Qca6431 Firmware

CVEs (274)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2023-28557	Qualcomm WLAN HAL	Hig	0.51	7.8	0.00	Sep 5, 2023	Memory corruption in WLAN HAL while processing command parameters from untrusted WMI payload.
CVE-2023-28549	Qualcomm WLAN HAL	Hig	0.51	7.8	0.00	Sep 5, 2023	Memory corruption in WLAN HAL while parsing Rx buffer in processing TLV payload.
CVE-2023-28548	Qualcomm WLAN HAL	Hig	0.51	7.8	0.00	Sep 5, 2023	Memory corruption in WLAN HAL while processing Tx/Rx commands from QDART.
CVE-2023-21664	Qualcomm Core Platform	Hig	0.51	7.8	0.00	Sep 5, 2023	Memory Corruption in Core Platform while printing the response buffer in log.
CVE-2023-21662	Qualcomm Core Platform	Hig	0.51	7.8	0.00	Sep 5, 2023	Memory corruption in Core Platform while printing the response buffer in log.
CVE-2023-28542	Qualcomm WLAN Host	Hig	0.51	7.8	0.00	Jul 4, 2023	Memory Corruption in WLAN HOST while fetching TX status information.
CVE-2023-28541	Qualcomm Data Modem	Hig	0.51	7.8	0.00	Jul 4, 2023	Memory Corruption in Data Modem while processing DMA buffer release event about CFR data.
CVE-2023-22386	Qualcomm WLAN Host	Hig	0.51	7.8	0.00	Jul 4, 2023	Memory Corruption in WLAN HOST while processing WLAN FW request to allocate memory.
CVE-2022-25713	Qualcomm Automotive	Hig	0.51	7.8	0.00	May 2, 2023	Memory corruption in Automotive due to Improper Restriction of Operations within the Bounds of a Memory Buffer while exporting a shared key.
CVE-2022-25660	Qualcomm Snapdragon	Hig	0.51	7.8	0.00	Oct 19, 2022	Memory corruption due to double free issue in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2021-35102	Qualcomm Snapdragon Compute	Hig	0.51	7.8	0.00	Jun 14, 2022	Possible buffer overflow due to lack of validation for the length of NAI string read from EFS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile
CVE-2021-30259	Qualcomm Snapdragon	Hig	0.51	7.8	0.00	Nov 12, 2021	Possible out of bound access due to improper validation of function table entries in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon…
CVE-2021-30255	Qualcomm Snapdragon	Hig	0.51	7.8	0.00	Nov 12, 2021	Possible buffer overflow due to improper input validation in PDM DIAG command in FTM in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon…
CVE-2021-1979	Qualcomm Snapdragon	Hig	0.51	7.8	0.00	Nov 12, 2021	Possible buffer overflow due to improper validation of FTM command payload in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2021-1921	Qualcomm Snapdragon	Hig	0.51	7.8	0.00	Nov 12, 2021	Possible memory corruption due to Improper handling of hypervisor unmap operations for concurrent memory operations in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2021-1959	Qualcomm Snapdragon	Hig	0.51	7.8	0.00	Oct 20, 2021	Possible memory corruption due to lack of bound check of input index in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-1952	Qualcomm Snapdragon	Hig	0.51	7.8	0.00	Sep 9, 2021	Possible buffer over read occurs due to lack of length check of request buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music
CVE-2020-11304	Qualcomm Snapdragon	Hig	0.51	7.8	0.00	Jun 9, 2021	Possible out of bound read in DRM due to improper buffer length check. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
CVE-2020-11298	Qualcomm Snapdragon	Hig	0.51	7.8	0.00	Jun 9, 2021	While waiting for a response to a callback or listener request, non-secure clients can change permissions to shared memory buffers used by HLOS Invoke Call to secure kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon…
CVE-2020-11292	Qualcomm Snapdragon	Hig	0.51	7.8	0.01	Jun 9, 2021	Possible buffer overflow in voice service due to lack of input validation of parameters in QMI Voice API in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice &…

