QF
Product
Qcn9024 Firmware
On CISA KEVExploited in the wild
163
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 12High 125Medium 26Low 0
Watch
Add Qcn9024 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-33106 In wildKEV | 7.8 | Dec 5 | Use of Out-of-range Pointer Offset in Graphics Affected: 0 |
| CVE-2025-27034 | 9.8 | Sep 24 | Improper Validation of Array Index in Multi-Mode Call Processor Affected: All versions, or not specified |
| CVE-2024-33066 | 9.8 | Oct 7 | Improper Input Validation in WLAN Resource Manager Affected: All versions, or not specified |
| CVE-2024-21480 | 9.8 | May 6 | Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Audio Affected: All versions, or not specified |
| CVE-2024-21463 | 9.8 | Apr 1 | Buffer Copy Without Checking Size of Input in Audio Affected: 0 |
| CVE-2023-28582 | 9.8 | Mar 4 | Buffer Copy Without Checking Size of Input in Data Modem Affected: 0 |
| CVE-2023-33025 | 9.8 | Jan 2 | Buffer Copy without Checking Size of Input in Data Modem Affected: All versions, or not specified |
| CVE-2023-24855 | 9.8 | Oct 3 | Use of Out-of-range Pointer Offset in Modem Affected: All versions, or not specified |
| CVE-2023-21631 | 9.8 | Jul 4 | Improper Input Validation in Modem Affected: All versions, or not specified |
| CVE-2022-33256 | 9.8 | Mar 7 | Improper validation of array index in Multi-mode call processor Affected: All versions, or not specified |
| CVE-2025-21450 | 9.1 | Jul 8 | Improper Authentication in GPS_GNSS Affected: All versions, or not specified |
| CVE-2023-33058 | 9.1 | Feb 6 | Buffer Copy Without Checking Size of Input in Modem Affected: All versions, or not specified |
| CVE-2023-33054 | 9.1 | Dec 5 | Improper Authentication in GPS HLOS Driver Affected: All versions, or not specified |
| CVE-2025-27060 | 8.8 | Oct 9 | Untrusted Pointer Dereference in TZ Firmware Affected: All versions, or not specified |
| CVE-2025-27059 | 8.8 | Oct 9 | Use of Out-of-range Pointer Offset in TZ Firmware Affected: All versions, or not specified |
| CVE-2023-43556 | 8.8 | Jun 3 | Buffer Copy Without Checking Size of Input in Hypervisor Affected: All versions, or not specified |
| CVE-2022-33288 | 8.8 | Apr 4 | Buffer copy without checking the size of input in Core Affected: All versions, or not specified |
| CVE-2022-33280 | 8.8 | Feb 9 | Access of uninitialized pointer in Bluetooth HOST Affected: All versions, or not specified |
| CVE-2024-23359 | 8.2 | Sep 2 | Buffer Over-read in Multi Mode Call Processor Affected: 0 |
| CVE-2025-59605 | 7.8 | Jun 1 | Out-of-bounds Write in HLOS Affected: All versions, or not specified |
| CVE-2025-47323 | 7.8 | Dec 18 | Integer Overflow or Wraparound in Audio Affected: All versions, or not specified |
| CVE-2025-47321 | 7.8 | Dec 18 | Buffer Copy Without Checking Size of Input in Core Services Affected: All versions, or not specified |
| CVE-2025-21468 | 7.8 | May 6 | Out-of-bounds Write in Computer Vision Affected: All versions, or not specified |
| CVE-2024-43057 | 7.8 | Mar 3 | Use After Free in MProc Affected: All versions, or not specified |
| CVE-2024-38415 | 7.8 | Nov 4 | Use After Free in Computer Vision Affected: 0 |
| CVE-2024-38402 | 7.8 | Sep 2 | Use After Free in DSP Services Affected: 0 |
| CVE-2024-33045 | 7.8 | Sep 2 | Return of Stack Variable Address in Buses Affected: 0 |
| CVE-2024-33023 | 7.8 | Aug 5 | Use After Free in Graphics Linux Affected: 0 |
| CVE-2024-23356 | 7.8 | Aug 5 | Improper Restriction of Operations within the Bounds of a Memory Buffer in HLOS Affected: 0 |
| CVE-2023-43542 | 7.8 | Jun 3 | Buffer Copy Without Checking Size of Input in Trusted Execution Environment Affected: 0 |
| CVE-2024-21471 | 7.8 | May 6 | Use After Free in Graphics Linux Affected: 0 |
| CVE-2023-33076 | 7.8 | Feb 6 | Configuration Issue in Core Affected: All versions, or not specified |
| CVE-2023-33113 | 7.8 | Jan 2 | Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Kernel Affected: All versions, or not specified |
| CVE-2023-33094 | 7.8 | Jan 2 | Use After Free in Linux Graphics Affected: All versions, or not specified |
| CVE-2023-33085 | 7.8 | Jan 2 | Buffer Copy Without Checking Size of Input (Classic Buffer Overflow) in Wearables Affected: All versions, or not specified |
| CVE-2023-33038 | 7.8 | Jan 2 | Integer Overflow or Wraparound in Radio Interface Layer Affected: All versions, or not specified |
| CVE-2023-33032 | 7.8 | Jan 2 | Integer Overflow or Wraparound in TZ Secure OS Affected: All versions, or not specified |
| CVE-2023-33022 | 7.8 | Dec 5 | Integer Overflow to Buffer Overflow in HLOS Affected: All versions, or not specified |
| CVE-2023-28587 | 7.8 | Dec 5 | Improper Restriction of Operations within the Bounds of a Memory Buffer in BT Controller Affected: All versions, or not specified |
| CVE-2023-28574 | 7.8 | Nov 7 | Improper Input Validation in Core Affected: All versions, or not specified |
| CVE-2023-28556 | 7.8 | Nov 7 | Improper Authorization in HLOS Affected: All versions, or not specified |
| CVE-2023-28545 | 7.8 | Nov 7 | Improper Restriction of Operations within the Bounds of a Memory Buffer in TZ Secure OS Affected: All versions, or not specified |
| CVE-2023-33029 | 7.8 | Oct 3 | Use After Free in DSP Service Affected: All versions, or not specified |
| CVE-2023-24850 | 7.8 | Oct 3 | Improper Validation of Array Index in HLOS Affected: All versions, or not specified |
| CVE-2023-24844 | 7.8 | Oct 3 | Improper Access Control in Core Affected: All versions, or not specified |
| CVE-2023-33021 | 7.8 | Sep 5 | Use After Free in Graphics Affected: All versions, or not specified |
| CVE-2023-21664 | 7.8 | Sep 5 | Buffer Copy without Checking the Size of Input(Classic Buffer Overflow) in Core Platform Affected: All versions, or not specified |
| CVE-2023-21662 | 7.8 | Sep 5 | Buffer Copy without Checking the Size of Input(Classic Buffer Overflow) in Core Platform Affected: All versions, or not specified |
| CVE-2023-21651 | 7.8 | Aug 8 | Incorrect Type Conversion or Cast in Core Affected: 0 |
| CVE-2023-28542 | 7.8 | Jul 4 | Buffer Over-read in WLAN HOST Affected: 0 |
