QF
Product
Qfw7114 Firmware
128
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 12High 94Medium 22Low 0
Watch
Add Qfw7114 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-24091 | 7.2 | Jun 1 | Improper Validation of Syntactic Correctness of Input in Display Affected: All versions, or not specified |
| CVE-2025-47383 | 7.2 | Mar 2 | Missing Cryptographic Step in Data Modem Affected: All versions, or not specified |
| CVE-2024-43065 | 7.1 | Apr 7 | Exposed Dangerous Method or Function in HLOS Affected: All versions, or not specified |
| CVE-2024-23362 | 7.1 | Sep 2 | Improper Input Validation in Trusted Execution Environment Affected: All versions, or not specified |
| CVE-2023-33065 | 7.1 | Feb 6 | Information disclosure in Audio while accessing AVCS services from ADSP payload Affected: All versions, or not specified |
| CVE-2023-33119 | 7.0 | May 6 | Time-of-check Time-of-use (TOCTOU) Race Condition in Hypervisor Affected: All versions, or not specified |
| CVE-2024-49848 | 6.7 | Apr 7 | Use After Free in DSP Service Affected: All versions, or not specified |
| CVE-2024-33031 | 6.7 | Nov 4 | Improper Input Validation in RIL Affected: 0 |
| CVE-2024-33030 | 6.7 | Nov 4 | Buffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in Performance Affected: 0 |
| CVE-2026-24078 | 6.5 | Aug 4 | Exposure of Private Personal Information to an Unauthorized Actor in Data Modem Affected: All versions, or not specified |
| CVE-2025-47371 | 6.5 | Mar 2 | Reachable Assertion in Modem Affected: All versions, or not specified |
| CVE-2024-43056 | 6.5 | Mar 3 | Buffer Over-read in Hypervisor Affected: All versions, or not specified |
| CVE-2024-38405 | 6.5 | Nov 4 | Buffer Over-read in WLAN Host Affected: 0 |
| CVE-2024-38403 | 6.5 | Nov 4 | Buffer Over-read in WLAN Firmware Affected: 0 |
| CVE-2024-33068 | 6.5 | Nov 4 | Use After Free in WLAN Host Communication Affected: 0 |
| CVE-2024-23385 | 6.5 | Nov 4 | Reachable Assertion in Modem Affected: 0 |
| CVE-2024-23350 | 6.5 | Aug 5 | Reachable Assertion in Multi Mode Call Processor Affected: 0 |
| CVE-2025-21457 | 6.1 | Aug 6 | Buffer Over-read in Automotive OS Platform Android Affected: All versions, or not specified |
| CVE-2025-27041 | 5.5 | Oct 9 | Buffer Over-read in Video Affected: All versions, or not specified |
| CVE-2024-38417 | 5.5 | Feb 3 | Buffer Over-read in Automotive Multimedia Affected: All versions, or not specified |
| CVE-2024-38416 | 5.5 | Feb 3 | Buffer Over-read in Audio Affected: All versions, or not specified |
| CVE-2024-33067 | 5.5 | Jan 6 | Buffer Over-read in Audio Affected: All versions, or not specified |
| CVE-2023-43528 | 5.5 | May 6 | Buffer Over-read in Audio Affected: All versions, or not specified |
| CVE-2023-33111 | 5.5 | Apr 1 | Improper Validation of Array Index in Audio Affected: All versions, or not specified |
| CVE-2023-33090 | 5.5 | Mar 4 | Buffer Over-read in Audio Affected: All versions, or not specified |
| CVE-2023-33064 | 5.5 | Feb 6 | Transient DOS in Audio when invoking callback function of ASM driver Affected: All versions, or not specified |
| CVE-2023-33060 | 5.5 | Feb 6 | Transient DOS in Core when DDR memory check is called while DDR is not initialized Affected: All versions, or not specified |
| CVE-2024-38426 | 5.3 | Mar 3 | Improper Authentication in Modem Affected: All versions, or not specified |
