Qca6428 Firmware

CVEs (104)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2022-40531	Qualcomm WLAN	Hig	0.55	8.4	0.00	Mar 10, 2023	Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message.
CVE-2022-25655	Qualcomm WLAN HAL	Hig	0.55	8.4	0.00	Mar 10, 2023	Memory corruption in WLAN HAL while arbitrary value is passed in WMI UTF command payload.
CVE-2022-33277	Qualcomm Modem	Hig	0.55	8.4	0.00	Feb 12, 2023	Memory corruption in modem due to buffer copy without checking size of input while receiving WMI command.
CVE-2021-30337	Qualcomm Snapdragon	Hig	0.55	8.4	0.00	Jan 3, 2022	Possible use after free when process shell memory is freed using IOCTL call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,…
CVE-2021-30335	Qualcomm Snapdragon	Hig	0.55	8.4	0.00	Jan 3, 2022	Possible assertion in QOS request due to improper validation when multiple add or update request are received simultaneously in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice &…
CVE-2021-30288	Qualcomm Snapdragon	Hig	0.55	8.4	0.00	Oct 20, 2021	Possible stack overflow due to improper length check of TLV while copying the TLV to a local stack variable in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…
CVE-2021-30260	Qualcomm Snapdragon	Hig	0.55	8.4	0.00	Sep 17, 2021	Possible Integer overflow to buffer overflow issue can occur due to improper validation of input parameters when extscan hostlist configuration command is received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity,…
CVE-2020-11267	Qualcomm Snapdragon	Hig	0.55	8.4	0.00	Jun 9, 2021	Stack out-of-bounds write occurs while setting up a cipher device if the provided IV length exceeds the max limit value in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice &…
CVE-2021-1927	Qualcomm Snapdragon	Hig	0.55	8.4	0.00	May 7, 2021	Possible use after free due to lack of null check while memory is being freed in FastRPC driver in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables,…
CVE-2021-1891	Qualcomm Snapdragon	Hig	0.55	8.4	0.00	May 7, 2021	A possible use-after-free occurrence in audio driver can happen when pointers are not properly handled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon…
CVE-2022-33235	Qualcomm WLAN Firmware	Hig	0.53	8.2	0.00	Dec 13, 2022	Information disclosure due to buffer over-read in WLAN firmware while parsing security context info attributes. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…
CVE-2021-35088	Qualcomm Snapdragon	Hig	0.53	8.2	0.01	Apr 1, 2022	Possible out of bound read due to improper validation of IE length during SSID IE parse when channel is DFS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon…
CVE-2025-47339	Qualcomm HDCP	Hig	0.51	7.8	0.00	Jan 7, 2026	Memory corruption while deinitializing a HDCP session.
CVE-2023-28567	Qualcomm WLAN HAL	Hig	0.51	7.8	0.00	Sep 5, 2023	Memory corruption in WLAN HAL while handling command through WMI interfaces.
CVE-2023-28565	Qualcomm WLAN HAL	Hig	0.51	7.8	0.00	Sep 5, 2023	Memory corruption in WLAN HAL while handling command streams through WMI interfaces.
CVE-2023-28564	Qualcomm WLAN HAL	Hig	0.51	7.8	0.00	Sep 5, 2023	Memory corruption in WLAN HAL while passing command parameters through WMI interfaces.
CVE-2023-28560	Qualcomm WLAN HAL	Hig	0.51	7.8	0.00	Sep 5, 2023	Memory corruption in WLAN HAL while processing devIndex from untrusted WMI payload.
CVE-2023-28559	Qualcomm WLAN FW	Hig	0.51	7.8	0.00	Sep 5, 2023	Memory corruption in WLAN FW while processing command parameters from untrusted WMI payload.
CVE-2023-28558	Qualcomm WLAN handler	Hig	0.51	7.8	0.00	Sep 5, 2023	Memory corruption in WLAN handler while processing PhyID in Tx status handler.
CVE-2023-28557	Qualcomm WLAN HAL	Hig	0.51	7.8	0.00	Sep 5, 2023	Memory corruption in WLAN HAL while processing command parameters from untrusted WMI payload.

