0 |
| CVE-2023-43537 | 7.5 | Jun 3 | Buffer Over-read in WLAN Host Affected: All versions, or not specified |
| CVE-2024-21477 | 7.5 | May 6 | Buffer Over-read in WLAN Firmware Affected: All versions, or not specified |
| CVE-2023-43539 | 7.5 | Mar 4 | Buffer Over-read in WLAN Firmware Affected: 0 |
| CVE-2023-43533 | 7.5 | Feb 6 | Buffer Over-read in WLAN Firmware Affected: All versions, or not specified |
| CVE-2023-43523 | 7.5 | Feb 6 | Reachable Assertion in WLAN Firmware Affected: All versions, or not specified |
| CVE-2023-33112 | 7.5 | Jan 2 | Buffer Over-read in WLAN Firmware Affected: All versions, or not specified |
| CVE-2023-33097 | 7.5 | Dec 5 | Buffer Over-read in WLAN Firmware Affected: All versions, or not specified |
| CVE-2023-33081 | 7.5 | Dec 5 | Buffer over-read in WLAN Firmware Affected: All versions, or not specified |
| CVE-2023-33041 | 7.5 | Dec 5 | Reachable assertion in WLAN Firmware Affected: All versions, or not specified |
| CVE-2023-28588 | 7.5 | Dec 5 | Integer Overflow or Wraparound in Bluetooth Host Affected: All versions, or not specified |
| CVE-2023-33061 | 7.5 | Nov 7 | Buffer Over-read in WLAN Firmware Affected: All versions, or not specified |
| CVE-2023-33056 | 7.5 | Nov 7 | NULL Pointer dereference in WLAN Firmware Affected: All versions, or not specified |
| CVE-2023-33048 | 7.5 | Nov 7 | Buffer over-read in WLAN Firmware Affected: 0 |
| CVE-2023-33047 | 7.5 | Nov 7 | Buffer Over-read in WLAN Firmware Affected: All versions, or not specified |
| CVE-2023-33020 | 7.5 | Sep 5 | Improper Authorization in WLAN Host Affected: All versions, or not specified |
| CVE-2023-33019 | 7.5 | Sep 5 | Improper Authorization in WLAN Host Affected: All versions, or not specified |
| CVE-2023-28584 | 7.5 | Sep 5 | Improper Authorization in WLAN Host Affected: All versions, or not specified |
| CVE-2023-21658 | 7.5 | Jun 6 | Buffer Over-Read in WLAN Firmware Affected: All versions, or not specified |
| CVE-2022-40503 | 7.5 | Apr 13 | Information disclosure due to buffer over-read in Bluetooth Host while A2DP streaming Affected: All versions, or not specified |
| CVE-2022-40502 | 7.5 | Feb 12 | Transient DOS due to improper input validation in WLAN Host Affected: All versions, or not specified |
| CVE-2022-34146 | 7.5 | Feb 12 | Transient DOS due to improper input validation in WLAN Host while parsing frame during defragmentation Affected: All versions, or not specified |
| CVE-2022-34145 | 7.5 | Feb 12 | Transient DOS due to buffer over-read in WLAN Host while parsing frame information Affected: All versions, or not specified |
| CVE-2022-33306 | 7.5 | Feb 12 | Transient DOS due to buffer over-read in WLAN while processing an incoming management frame with incorrectly filled IEs Affected: All versions, or not specified |
| CVE-2022-33299 | 7.5 | Jan 9 | Transient DOS due to null pointer dereference in Bluetooth HOST while receiving an attribute protocol PDU with zero length data Affected: All versions, or not specified |
| CVE-2022-33290 | 7.5 | Jan 9 | Transient DOS in Bluetooth HOST due to null pointer dereference when a mismatched argument is passed Affected: All versions, or not specified |
| CVE-2022-25741 | 7.5 | Nov 15 | Denial of service in WLAN due to potential null pointer dereference while accessing the memory location in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2022-25710 | 7.5 | Nov 15 | Denial of service due to null pointer dereference when GATT is disconnected in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon… Affected: All versions, or not specified |
| CVE-2022-25690 | 7.5 | Sep 16 | Information disclosure in WLAN due to improper validation of array index while parsing crafted ANQP action frames in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2022-22065 | 7.5 | Jun 14 | Out of bound read in WLAN HOST due to improper length check can lead to DOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics… Affected: All versions, or not specified |
| CVE-2022-22064 | 7.5 | Jun 14 | Possible buffer over read due to lack of size validation while unpacking frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics… Affected: All versions, or not specified |
| CVE-2021-30310 | 7.5 | Oct 20 | Possible buffer overflow due to Improper validation of received CF-ACK and CF-Poll data frames in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics… Affected: All versions, or not specified |
| CVE-2021-1936 | 7.5 | Oct 20 | Null pointer dereference can occur due to lack of null check for user provided input in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2021-1974 | 7.5 | Sep 9 | Possible buffer over read due to lack of alignment between map or unmap length of IPA SMMU and WLAN SMMU in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2021-1971 | 7.5 | Sep 9 | Possible assertion due to lack of physical layer state validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity,… Affected: All versions, or not specified |
| CVE-2021-1970 | 7.5 | Jul 13 | Possible out of bound read due to lack of length check of FT sub-elements in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1964 | 7.5 | Jul 13 | Possible buffer over read due to improper validation of IE size while parsing beacon from peer device in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1955 | 7.5 | Jul 13 | Denial of service in SAP case due to improper handling of connections when association is rejected in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1943 | 7.5 | Jul 13 | Possible buffer out of bound read can occur due to improper validation of TBTT count and length while parsing the beacon response in Snapdragon Auto, Snapdragon Compute,… Affected: All versions, or not specified |
| CVE-2021-1907 | 7.5 | Jul 13 | Possible buffer overflow due to lack of length check in BA request in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial… Affected: All versions, or not specified |
| CVE-2026-24085 | 7.2 | Jun 1 | Stack-based Buffer Overflow in Display Affected: All versions, or not specified |
| CVE-2025-47378 | 7.1 | Mar 2 | Exposure of Sensitive System Information to an Unauthorized Control Sphere in HLOS Affected: All versions, or not specified |
| CVE-2024-43065 | 7.1 | Apr 7 | Exposed Dangerous Method or Function in HLOS Affected: All versions, or not specified |
| CVE-2024-23362 | 7.1 | Sep 2 | Improper Input Validation in Trusted Execution Environment Affected: 0 |
| CVE-2023-21652 | 7.1 | Aug 8 | Key Management Errors in HLOS Affected: 0 |
| CVE-2023-21626 | 7.1 | Aug 8 | Improper Authentication in HLOS. Affected: All versions, or not specified |
| CVE-2022-25665 | 7.1 | Oct 12 | Information disclosure due to buffer over read in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile Affected: All versions, or not specified |
| CVE-2020-11304 | 7.1 | Jun 9 | Possible out of bound read in DRM due to improper buffer length check Affected: All versions, or not specified |
| CVE-2020-11203 | 7.1 | Feb 22 | Stack overflow may occur if GSM/WCDMA broadcast config size received from user is larger than variable length array in Snapdragon Auto, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2026-25278 | 7.0 | Sep 17 | Time-of-check Time-of-use (TOCTOU) Race Condition in Automotive Software platform based on QNX Affected: All versions, or not specified |