Qca6574 Firmware

CVEs (716)

CVE	Vendor / Product	Sev	Risk	CVSS	Published	Description
CVE-2023-21649	Qualcomm WLAN	Med	0.44	6.7	Aug 8, 2023	Memory corruption in WLAN while running doDriverCmd for an unspecific command.
CVE-2023-21633	Qualcomm Linux	Med	0.44	6.7	Jul 4, 2023	Memory Corruption in Linux while processing QcRilRequestImsRegisterMultiIdentityMessage request.
CVE-2022-33230	Qualcomm FM Host	Med	0.44	6.7	Jun 6, 2023	Memory corruption in FM Host due to buffer copy without checking the size of input in FM Host
CVE-2022-33302	Qualcomm User Identity Module	Med	0.44	6.8	Apr 13, 2023	Memory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than command length.
CVE-2022-33289	Qualcomm Modem	Med	0.44	6.8	Apr 13, 2023	Memory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card.
CVE-2022-33245	Qualcomm WLAN	Med	0.44	6.7	Mar 10, 2023	Memory corruption in WLAN due to use after free
CVE-2022-40519	Qualcomm Core	Med	0.44	6.8	Jan 9, 2023	Information disclosure due to buffer overread in Core
CVE-2022-40518	Qualcomm Core	Med	0.44	6.8	Jan 9, 2023	Information disclosure due to buffer overread in Core
CVE-2022-25676	Qualcomm Snapdragon	Med	0.44	6.8	Nov 15, 2022	Information disclosure in video due to buffer over-read while parsing avi files in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVE-2022-25666	Qualcomm Snapdragon	Med	0.44	6.7	Oct 19, 2022	Memory corruption due to use after free in service while trying to access maps by different threads in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
CVE-2022-25665	Qualcomm Snapdragon	Med	0.44	6.8	Oct 19, 2022	Information disclosure due to buffer over read in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile
CVE-2021-35120	Qualcomm Snapdragon Compute	Med	0.44	6.7	Jun 14, 2022	Improper handling between export and release functions on the same handle from client can lead to use after free in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2021-35118	Qualcomm Snapdragon	Med	0.44	6.7	Jun 14, 2022	An out-of-bounds write can occur due to an incorrect input check in the camera driver in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-30325	Qualcomm Snapdragon	Med	0.44	6.7	Feb 11, 2022	Possible out of bound access of DCI resources due to lack of validation process and resource allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired…
CVE-2021-30324	Qualcomm Snapdragon	Med	0.44	6.7	Feb 11, 2022	Possible out of bound write due to lack of boundary check for the maximum size of buffer when sending a DCI packet to remote process in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,…
CVE-2021-30313	Qualcomm Snapdragon	Med	0.44	6.7	Jan 13, 2022	Use after free condition can occur in wired connectivity due to a race condition while creating and deleting folders in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,…
CVE-2021-30266	Qualcomm Snapdragon	Med	0.44	6.7	Nov 12, 2021	Possible use after free due to improper memory validation when initializing new interface via Interface add command in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,…
CVE-2021-30265	Qualcomm Snapdragon	Med	0.44	6.7	Nov 12, 2021	Possible memory corruption due to improper validation of memory address while processing user-space IOCTL for clearing Filter and Route statistics in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon…
CVE-2021-30264	Qualcomm Snapdragon	Med	0.44	6.7	Nov 12, 2021	Possible use after free due improper validation of reference from call back to internal store table in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon…
CVE-2021-1966	Qualcomm Snapdragon	Med	0.44	6.7	Oct 20, 2021	Possible buffer overflow due to lack of length check of source and destination buffer before copying in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

CVE-2023-21649MedAug 8, 2023
Qualcomm
WLAN
risk 0.44cvss 6.7epss 0.00
Memory corruption in WLAN while running doDriverCmd for an unspecific command.
CVE-2023-21633MedJul 4, 2023
Qualcomm
Linux
risk 0.44cvss 6.7epss 0.00
Memory Corruption in Linux while processing QcRilRequestImsRegisterMultiIdentityMessage request.
CVE-2022-33230MedJun 6, 2023
Qualcomm
FM Host
risk 0.44cvss 6.7epss 0.00
Memory corruption in FM Host due to buffer copy without checking the size of input in FM Host
CVE-2022-33302MedApr 13, 2023
Qualcomm
User Identity Module
risk 0.44cvss 6.8epss 0.00
Memory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than command length.
CVE-2022-33289MedApr 13, 2023
Qualcomm
Modem
risk 0.44cvss 6.8epss 0.00
Memory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card.
CVE-2022-33245MedMar 10, 2023
Qualcomm
WLAN
risk 0.44cvss 6.7epss 0.00
Memory corruption in WLAN due to use after free
CVE-2022-40519MedJan 9, 2023
Qualcomm
Core
risk 0.44cvss 6.8epss 0.00
Information disclosure due to buffer overread in Core
CVE-2022-40518MedJan 9, 2023
Qualcomm
Core
risk 0.44cvss 6.8epss 0.00
Information disclosure due to buffer overread in Core
CVE-2022-25676MedNov 15, 2022
Qualcomm
Snapdragon
risk 0.44cvss 6.8epss 0.00
Information disclosure in video due to buffer over-read while parsing avi files in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVE-2022-25666MedOct 19, 2022
Qualcomm
Snapdragon
risk 0.44cvss 6.7epss 0.00
Memory corruption due to use after free in service while trying to access maps by different threads in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
CVE-2022-25665MedOct 19, 2022
Qualcomm
Snapdragon
risk 0.44cvss 6.8epss 0.00
Information disclosure due to buffer over read in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile
CVE-2021-35120MedJun 14, 2022
Qualcomm
Snapdragon Compute
risk 0.44cvss 6.7epss 0.00
Improper handling between export and release functions on the same handle from client can lead to use after free in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2021-35118MedJun 14, 2022
Qualcomm
Snapdragon
risk 0.44cvss 6.7epss 0.00
An out-of-bounds write can occur due to an incorrect input check in the camera driver in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-30325MedFeb 11, 2022
Qualcomm
Snapdragon
risk 0.44cvss 6.7epss 0.00
Possible out of bound access of DCI resources due to lack of validation process and resource allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired…
CVE-2021-30324MedFeb 11, 2022
Qualcomm
Snapdragon
risk 0.44cvss 6.7epss 0.00
Possible out of bound write due to lack of boundary check for the maximum size of buffer when sending a DCI packet to remote process in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,…
CVE-2021-30313MedJan 13, 2022
Qualcomm
Snapdragon
risk 0.44cvss 6.7epss 0.00
Use after free condition can occur in wired connectivity due to a race condition while creating and deleting folders in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,…
CVE-2021-30266MedNov 12, 2021
Qualcomm
Snapdragon
risk 0.44cvss 6.7epss 0.00
Possible use after free due to improper memory validation when initializing new interface via Interface add command in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,…
CVE-2021-30265MedNov 12, 2021
Qualcomm
Snapdragon
risk 0.44cvss 6.7epss 0.00
Possible memory corruption due to improper validation of memory address while processing user-space IOCTL for clearing Filter and Route statistics in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon…
CVE-2021-30264MedNov 12, 2021
Qualcomm
Snapdragon
risk 0.44cvss 6.7epss 0.00
Possible use after free due improper validation of reference from call back to internal store table in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon…
CVE-2021-1966MedOct 20, 2021
Qualcomm
Snapdragon
risk 0.44cvss 6.7epss 0.00
Possible buffer overflow due to lack of length check of source and destination buffer before copying in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

Page 32 of 36