CVE-2023-28557HigSep 5, 2023
Qualcomm
WLAN HAL
risk 0.51cvss 7.8epss 0.00
Memory corruption in WLAN HAL while processing command parameters from untrusted WMI payload.
CVE-2023-28549HigSep 5, 2023
Qualcomm
WLAN HAL
risk 0.51cvss 7.8epss 0.00
Memory corruption in WLAN HAL while parsing Rx buffer in processing TLV payload.
CVE-2023-28548HigSep 5, 2023
Qualcomm
WLAN HAL
risk 0.51cvss 7.8epss 0.00
Memory corruption in WLAN HAL while processing Tx/Rx commands from QDART.
CVE-2023-21664HigSep 5, 2023
Qualcomm
Core Platform
risk 0.51cvss 7.8epss 0.00
Memory Corruption in Core Platform while printing the response buffer in log.
CVE-2023-21662HigSep 5, 2023
Qualcomm
Core Platform
risk 0.51cvss 7.8epss 0.00
Memory corruption in Core Platform while printing the response buffer in log.
CVE-2023-28542HigJul 4, 2023
Qualcomm
WLAN Host
risk 0.51cvss 7.8epss 0.00
Memory Corruption in WLAN HOST while fetching TX status information.
CVE-2023-28541HigJul 4, 2023
Qualcomm
Data Modem
risk 0.51cvss 7.8epss 0.00
Memory Corruption in Data Modem while processing DMA buffer release event about CFR data.
CVE-2023-22386HigJul 4, 2023
Qualcomm
WLAN Host
risk 0.51cvss 7.8epss 0.00
Memory Corruption in WLAN HOST while processing WLAN FW request to allocate memory.
CVE-2022-25713HigMay 2, 2023
Qualcomm
Automotive
risk 0.51cvss 7.8epss 0.00
Memory corruption in Automotive due to Improper Restriction of Operations within the Bounds of a Memory Buffer while exporting a shared key.
CVE-2022-25660HigOct 19, 2022
Qualcomm
Snapdragon
risk 0.51cvss 7.8epss 0.00
Memory corruption due to double free issue in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2021-35102HigJun 14, 2022
Qualcomm
Snapdragon Compute
risk 0.51cvss 7.8epss 0.00
Possible buffer overflow due to lack of validation for the length of NAI string read from EFS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile
CVE-2021-30259HigNov 12, 2021
Qualcomm
Snapdragon
risk 0.51cvss 7.8epss 0.00
Possible out of bound access due to improper validation of function table entries in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon…
CVE-2021-30255HigNov 12, 2021
Qualcomm
Snapdragon
risk 0.51cvss 7.8epss 0.00
Possible buffer overflow due to improper input validation in PDM DIAG command in FTM in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon…
CVE-2021-1979HigNov 12, 2021
Qualcomm
Snapdragon
risk 0.51cvss 7.8epss 0.00
Possible buffer overflow due to improper validation of FTM command payload in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2021-1921HigNov 12, 2021
Qualcomm
Snapdragon
risk 0.51cvss 7.8epss 0.00
Possible memory corruption due to Improper handling of hypervisor unmap operations for concurrent memory operations in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2021-1959HigOct 20, 2021
Qualcomm
Snapdragon
risk 0.51cvss 7.8epss 0.00
Possible memory corruption due to lack of bound check of input index in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-1952HigSep 9, 2021
Qualcomm
Snapdragon
risk 0.51cvss 7.8epss 0.00
Possible buffer over read occurs due to lack of length check of request buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music
CVE-2020-11304HigJun 9, 2021
Qualcomm
Snapdragon
risk 0.51cvss 7.8epss 0.00
Possible out of bound read in DRM due to improper buffer length check. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
CVE-2020-11298HigJun 9, 2021
Qualcomm
Snapdragon
risk 0.51cvss 7.8epss 0.00
While waiting for a response to a callback or listener request, non-secure clients can change permissions to shared memory buffers used by HLOS Invoke Call to secure kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon…
CVE-2020-11292HigJun 9, 2021
Qualcomm
Snapdragon
risk 0.51cvss 7.8epss 0.01
Possible buffer overflow in voice service due to lack of input validation of parameters in QMI Voice API in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice &…

Page 7 of 14