QF
Product
Qca8337 Firmware
On CISA KEVExploited in the wild
475
CVEs
3
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 37High 358Medium 80Low 0
Watch
Add Qca8337 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-33037 | 5.5 | Jan 2 | Cryptographic Issues in Automotive Affected: All versions, or not specified |
| CVE-2023-33036 | 5.5 | Jan 2 | NULL Pointer Dereference in Hypervisor Affected: All versions, or not specified |
| CVE-2023-33070 | 5.5 | Dec 5 | Improper Authentication in Automotive OS Affected: All versions, or not specified |
| CVE-2023-28554 | 5.5 | Nov 7 | Buffer Over-read in Qualcomm IPC Affected: All versions, or not specified |
| CVE-2022-40523 | 5.5 | Jun 6 | Information exposure in Kernel Affected: All versions, or not specified |
| CVE-2022-33273 | 5.5 | May 2 | Buffer over-read in Trusted Execution Environment Affected: All versions, or not specified |
| CVE-2022-22075 | 5.5 | Mar 7 | Information Exposure in Graphics Affected: All versions, or not specified |
| CVE-2022-40519 | 5.5 | Jan 6 | Buffer over-read in Core Affected: All versions, or not specified |
| CVE-2022-40518 | 5.5 | Jan 6 | Buffer overread in Core Affected: All versions, or not specified |
| CVE-2022-25725 | 5.5 | Jan 6 | Use-after-Free in MODEM Affected: All versions, or not specified |
| CVE-2022-25664 | 5.5 | Oct 12 | Information disclosure due to exposure of information while GPU reads the data in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-35135 | 5.5 | Sep 2 | A null pointer dereference may potentially occur during RSA key import in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-35071 | 5.5 | Jun 14 | Possible buffer over read due to lack of size validation while copying data from DBR buffer to RX buffer and can lead to Denial of Service in Snapdragon Auto, Snapdragon Compute,… Affected: All versions, or not specified |
| CVE-2021-30339 | 5.5 | Jun 14 | Reading PRNG output may lead to improper key generation due to lack of buffer validation in Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-35119 | 5.5 | Jun 14 | Potential out of Bounds read in FIPS event processing due to improper validation of the length from the firmware in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2021-30331 | 5.5 | Apr 1 | Possible buffer overflow due to improper data validation of external commands sent via DIAG interface in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30278 | 5.5 | Jan 3 | Improper input validation in TrustZone memory transfer interface can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1968 | 5.5 | Oct 20 | Improper validation of kernel buffer address while copying information back to user buffer can lead to kernel memory information exposure to user space in Snapdragon Auto,… Affected: All versions, or not specified |
| CVE-2021-1969 | 5.5 | Oct 20 | Improper validation of kernel buffer address while copying information back to user buffer can lead to kernel memory information exposure to user space in Snapdragon Auto,… Affected: All versions, or not specified |
| CVE-2021-1904 | 5.5 | Sep 8 | Child process can leak information from parent process due to numeric pids are getting compared and these pid can be reused in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2020-11236 | 5.5 | Apr 7 | Memory corruption due to invalid value of total dimension in the non-histogram type KPI could lead to a denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2020-11186 | 5.5 | Mar 17 | Modem will enter into busy mode in an infinite loop while parsing histogram dimension due to improper validation of input received in Snapdragon Auto, Snapdragon Compute,… Affected: All versions, or not specified |
| CVE-2024-38426 | 5.3 | Mar 3 | Improper Authentication in Modem Affected: All versions, or not specified |
| CVE-2021-1967 | 5.3 | Oct 20 | Possible stack buffer overflow due to lack of check on the maximum number of post NAN discovery attributes while processing a NAN Match event in Snapdragon Auto, Snapdragon… Affected: All versions, or not specified |
| CVE-2022-22078 | 4.6 | Oct 12 | Denial of service in BOOT when partition size for a particular partition is requested due to integer overflow when blocks are calculated in Snapdragon Auto, Snapdragon Compute,… Affected: All versions, or not specified |