QF
Product
Qca6595 Firmware
On CISA KEVExploited in the wild
423
CVEs
3
On KEV
9.8
Max CVSS
2
New 30D
Severity mix
Critical 28High 330Medium 65Low 0
Watch
Add Qca6595 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-40533 | 5.5 | Jun 6 | Transient DOS due to untrusted Pointer Dereference in core while sending USB QMI request Affected: All versions, or not specified |
| CVE-2022-40523 | 5.5 | Jun 6 | Information disclosure in Kernel due to indirect branch misprediction Affected: All versions, or not specified |
| CVE-2022-33273 | 5.5 | May 2 | Information disclosure due to buffer over-read in Trusted Execution Environment while QRKS report generation Affected: All versions, or not specified |
| CVE-2022-33216 | 5.5 | Feb 12 | Transient Denial-of-service in Automotive due to improper input validation while parsing ELF file Affected: All versions, or not specified |
| CVE-2022-40519 | 5.5 | Jan 9 | Information disclosure due to buffer overread in Core Affected: All versions, or not specified |
| CVE-2022-40518 | 5.5 | Jan 9 | Information disclosure due to buffer overread in Core Affected: All versions, or not specified |
| CVE-2022-33253 | 5.5 | Jan 9 | Transient DOS due to buffer over-read in WLAN while parsing corrupted NAN frames Affected: All versions, or not specified |
| CVE-2022-33252 | 5.5 | Jan 9 | Information disclosure due to buffer over-read in WLAN while handling IBSS beacons frame Affected: All versions, or not specified |
| CVE-2021-35135 | 5.5 | Sep 2 | A null pointer dereference may potentially occur during RSA key import in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-35119 | 5.5 | Jun 14 | Potential out of Bounds read in FIPS event processing due to improper validation of the length from the firmware in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2021-35071 | 5.5 | Jun 14 | Possible buffer over read due to lack of size validation while copying data from DBR buffer to RX buffer and can lead to Denial of Service in Snapdragon Auto, Snapdragon Compute,… Affected: All versions, or not specified |
| CVE-2021-1969 | 5.5 | Oct 20 | Improper validation of kernel buffer address while copying information back to user buffer can lead to kernel memory information exposure to user space in Snapdragon Auto,… Affected: All versions, or not specified |
| CVE-2021-1968 | 5.5 | Oct 20 | Improper validation of kernel buffer address while copying information back to user buffer can lead to kernel memory information exposure to user space in Snapdragon Auto,… Affected: All versions, or not specified |
| CVE-2021-1935 | 5.5 | Sep 9 | Possible null pointer dereference due to lack of validation check for passed pointer during key import in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1929 | 5.5 | Sep 8 | Lack of strict validation of bootmode can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1904 | 5.5 | Sep 8 | Child process can leak information from parent process due to numeric pids are getting compared and these pid can be reused in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2026-21384 | 5.3 | Jul 6 | Out-of-bounds Write in Camera Driver Affected: All versions, or not specified |
| CVE-2026-21370 | 5.3 | Jul 6 | Out-of-bounds Write in Camera Driver Affected: All versions, or not specified |
| CVE-2026-21369 | 5.3 | Jul 6 | Out-of-bounds Write in Camera Driver Affected: All versions, or not specified |
| CVE-2026-21368 | 5.3 | Jul 6 | Out-of-bounds Write in Camera Driver Affected: All versions, or not specified |
| CVE-2021-1967 | 5.3 | Oct 20 | Possible stack buffer overflow due to lack of check on the maximum number of post NAN discovery attributes while processing a NAN Match event in Snapdragon Auto, Snapdragon… Affected: All versions, or not specified |
| CVE-2025-21431 | 4.7 | Apr 7 | Time-of-check Time-of-use (TOCTOU) Race Condition in Automotive OS Platform Affected: All versions, or not specified |
| CVE-2024-43064 | 4.7 | Jan 6 | Permissions, Privileges, and Access Controls issue in Automotive OS Platform Affected: All versions, or not specified |