QF
Product
Qca9367 Firmware
132
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 18High 85Medium 29Low 0
Watch
Add Qca9367 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-11303 | 8.6 | Oct 20 | Accepting AMSDU frames with mismatched destination and source address can lead to information disclosure in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2021-1949 | 8.4 | Oct 20 | Possible integer overflow due to improper check of batch count value while sanitizer is enabled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2024-23359 | 8.2 | Sep 2 | Buffer Over-read in Multi Mode Call Processor Affected: 0 |
| CVE-2022-33268 | 8.1 | Dec 13 | Information disclosure due to buffer over-read in Bluetooth HOST while pairing and connecting A2DP Affected: All versions, or not specified |
| CVE-2021-35082 | 8.1 | Jun 14 | Improper integrity check can lead to race condition between tasks PDCP and RRC? right after a valid RRC security mode command packet has been received in Snapdragon Industrial IOT Affected: All versions, or not specified |
| CVE-2025-47404 | 7.8 | May 4 | Buffer Copy Without Checking Size of Input in Automotive Audio Affected: All versions, or not specified |
| CVE-2025-47386 | 7.8 | Mar 2 | Use After Free in Automotive Audio Affected: All versions, or not specified |
| CVE-2025-47381 | 7.8 | Mar 2 | Use After Free in Automotive Audio Affected: All versions, or not specified |
| CVE-2025-47377 | 7.8 | Mar 2 | Use After Free in Automotive Audio Affected: All versions, or not specified |
| CVE-2025-47376 | 7.8 | Mar 2 | Use After Free in Automotive Audio Affected: All versions, or not specified |
| CVE-2025-47375 | 7.8 | Mar 2 | Use After Free in Automotive Audio Affected: All versions, or not specified |
| CVE-2024-49830 | 7.8 | May 6 | Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Audio Affected: All versions, or not specified |
| CVE-2024-45581 | 7.8 | May 6 | Out-of-bounds Write in Audio Affected: All versions, or not specified |
| CVE-2024-45564 | 7.8 | May 6 | Use After Free in HLOS Affected: All versions, or not specified |
| CVE-2024-45562 | 7.8 | May 6 | Use After Free in HLOS Affected: All versions, or not specified |
| CVE-2024-43061 | 7.8 | Mar 3 | Use After Free in Audio Affected: All versions, or not specified |
| CVE-2024-43060 | 7.8 | Mar 3 | Use of Out-of-range Pointer Offset in Automotive Audio Affected: All versions, or not specified |
| CVE-2024-38423 | 7.8 | Nov 4 | Buffer Copy Without Checking Size of Input in Graphics Linux Affected: 0 |
| CVE-2024-38419 | 7.8 | Nov 4 | Use After Free in Automotive GPU Affected: 0 |
| CVE-2024-33045 | 7.8 | Sep 2 | Return of Stack Variable Address in Buses Affected: 0 |
| CVE-2024-33028 | 7.8 | Aug 5 | Use After Free in Automotive Telematics Affected: 0 |
| CVE-2024-33022 | 7.8 | Aug 5 | Integer Overflow or Wraparound in Automotive GPU Affected: 0 |
| CVE-2024-33021 | 7.8 | Aug 5 | Use of Uninitialized Variable in Automotive GPU Affected: 0 |
| CVE-2024-21475 | 7.8 | May 6 | Use of Out-of-range Pointer Offset in Video Affected: All versions, or not specified |
| CVE-2023-43524 | 7.8 | May 6 | Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Audio Affected: All versions, or not specified |
| CVE-2024-21468 | 7.8 | Apr 1 | Memory corruption when there is failed unmap operation in GPU Affected: All versions, or not specified |
| CVE-2023-33069 | 7.8 | Feb 6 | Memory corruption in Audio while processing the calibration data returned from ACDB loader Affected: All versions, or not specified |
| CVE-2023-33068 | 7.8 | Feb 6 | Memory corruption in Audio while processing IIR config data from AFE calibration block Affected: All versions, or not specified |
| CVE-2023-33067 | 7.8 | Feb 6 | Memory corruption in Audio while calling START command on host voice PCM multiple times for the same RX or TX tap points Affected: All versions, or not specified |
| CVE-2023-28551 | 7.8 | Dec 5 | Memory corruption in UTILS when modem processes memory specific Diag commands having arbitrary address values as input arguments Affected: All versions, or not specified |
| CVE-2023-28542 | 7.8 | Jul 4 | Memory Corruption in WLAN HOST while fetching TX status information Affected: All versions, or not specified |
| CVE-2022-40507 | 7.8 | Jun 6 | Memory corruption due to double free in Core while mapping HLOS address to the list Affected: All versions, or not specified |
| CVE-2023-21666 | 7.8 | May 2 | Memory Corruption in Graphics while accessing a buffer allocated through the graphics pool Affected: All versions, or not specified |
| CVE-2023-21665 | 7.8 | May 2 | Memory corruption in Graphics while importing a file Affected: All versions, or not specified |
| CVE-2022-33266 | 7.8 | Jan 9 | Memory corruption in Audio due to integer overflow to buffer overflow while music playback of clips like amr,evrc,qcelp with modified content Affected: All versions, or not specified |
| CVE-2022-25743 | 7.8 | Nov 15 | Memory corruption in graphics due to use-after-free while importing graphics buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2022-25724 | 7.8 | Nov 15 | Memory corruption in graphics due to buffer overflow while validating the user address in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2022-22058 | 7.8 | Sep 26 | Memory corruption due to use after free issue in kernel while processing ION handles in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2022-22074 | 7.8 | Sep 16 | Memory Corruption during wma file playback due to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial… Affected: All versions, or not specified |
| CVE-2022-22085 | 7.8 | Jun 14 | Memory corruption in video due to buffer overflow while reading the dts file in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2022-22084 | 7.8 | Jun 14 | Memory corruption when extracting qcp audio file due to lack of check on data length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2022-22082 | 7.8 | Jun 14 | Memory corruption due to possible buffer overflow while parsing DSF header with corrupted channel count in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2022-22072 | 7.8 | Jun 14 | Buffer overflow can occur due to improper validation of NDP application information length in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity,… Affected: All versions, or not specified |
| CVE-2021-35072 | 7.8 | Jun 14 | Possible buffer overflow due to improper validation of array index while processing external DIAG command in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT,… Affected: All versions, or not specified |
| CVE-2021-35105 | 7.8 | Apr 1 | Possible out of bounds access due to improper input validation during graphics profiling in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2021-30333 | 7.8 | Apr 1 | Improper validation of buffer size input to the EFS file can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2021-30323 | 7.8 | Feb 11 | Improper validation of maximum size of data write to EFS file can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial… Affected: All versions, or not specified |
| CVE-2021-30318 | 7.8 | Feb 11 | Improper validation of input when provisioning the HDCP key can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2021-30319 | 7.8 | Jan 13 | Possible integer overflow due to improper validation of command length parameters while processing WMI command in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2021-30289 | 7.8 | Jan 3 | Possible buffer overflow due to lack of range check while processing a DIAG command for COEX management in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |