QF
Product
Qcn9012 Firmware
On CISA KEVExploited in the wild
129
CVEs
2
On KEV
9.8
Max CVSS
2
New 30D
Severity mix
Critical 3High 106Medium 20Low 0
Watch
Add Qcn9012 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-43547 | 7.8 | Mar 4 | Use After Free in Automotive Multimedia Affected: 0 |
| CVE-2023-43546 | 7.8 | Mar 4 | Use After Free in Automotive Multimedia Affected: 0 |
| CVE-2023-33118 | 7.8 | Jan 2 | Use After Free in Automotive Audio Affected: All versions, or not specified |
| CVE-2023-33117 | 7.8 | Jan 2 | Use After Free in Audio Affected: All versions, or not specified |
| CVE-2023-33114 | 7.8 | Jan 2 | Use after free in Neural Processing Unit Affected: All versions, or not specified |
| CVE-2023-33113 | 7.8 | Jan 2 | Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Kernel Affected: All versions, or not specified |
| CVE-2023-33094 | 7.8 | Jan 2 | Use After Free in Linux Graphics Affected: All versions, or not specified |
| CVE-2023-33085 | 7.8 | Jan 2 | Buffer Copy Without Checking Size of Input (Classic Buffer Overflow) in Wearables Affected: All versions, or not specified |
| CVE-2023-33087 | 7.8 | Dec 5 | Buffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in Core Affected: All versions, or not specified |
| CVE-2023-33079 | 7.8 | Dec 5 | Use of Out-of-range Pointer Offset in Audio Affected: All versions, or not specified |
| CVE-2023-33055 | 7.8 | Nov 7 | Buffer Copy Without Checking Size of Input in Audio Affected: All versions, or not specified |
| CVE-2023-33031 | 7.8 | Nov 7 | Buffer Copy Without Checking Size of Input in Automotive Audio Affected: All versions, or not specified |
| CVE-2023-28556 | 7.8 | Nov 7 | Improper Authorization in HLOS Affected: All versions, or not specified |
| CVE-2023-28545 | 7.8 | Nov 7 | Improper Restriction of Operations within the Bounds of a Memory Buffer in TZ Secure OS Affected: All versions, or not specified |
| CVE-2023-33035 | 7.8 | Oct 3 | Buffer Copy Without Checking Size of Input in Audio Affected: All versions, or not specified |
| CVE-2023-33034 | 7.8 | Oct 3 | Signed-to-unsigned conversion error in Audio Affected: All versions, or not specified |
| CVE-2023-33029 | 7.8 | Oct 3 | Use After Free in DSP Service Affected: All versions, or not specified |
| CVE-2023-21673 | 7.8 | Oct 3 | Improper Access Control in Kernel Affected: All versions, or not specified |
| CVE-2023-33021 | 7.8 | Sep 5 | Use After Free in Graphics Affected: All versions, or not specified |
| CVE-2023-28538 | 7.8 | Sep 5 | Stack-based Buffer Overflow in WIN Product Affected: All versions, or not specified |
| CVE-2023-21664 | 7.8 | Sep 5 | Buffer Copy without Checking the Size of Input(Classic Buffer Overflow) in Core Platform Affected: All versions, or not specified |
| CVE-2023-21662 | 7.8 | Sep 5 | Buffer Copy without Checking the Size of Input(Classic Buffer Overflow) in Core Platform Affected: All versions, or not specified |
| CVE-2023-28537 | 7.8 | Aug 8 | Integer Overflow or Wraparound in Audio Affected: All versions, or not specified |
| CVE-2023-22666 | 7.8 | Aug 8 | Integer Overflow or Wraparound in Audio Affected: All versions, or not specified |
| CVE-2023-21651 | 7.8 | Aug 8 | Incorrect Type Conversion or Cast in Core Affected: 0 |
| CVE-2023-28542 | 7.8 | Jul 4 | Buffer Over-read in WLAN HOST Affected: 0 |
| CVE-2023-22667 | 7.8 | Jul 4 | Integer Overflow or Wraparound in Audio Affected: All versions, or not specified |
| CVE-2023-21670 | 7.8 | Jun 6 | Improper Access control in GPU Subsystem Affected: All versions, or not specified |
| CVE-2023-21657 | 7.8 | Jun 6 | Improper Input Validation in Audio Affected: 0 |
| CVE-2022-40529 | 7.8 | Jun 6 | Improper access control in Kernel Affected: All versions, or not specified |
| CVE-2023-21666 | 7.8 | May 2 | Improper Release of Memory Before Removing Last Reference (`Memory Leak`) in Graphics Affected: All versions, or not specified |
| CVE-2022-33231 | 7.8 | Apr 4 | Double free in Core Affected: All versions, or not specified |
| CVE-2022-33242 | 7.8 | Mar 7 | Improper authentication in Qualcomm IPC Affected: 0 |
| CVE-2022-33232 | 7.8 | Feb 9 | Buffer copy without checking size of input in Hypervisor Affected: 0 |
| CVE-2022-40520 | 7.8 | Jan 6 | Stack based buffer overflow in Core Affected: All versions, or not specified |
| CVE-2022-33300 | 7.8 | Jan 6 | Improper input validation in Automotive Android OS Affected: All versions, or not specified |
| CVE-2022-25746 | 7.8 | Jan 6 | Buffer Copy Without Checking Size of Input in Kernel Affected: All versions, or not specified |
| CVE-2022-25681 | 7.8 | Dec 13 | Possible memory corruption in kernel while performing memory access due to hypervisor not correctly invalidated the processor translation caches in Snapdragon Auto, Snapdragon… Affected: All versions, or not specified |
| CVE-2022-25661 | 7.8 | Oct 12 | Memory corruption due to untrusted pointer dereference in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile Affected: All versions, or not specified |
| CVE-2022-25652 | 7.8 | Sep 16 | Cryptographic issues in BSP due to improper hash verification in Snapdragon Wired Infrastructure and Networking Affected: All versions, or not specified |
| CVE-2021-35129 | 7.8 | Jun 14 | Memory corruption in BT controller due to improper length check while processing vendor specific commands in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2021-30334 | 7.8 | Jun 14 | Possible use after free due to lack of null check of DRM file status after file structure is freed in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30281 | 7.8 | Jun 14 | Possible unauthorized access to secure space due to improper check of data allowed while flashing the no access control device configuration in Snapdragon Auto, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-35105 | 7.8 | Apr 1 | Possible out of bounds access due to improper input validation during graphics profiling in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2021-30318 | 7.8 | Feb 11 | Improper validation of input when provisioning the HDCP key can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2026-21381 | 7.5 | Apr 6 | Buffer Over-read in WLAN Firmware Affected: All versions, or not specified |
| CVE-2025-47328 | 7.5 | Sep 24 | Buffer Over-read in WLAN HAL Affected: All versions, or not specified |
| CVE-2025-47318 | 7.5 | Sep 24 | Buffer Over-read in BT Controller Affected: All versions, or not specified |
| CVE-2025-27066 | 7.5 | Aug 6 | Reachable Assertion in WLAN Firmware Affected: All versions, or not specified |
| CVE-2025-27029 | 7.5 | Jun 3 | Buffer Over-read in WLAN HAL Affected: All versions, or not specified |
