QF
Product
Qca8081 Firmware
On CISA KEVExploited in the wild
516
CVEs
3
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 56High 380Medium 64Low 0
Watch
Add Qca8081 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-21456 | 9.1 | Jul 1 | Buffer Over-read in WLAN HOST Affected: 0 |
| CVE-2023-33058 | 9.1 | Feb 6 | Information disclosure in Modem while processing SIB5 Affected: All versions, or not specified |
| CVE-2023-33054 | 9.1 | Dec 5 | Cryptographic issue in GPS HLOS Driver while downloading Qualcomm GNSS assistance data Affected: All versions, or not specified |
| CVE-2022-22062 | 9.1 | Sep 2 | An out-of-bounds read can occur while parsing a server certificate due to improper length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-35083 | 9.1 | Jun 14 | Possible out of bound read due to improper validation of certificate chain in SSL or Internet key exchange in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2021-35117 | 9.1 | Apr 1 | An Out of Bounds read may potentially occur while processing an IBSS beacon, in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-35088 | 9.1 | Apr 1 | Possible out of bound read due to improper validation of IE length during SSID IE parse when channel is DFS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2021-1981 | 9.1 | Nov 12 | Possible buffer over read due to improper IE size check of Bearer capability IE in MT setup request from network in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2018-13906 | 9.1 | Jun 14 | The HMAC authenticating the message from QSEE is vulnerable to timing side channel analysis leading to potentially forged application message in Snapdragon Auto, Snapdragon… Affected: All versions, or not specified |
| CVE-2026-25268 | 8.8 | Jul 6 | Stack-based Buffer Overflow in WLAN Host Affected: All versions, or not specified |
| CVE-2023-43556 | 8.8 | Jun 3 | Buffer Copy Without Checking Size of Input in Hypervisor Affected: All versions, or not specified |
| CVE-2022-33288 | 8.8 | Apr 13 | Memory corruption due to buffer copy without checking the size of input in Core while sending SCM command to get write protection information Affected: All versions, or not specified |
| CVE-2022-33280 | 8.8 | Feb 12 | Memory corruption due to access of uninitialized pointer in Bluetooth HOST while processing the AVRCP packet Affected: All versions, or not specified |
| CVE-2025-47345 | 8.4 | Jan 6 | Reusing a Nonce, Key Pair in Encryption in Automotive Platform Affected: All versions, or not specified |
| CVE-2024-21481 | 8.4 | Aug 5 | Improper Restriction of Operations within the Bounds of a Memory Buffer in Hypervisor Affected: 0 |
| CVE-2024-23359 | 8.2 | Sep 2 | Buffer Over-read in Multi Mode Call Processor Affected: 0 |
| CVE-2021-30347 | 8.1 | Jun 14 | Improper integrity check can lead to race condition between tasks PDCP and RRC? right after a valid RRC Command packet has been received in Snapdragon Auto, Snapdragon Compute,… Affected: All versions, or not specified |
| CVE-2025-59605 | 7.8 | Jun 1 | Out-of-bounds Write in HLOS Affected: All versions, or not specified |
| CVE-2025-59600 | 7.8 | Mar 2 | Buffer Over-read in Graphics Affected: All versions, or not specified |
| CVE-2025-47386 | 7.8 | Mar 2 | Use After Free in Automotive Audio Affected: All versions, or not specified |
| CVE-2025-47377 | 7.8 | Mar 2 | Use After Free in Automotive Audio Affected: All versions, or not specified |
| CVE-2025-47376 | 7.8 | Mar 2 | Use After Free in Automotive Audio Affected: All versions, or not specified |
| CVE-2025-47375 | 7.8 | Mar 2 | Use After Free in Automotive Audio Affected: All versions, or not specified |
| CVE-2025-47373 | 7.8 | Mar 2 | Out-of-bounds Write in Automotive Affected: All versions, or not specified |
| CVE-2025-47323 | 7.8 | Dec 18 | Integer Overflow or Wraparound in Audio Affected: All versions, or not specified |
| CVE-2025-47322 | 7.8 | Dec 18 | Use After Free in Automotive Linux OS Affected: All versions, or not specified |
| CVE-2025-47321 | 7.8 | Dec 18 | Buffer Copy Without Checking Size of Input in Core Services Affected: All versions, or not specified |
| CVE-2025-27074 | 7.8 | Nov 4 | Incorrect Calculation of Buffer Size in SCE-Mink Affected: All versions, or not specified |
| CVE-2025-21456 | 7.8 | Aug 6 | Use After Free in NPU Affected: All versions, or not specified |
| CVE-2025-27061 | 7.8 | Jul 8 | Out-of-bounds Write in Video Affected: All versions, or not specified |
| CVE-2025-27043 | 7.8 | Jul 8 | Buffer Copy Without Checking Size of Input in Video Affected: All versions, or not specified |
| CVE-2025-21432 | 7.8 | Jul 8 | Double Free in SPS-HLOS Affected: All versions, or not specified |
| CVE-2025-21422 | 7.8 | Jul 8 | Cryptographic Issues in Automotive Affected: All versions, or not specified |
| CVE-2025-21468 | 7.8 | May 6 | Out-of-bounds Write in Computer Vision Affected: All versions, or not specified |
| CVE-2024-49845 | 7.8 | May 6 | Improper Input Validation in HLOS Affected: All versions, or not specified |
| CVE-2024-49842 | 7.8 | May 6 | Improper Access Control in Hypervisor Affected: All versions, or not specified |
| CVE-2024-45557 | 7.8 | Apr 7 | Use of Out-of-range Pointer Offset in Trust Management Engine Affected: All versions, or not specified |
| CVE-2024-53023 | 7.8 | Mar 3 | Use After Free in Automotive Android OS Affected: All versions, or not specified |
| CVE-2024-43060 | 7.8 | Mar 3 | Use of Out-of-range Pointer Offset in Automotive Audio Affected: All versions, or not specified |
| CVE-2024-45584 | 7.8 | Feb 3 | Untrusted Pointer Dereference in Automotive Android OS Affected: All versions, or not specified |
| CVE-2024-45571 | 7.8 | Feb 3 | Use After Free in WLAN Host Communication Affected: All versions, or not specified |
| CVE-2024-38420 | 7.8 | Feb 3 | Improper Input Validation in Hypervisor Affected: All versions, or not specified |
| CVE-2024-45553 | 7.8 | Jan 6 | Use After Free in DSP Services Affected: All versions, or not specified |
| CVE-2024-33044 | 7.8 | Dec 2 | Improper Validation of Array Index in Hypervisor Affected: 0 |
| CVE-2024-38424 | 7.8 | Nov 4 | Use After Free in GPS Affected: 0 |
| CVE-2024-38423 | 7.8 | Nov 4 | Buffer Copy Without Checking Size of Input in Graphics Linux Affected: 0 |
| CVE-2024-38419 | 7.8 | Nov 4 | Use After Free in Automotive GPU Affected: 0 |
| CVE-2024-38415 | 7.8 | Nov 4 | Use After Free in Computer Vision Affected: 0 |
| CVE-2024-23369 | 7.8 | Oct 7 | Improper Restriction of Operations within the Bounds of a Memory Buffer in HLOS Affected: 0 |
| CVE-2024-38402 | 7.8 | Sep 2 | Use After Free in DSP Services Affected: 0 |
The 500 most important CVEs for this product (exploited first, then by severity)