Qca4024 Firmware

CVEs (274)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2023-43549	Qualcomm FTM TPC	Hig	0.55	8.4	0.00	Mar 4, 2024	Memory corruption while processing TPC target power table in FTM TPC.
CVE-2023-33088	Qualcomm vdev	Hig	0.55	8.4	0.00	Dec 5, 2023	Memory corruption when processing cmd parameters while parsing vdev.
CVE-2023-33053	Qualcomm kernel	Hig	0.55	8.4	0.00	Dec 5, 2023	Memory corruption in Kernel while parsing metadata.
CVE-2023-24852	Qualcomm Core	Hig	0.55	8.4	0.00	Nov 7, 2023	Memory Corruption in Core due to secure memory access by user while loading modem image.
CVE-2022-33275	Qualcomm WLAN HAL	Hig	0.55	8.4	0.00	Sep 5, 2023	Memory corruption due to improper validation of array index in WLAN HAL when received lm_itemNum is out of range.
CVE-2023-28537	Qualcomm Audio	Hig	0.55	8.4	0.00	Aug 8, 2023	Memory corruption while allocating memory in COmxApeDec module in Audio.
CVE-2023-21628	Qualcomm WLAN HAL	Hig	0.55	8.4	0.00	Jun 6, 2023	Memory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command.
CVE-2022-40522	Linux Linux Networking	Hig	0.55	8.4	0.00	Jun 6, 2023	Memory corruption in Linux Networking due to double free while handling a hyp-assign.
CVE-2022-40532	Qualcomm WLAN	Hig	0.55	8.4	0.00	Apr 13, 2023	Memory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target.
CVE-2022-40531	Qualcomm WLAN	Hig	0.55	8.4	0.00	Mar 10, 2023	Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message.
CVE-2022-40530	Qualcomm WLAN	Hig	0.55	8.4	0.00	Mar 10, 2023	Memory corruption in WLAN due to integer overflow to buffer overflow in WLAN during initialization phase.
CVE-2022-25655	Qualcomm WLAN HAL	Hig	0.55	8.4	0.00	Mar 10, 2023	Memory corruption in WLAN HAL while arbitrary value is passed in WMI UTF command payload.
CVE-2022-33277	Qualcomm Modem	Hig	0.55	8.4	0.00	Feb 12, 2023	Memory corruption in modem due to buffer copy without checking size of input while receiving WMI command.
CVE-2022-33243	Qualcomm IPC	Hig	0.55	8.4	0.00	Feb 12, 2023	Memory corruption due to improper access control in Qualcomm IPC.
CVE-2022-40517	Qualcomm Core	Hig	0.55	8.4	0.00	Jan 9, 2023	Memory corruption in core due to stack-based buffer overflow
CVE-2022-40516	Qualcomm Core	Hig	0.55	8.4	0.01	Jan 9, 2023	Memory corruption in Core due to stack-based buffer overflow.
CVE-2022-33276	Qualcomm Modem	Hig	0.55	8.4	0.00	Jan 9, 2023	Memory corruption due to buffer copy without checking size of input in modem while receiving WMI_REQUEST_STATS_CMDID command.
CVE-2021-30281	Qualcomm Snapdragon	Hig	0.55	8.4	0.00	Jun 14, 2022	Possible unauthorized access to secure space due to improper check of data allowed while flashing the no access control device configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice &…
CVE-2021-30337	Qualcomm Snapdragon	Hig	0.55	8.4	0.00	Jan 3, 2022	Possible use after free when process shell memory is freed using IOCTL call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,…
CVE-2021-30335	Qualcomm Snapdragon	Hig	0.55	8.4	0.00	Jan 3, 2022	Possible assertion in QOS request due to improper validation when multiple add or update request are received simultaneously in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice &…