CVE-2022-40531HigMar 10, 2023
Qualcomm
WLAN
risk 0.55cvss 8.4epss 0.00
Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message.
CVE-2022-25655HigMar 10, 2023
Qualcomm
WLAN HAL
risk 0.55cvss 8.4epss 0.00
Memory corruption in WLAN HAL while arbitrary value is passed in WMI UTF command payload.
CVE-2022-33277HigFeb 12, 2023
Qualcomm
Modem
risk 0.55cvss 8.4epss 0.00
Memory corruption in modem due to buffer copy without checking size of input while receiving WMI command.
CVE-2021-30337HigJan 3, 2022
Qualcomm
Snapdragon
risk 0.55cvss 8.4epss 0.00
Possible use after free when process shell memory is freed using IOCTL call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,…
CVE-2021-30335HigJan 3, 2022
Qualcomm
Snapdragon
risk 0.55cvss 8.4epss 0.00
Possible assertion in QOS request due to improper validation when multiple add or update request are received simultaneously in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice &…
CVE-2021-30288HigOct 20, 2021
Qualcomm
Snapdragon
risk 0.55cvss 8.4epss 0.00
Possible stack overflow due to improper length check of TLV while copying the TLV to a local stack variable in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…
CVE-2021-30260HigSep 17, 2021
Qualcomm
Snapdragon
risk 0.55cvss 8.4epss 0.00
Possible Integer overflow to buffer overflow issue can occur due to improper validation of input parameters when extscan hostlist configuration command is received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity,…
CVE-2020-11267HigJun 9, 2021
Qualcomm
Snapdragon
risk 0.55cvss 8.4epss 0.00
Stack out-of-bounds write occurs while setting up a cipher device if the provided IV length exceeds the max limit value in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice &…
CVE-2021-1927HigMay 7, 2021
Qualcomm
Snapdragon
risk 0.55cvss 8.4epss 0.00
Possible use after free due to lack of null check while memory is being freed in FastRPC driver in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables,…
CVE-2021-1891HigMay 7, 2021
Qualcomm
Snapdragon
risk 0.55cvss 8.4epss 0.00
A possible use-after-free occurrence in audio driver can happen when pointers are not properly handled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon…
CVE-2022-33235HigDec 13, 2022
Qualcomm
WLAN Firmware
risk 0.53cvss 8.2epss 0.00
Information disclosure due to buffer over-read in WLAN firmware while parsing security context info attributes. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…
CVE-2021-35088HigApr 1, 2022
Qualcomm
Snapdragon
risk 0.53cvss 8.2epss 0.01
Possible out of bound read due to improper validation of IE length during SSID IE parse when channel is DFS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon…
CVE-2025-47339HigJan 7, 2026
Qualcomm
HDCP
risk 0.51cvss 7.8epss 0.00
Memory corruption while deinitializing a HDCP session.
CVE-2023-28567HigSep 5, 2023
Qualcomm
WLAN HAL
risk 0.51cvss 7.8epss 0.00
Memory corruption in WLAN HAL while handling command through WMI interfaces.
CVE-2023-28565HigSep 5, 2023
Qualcomm
WLAN HAL
risk 0.51cvss 7.8epss 0.00
Memory corruption in WLAN HAL while handling command streams through WMI interfaces.
CVE-2023-28564HigSep 5, 2023
Qualcomm
WLAN HAL
risk 0.51cvss 7.8epss 0.00
Memory corruption in WLAN HAL while passing command parameters through WMI interfaces.
CVE-2023-28560HigSep 5, 2023
Qualcomm
WLAN HAL
risk 0.51cvss 7.8epss 0.00
Memory corruption in WLAN HAL while processing devIndex from untrusted WMI payload.
CVE-2023-28559HigSep 5, 2023
Qualcomm
WLAN FW
risk 0.51cvss 7.8epss 0.00
Memory corruption in WLAN FW while processing command parameters from untrusted WMI payload.
CVE-2023-28558HigSep 5, 2023
Qualcomm
WLAN handler
risk 0.51cvss 7.8epss 0.00
Memory corruption in WLAN handler while processing PhyID in Tx status handler.
CVE-2023-28557HigSep 5, 2023
Qualcomm
WLAN HAL
risk 0.51cvss 7.8epss 0.00
Memory corruption in WLAN HAL while processing command parameters from untrusted WMI payload.

Page 2 of 6