VYPR

Qca4024 Firmware

by Qualcomm

CVEs (274)

  • CVE-2023-33063HigKEVDec 5, 2023
    Qualcomm
    DSP Service
    risk 0.63cvss 7.8epss 0.01

    Memory corruption in DSP Services during a remote call from HLOS to DSP.

  • CVE-2023-28578CriMar 4, 2024
    Qualcomm
    Core services
    risk 0.60cvss 9.3epss 0.00

    Memory corruption in Core Services while executing the command for removing a single event listener.

  • CVE-2023-33032CriJan 2, 2024
    Qualcomm
    TZ Secure OS
    risk 0.60cvss 9.3epss 0.00

    Memory corruption in TZ Secure OS while requesting a memory allocation from TA region.

  • CVE-2023-33030CriJan 2, 2024
    Qualcomm
    HLOS
    risk 0.60cvss 9.3epss 0.00

    Memory corruption in HLOS while running playready use-case.

  • CVE-2021-30275CriJan 3, 2022
    Qualcomm
    Snapdragon
    risk 0.60cvss 9.3epss 0.00

    Possible integer overflow in page alignment interface due to lack of address and size validation before alignment in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wired…

  • CVE-2020-11301CriSep 8, 2021
    Qualcomm
    Snapdragon
    risk 0.60cvss 9.1epss 0.11

    Improper authentication of un-encrypted plaintext Wi-Fi frames in an encrypted network can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial…

  • CVE-2022-25718CriOct 19, 2022
    Qualcomm
    Snapdragon
    risk 0.59cvss 9.1epss 0.00

    Cryptographic issue in WLAN due to improper check on return value while authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile,…

  • CVE-2022-25652CriSep 16, 2022
    Qualcomm
    Snapdragon Wired Infrastructure and Networking
    risk 0.59cvss 9.0epss 0.00

    Cryptographic issues in BSP due to improper hash verification in Snapdragon Wired Infrastructure and Networking

  • CVE-2021-1924CriNov 12, 2021
    Qualcomm
    Snapdragon
    risk 0.59cvss 9.0epss 0.00

    Information disclosure through timing and power side-channels during mod exponentiation for RSA-CRT in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT,…

  • CVE-2020-11159CriJun 9, 2021
    Qualcomm
    Snapdragon
    risk 0.59cvss 9.1epss 0.01

    Buffer over-read can happen while processing WPA,RSN IE of beacon and response frames if IE length is less than length of frame pointer being accessed in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon…

  • CVE-2020-11126CriJun 9, 2021
    Qualcomm
    Snapdragon
    risk 0.59cvss 9.1epss 0.01

    Possible out of bound read while WLAN frame parsing due to lack of check for body and header length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon…

  • CVE-2020-11276CriFeb 22, 2021
    Qualcomm
    Snapdragon
    risk 0.59cvss 9.1epss 0.01

    Possible buffer over read while processing P2P IE and NOA attribute of beacon and probe response frames due to improper validation of P2P IE and NOA attribute lengths in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity,…

  • CVE-2020-11275CriFeb 22, 2021
    Qualcomm
    Snapdragon
    risk 0.59cvss 9.1epss 0.01

    Possible buffer over-read while parsing quiet IE in Rx beacon frame due to improper check of IE length in received beacon in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial…

  • CVE-2025-27074HigNov 4, 2025
    Qualcomm
    GP command response
    risk 0.57cvss 8.8epss 0.00

    Memory corruption while processing a GP command response.

  • CVE-2020-11259HigJun 9, 2021
    Qualcomm
    Snapdragon Wired Infrastructure and Networking
    risk 0.57cvss 8.8epss 0.00

    Memory corruption due to lack of validation of pointer arguments passed to Trustzone BSP in Snapdragon Wired Infrastructure and Networking

  • CVE-2020-11258HigJun 9, 2021
    Qualcomm
    Snapdragon Wired Infrastructure and Networking
    risk 0.57cvss 8.8epss 0.00

    Memory corruption due to lack of validation of pointer arguments passed to Trustzone BSP in Snapdragon Wired Infrastructure and Networking

  • CVE-2020-11257HigJun 9, 2021
    Qualcomm
    Snapdragon Wired Infrastructure and Networking
    risk 0.57cvss 8.8epss 0.00

    Memory corruption due to lack of validation of pointer arguments passed to TrustZone BSP in Snapdragon Wired Infrastructure and Networking

  • CVE-2020-11256HigJun 9, 2021
    Qualcomm
    Snapdragon Wired Infrastructure and Networking
    risk 0.57cvss 8.8epss 0.00

    Memory corruption due to lack of check of validation of pointer to buffer passed to trustzone in Snapdragon Wired Infrastructure and Networking

  • CVE-2020-11269HigFeb 22, 2021
    Qualcomm
    Snapdragon
    risk 0.57cvss 8.8epss 0.00

    Possible memory corruption while processing EAPOL frames due to lack of validation of key length before using it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…

  • CVE-2024-33056HigDec 2, 2024
    Qualcomm
    SMEM partition
    risk 0.55cvss 8.4epss 0.00

    Memory corruption when allocating and accessing an entry in an SMEM partition continuously.

Page 2 of 14