QF
Product
Qcn9000 Firmware
53
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 38Medium 14Low 0
Watch
Add Qcn9000 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-33066 | 9.8 | Oct 7 | Improper Input Validation in WLAN Resource Manager Affected: 0 |
| CVE-2025-27060 | 8.8 | Oct 9 | Untrusted Pointer Dereference in TZ Firmware Affected: All versions, or not specified |
| CVE-2025-27059 | 8.8 | Oct 9 | Use of Out-of-range Pointer Offset in TZ Firmware Affected: All versions, or not specified |
| CVE-2024-43057 | 7.8 | Mar 3 | Use After Free in MProc Affected: All versions, or not specified |
| CVE-2024-21482 | 7.8 | Jul 1 | Improper Restriction of Operations within the Bounds of a Memory Buffer in Linux Boot Loader Affected: 0 |
| CVE-2023-33032 | 7.8 | Jan 2 | Integer Overflow or Wraparound in TZ Secure OS Affected: All versions, or not specified |
| CVE-2023-21664 | 7.8 | Sep 5 | Buffer Copy without Checking the Size of Input(Classic Buffer Overflow) in Core Platform Affected: All versions, or not specified |
| CVE-2023-21662 | 7.8 | Sep 5 | Buffer Copy without Checking the Size of Input(Classic Buffer Overflow) in Core Platform Affected: All versions, or not specified |
| CVE-2023-24854 | 7.8 | Jul 4 | Stack-based Buffer Overflow in WLAN HOST Affected: All versions, or not specified |
| CVE-2022-40522 | 7.8 | Jun 6 | Double free in Linux Networking Affected: 0 |
| CVE-2022-25652 | 7.8 | Sep 16 | Cryptographic issues in BSP due to improper hash verification in Snapdragon Wired Infrastructure and Networking Affected: All versions, or not specified |
| CVE-2021-35129 | 7.8 | Jun 14 | Memory corruption in BT controller due to improper length check while processing vendor specific commands in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2021-30281 | 7.8 | Jun 14 | Possible unauthorized access to secure space due to improper check of data allowed while flashing the no access control device configuration in Snapdragon Auto, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1950 | 7.8 | Apr 1 | Improper cleaning of secure memory between authenticated users can lead to face authentication bypass in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30298 | 7.8 | Jan 3 | Possible out of bound access due to improper validation of item size and DIAG memory pools data while switching between USB and PCIE interface in Snapdragon Auto, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30282 | 7.8 | Jan 3 | Possible out of bound write in RAM partition table due to improper validation on number of partitions provided in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2021-30275 | 7.8 | Jan 3 | Possible integer overflow in page alignment interface due to lack of address and size validation before alignment in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2021-30274 | 7.8 | Jan 3 | Possible integer overflow in access control initialization interface due to lack and size and address validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2025-47328 | 7.5 | Sep 24 | Buffer Over-read in WLAN HAL Affected: All versions, or not specified |
| CVE-2025-47318 | 7.5 | Sep 24 | Buffer Over-read in BT Controller Affected: All versions, or not specified |
| CVE-2025-27066 | 7.5 | Aug 6 | Reachable Assertion in WLAN Firmware Affected: All versions, or not specified |
| CVE-2025-27029 | 7.5 | Jun 3 | Buffer Over-read in WLAN HAL Affected: All versions, or not specified |
| CVE-2024-33063 | 7.5 | Dec 2 | Integer Overflow or Wraparound in WLAN Host Communication Affected: 0 |
| CVE-2024-38397 | 7.5 | Oct 7 | Buffer Over-read in WLAN Host Communication Affected: 0 |
| CVE-2024-33049 | 7.5 | Oct 7 | Buffer Over-read in WLAN Host Communication Affected: All versions, or not specified |
| CVE-2024-23364 | 7.5 | Sep 2 | Buffer Over-read in WLAN Firmware Affected: All versions, or not specified |
| CVE-2024-21467 | 7.5 | Aug 5 | Buffer Over-read in WLAN Host Communication Affected: All versions, or not specified |
| CVE-2024-21466 | 7.5 | Jul 1 | Integer Underflow (Wrap or Wraparound) in WLAN Host Communication Affected: 0 |
| CVE-2023-33016 | 7.5 | Sep 5 | Buffer Over-read in WLAN Firmware Affected: All versions, or not specified |
| CVE-2023-21660 | 7.5 | Jun 6 | Buffer Over-read in WLAN Firmware Affected: All versions, or not specified |
| CVE-2022-40535 | 7.5 | Mar 7 | Buffer Over-read in WLAN Affected: All versions, or not specified |
| CVE-2022-40527 | 7.5 | Mar 7 | Reachable Assertion in WLAN Embedded SW Affected: All versions, or not specified |
| CVE-2022-33309 | 7.5 | Mar 7 | Buiffer over-read in WLAN Firmware. Affected: All versions, or not specified |
| CVE-2022-40513 | 7.5 | Feb 9 | Uncontrolled resource consumption in WLAN Firmware. Affected: All versions, or not specified |
| CVE-2022-40502 | 7.5 | Feb 9 | Improper input validation in WLAN Host Affected: All versions, or not specified |
| CVE-2022-34146 | 7.5 | Feb 9 | Improper input validation in WLAN Host Affected: All versions, or not specified |
| CVE-2022-34145 | 7.5 | Feb 9 | Buffer over-read in WLAN Host Affected: All versions, or not specified |
| CVE-2022-33236 | 7.5 | Nov 15 | Transient DOS due to buffer over-read in WLAN firmware while parsing cipher suite info attributes Affected: All versions, or not specified |
| CVE-2022-25667 | 7.5 | Nov 15 | Information disclosure in kernel due to improper handling of ICMP requests in Snapdragon Wired Infrastructure and Networking Affected: All versions, or not specified |
| CVE-2024-33016 | 6.8 | Sep 2 | Improper Restriction of Operations within the Bounds of a Memory Buffer in Storage Affected: All versions, or not specified |
| CVE-2021-30349 | 6.7 | Jun 14 | Improper access control sequence for AC database after memory allocation can lead to possible memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2025-27040 | 6.5 | Oct 9 | Improper Input Validation in TZ Firmware Affected: All versions, or not specified |
| CVE-2025-21465 | 6.5 | Aug 6 | Out-of-bounds Read in Core Affected: All versions, or not specified |
| CVE-2025-21464 | 6.5 | Aug 6 | Out-of-bounds Read in Core Affected: All versions, or not specified |
| CVE-2024-45556 | 6.5 | Apr 7 | Improper Access Control for Register Interface in TZ Firmware Affected: All versions, or not specified |
| CVE-2024-33068 | 6.5 | Nov 4 | Use After Free in WLAN Host Communication Affected: 0 |
| CVE-2021-1960 | 6.5 | Sep 9 | Improper handling of ASB-C broadcast packets with crafted opcode in LMP can lead to uncontrolled resource consumption in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2025-47331 | 6.1 | Jan 6 | Buffer Over-read in Video Affected: All versions, or not specified |
| CVE-2025-27064 | 6.1 | Nov 4 | Buffer Over-read in Core Services Affected: All versions, or not specified |
| CVE-2025-47325 | 5.5 | Dec 18 | Untrusted Pointer Dereference in TZ Firmware Affected: All versions, or not specified |