CVE-2023-43549HigMar 4, 2024
Qualcomm
FTM TPC
risk 0.55cvss 8.4epss 0.00
Memory corruption while processing TPC target power table in FTM TPC.
CVE-2023-33088HigDec 5, 2023
Qualcomm
vdev
risk 0.55cvss 8.4epss 0.00
Memory corruption when processing cmd parameters while parsing vdev.
CVE-2023-33053HigDec 5, 2023
Qualcomm
kernel
risk 0.55cvss 8.4epss 0.00
Memory corruption in Kernel while parsing metadata.
CVE-2023-24852HigNov 7, 2023
Qualcomm
Core
risk 0.55cvss 8.4epss 0.00
Memory Corruption in Core due to secure memory access by user while loading modem image.
CVE-2022-33275HigSep 5, 2023
Qualcomm
WLAN HAL
risk 0.55cvss 8.4epss 0.00
Memory corruption due to improper validation of array index in WLAN HAL when received lm_itemNum is out of range.
CVE-2023-28537HigAug 8, 2023
Qualcomm
Audio
risk 0.55cvss 8.4epss 0.00
Memory corruption while allocating memory in COmxApeDec module in Audio.
CVE-2023-21628HigJun 6, 2023
Qualcomm
WLAN HAL
risk 0.55cvss 8.4epss 0.00
Memory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command.
CVE-2022-40522HigJun 6, 2023
Linux
Linux Networking
risk 0.55cvss 8.4epss 0.00
Memory corruption in Linux Networking due to double free while handling a hyp-assign.
CVE-2022-40532HigApr 13, 2023
Qualcomm
WLAN
risk 0.55cvss 8.4epss 0.00
Memory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target.
CVE-2022-40531HigMar 10, 2023
Qualcomm
WLAN
risk 0.55cvss 8.4epss 0.00
Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message.
CVE-2022-40530HigMar 10, 2023
Qualcomm
WLAN
risk 0.55cvss 8.4epss 0.00
Memory corruption in WLAN due to integer overflow to buffer overflow in WLAN during initialization phase.
CVE-2022-25655HigMar 10, 2023
Qualcomm
WLAN HAL
risk 0.55cvss 8.4epss 0.00
Memory corruption in WLAN HAL while arbitrary value is passed in WMI UTF command payload.
CVE-2022-33277HigFeb 12, 2023
Qualcomm
Modem
risk 0.55cvss 8.4epss 0.00
Memory corruption in modem due to buffer copy without checking size of input while receiving WMI command.
CVE-2022-33243HigFeb 12, 2023
Qualcomm
IPC
risk 0.55cvss 8.4epss 0.00
Memory corruption due to improper access control in Qualcomm IPC.
CVE-2022-40517HigJan 9, 2023
Qualcomm
Core
risk 0.55cvss 8.4epss 0.00
Memory corruption in core due to stack-based buffer overflow
CVE-2022-40516HigJan 9, 2023
Qualcomm
Core
risk 0.55cvss 8.4epss 0.01
Memory corruption in Core due to stack-based buffer overflow.
CVE-2022-33276HigJan 9, 2023
Qualcomm
Modem
risk 0.55cvss 8.4epss 0.00
Memory corruption due to buffer copy without checking size of input in modem while receiving WMI_REQUEST_STATS_CMDID command.
CVE-2021-30281HigJun 14, 2022
Qualcomm
Snapdragon
risk 0.55cvss 8.4epss 0.00
Possible unauthorized access to secure space due to improper check of data allowed while flashing the no access control device configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice &…
CVE-2021-30337HigJan 3, 2022
Qualcomm
Snapdragon
risk 0.55cvss 8.4epss 0.00
Possible use after free when process shell memory is freed using IOCTL call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,…
CVE-2021-30335HigJan 3, 2022
Qualcomm
Snapdragon
risk 0.55cvss 8.4epss 0.00
Possible assertion in QOS request due to improper validation when multiple add or update request are received simultaneously in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice &…

Page 3 of 14