← Back

Qca6420 Firmware

qca6420_firmware

Vendor: Qualcomm • 581 CVEs

CVEs (581)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-22086
1Qualcomm
140Apq8009w Firmware
Apq8017 FirmwareApq8053 Firmware+137 more
Nov 21, 2024
Jun 14, 2022
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
Memory corruption in video due to double free while parsing 3gp clip with invalid meta data atoms in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapd...Show more
Memory corruption in video due to double free while parsing 3gp clip with invalid meta data atoms in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesShow less
CVE-2022-22085
1Qualcomm
155Apq8009 Firmware
Apq8009w FirmwareApq8017 Firmware+152 more
Nov 21, 2024
Jun 14, 2022
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
Memory corruption in video due to buffer overflow while reading the dts file in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdra...Show more
Memory corruption in video due to buffer overflow while reading the dts file in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesShow less
CVE-2022-22084
1Qualcomm
153Apq8009 Firmware
Apq8009w FirmwareApq8017 Firmware+150 more
Nov 21, 2024
Jun 14, 2022
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
Memory corruption when extracting qcp audio file due to lack of check on data length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,...Show more
Memory corruption when extracting qcp audio file due to lack of check on data length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesShow less
CVE-2022-22083
1Qualcomm
151Apq8009 Firmware
Apq8009w FirmwareApq8017 Firmware+148 more
Nov 21, 2024
Jun 14, 2022
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
Denial of service due to memory corruption while extracting ape header from clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Sn...Show more
Denial of service due to memory corruption while extracting ape header from clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesShow less
CVE-2022-22082
1Qualcomm
153Apq8009 Firmware
Apq8009w FirmwareApq8017 Firmware+150 more
Nov 21, 2024
Jun 14, 2022
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
Memory corruption due to possible buffer overflow while parsing DSF header with corrupted channel count in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,...Show more
Memory corruption due to possible buffer overflow while parsing DSF header with corrupted channel count in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesShow less
CVE-2022-22068
1Qualcomm
116Apq8053 Firmware
Aqt1000 FirmwareAr8031 Firmware+113 more
Nov 21, 2024
Jun 14, 2022
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
kernel event may contain unexpected content which is not generated by NPU software in asynchronous execution mode in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Indus...Show more
kernel event may contain unexpected content which is not generated by NPU software in asynchronous execution mode in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesShow less
CVE-2022-22065
1Qualcomm
167Apq8009 Firmware
Apq8009w FirmwareApq8017 Firmware+164 more
Nov 21, 2024
Jun 14, 2022
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
Out of bound read in WLAN HOST due to improper length check can lead to DOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdrag...Show more
Out of bound read in WLAN HOST due to improper length check can lead to DOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesShow less
CVE-2022-22064
1Qualcomm
162Apq8009 Firmware
Apq8009w FirmwareApq8017 Firmware+159 more
Nov 21, 2024
Jun 14, 2022
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
Possible buffer over read due to lack of size validation while unpacking frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapd...Show more
Possible buffer over read due to lack of size validation while unpacking frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesShow less
CVE-2021-35120
1Qualcomm
100Apq8053 Firmware
Aqt1000 FirmwareAr8031 Firmware+97 more
Nov 21, 2024
Jun 14, 2022
N/A· v4
6.7 MEDIUM· v3
4.6 MEDIUM· v2
Improper handling between export and release functions on the same handle from client can lead to use after free in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2021-35119
1Qualcomm
83Aqt1000 Firmware
Ar8035 FirmwareCsrb31024 Firmware+80 more
Nov 21, 2024
Jun 14, 2022
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
Potential out of Bounds read in FIPS event processing due to improper validation of the length from the firmware in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobi...Show more
Potential out of Bounds read in FIPS event processing due to improper validation of the length from the firmware in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon MobileShow less
CVE-2021-35118
1Qualcomm
100Apq8053 Firmware
Aqt1000 FirmwareAr8031 Firmware+97 more
Nov 21, 2024
Jun 14, 2022
N/A· v4
6.7 MEDIUM· v3
4.6 MEDIUM· v2
An out-of-bounds write can occur due to an incorrect input check in the camera driver in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile...Show more
An out-of-bounds write can occur due to an incorrect input check in the camera driver in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesShow less
CVE-2021-35116
1Qualcomm
113Apq8009 Firmware
Apq8009w FirmwareApq8096au Firmware+110 more
Nov 21, 2024
Jun 14, 2022
N/A· v4
7.1 HIGH· v3
6.6 MEDIUM· v2
APK can load a crafted model into the CDSP which can lead to a compromise of CDSP and other APK`s data executing there in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon...Show more
APK can load a crafted model into the CDSP which can lead to a compromise of CDSP and other APK`s data executing there in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon WearablesShow less
CVE-2021-35101
1Qualcomm
24Aqt1000 Firmware
Qca6390 FirmwareQca6391 Firmware+21 more
Nov 21, 2024
Jun 14, 2022
N/A· v4
6.5 MEDIUM· v3
4.9 MEDIUM· v2
Improper handling of writes to virtual GICR control can lead to assertion failure in the hypervisor in Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile
CVE-2021-35098
1Qualcomm
86Apq8053 Firmware
Apq8096au FirmwareAqt1000 Firmware+83 more
Nov 21, 2024
Jun 14, 2022
N/A· v4
6.7 MEDIUM· v3
4.6 MEDIUM· v2
Improper validation of session id in PCM routing process can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobil...Show more
Improper validation of session id in PCM routing process can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesShow less
CVE-2021-35094
1Qualcomm
81Aqt1000 Firmware
Qca6390 FirmwareQca6391 Firmware+78 more
Nov 21, 2024
Jun 14, 2022
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
Improper verification of timeout-based authentication in identity credential can lead to invalid authorization in HLOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdrago...Show more
Improper verification of timeout-based authentication in identity credential can lead to invalid authorization in HLOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon MobileShow less
CVE-2021-35092
1Qualcomm
83Apq8053 Firmware
Apq8096au FirmwareAqt1000 Firmware+80 more
Nov 21, 2024
Jun 14, 2022
N/A· v4
6.7 MEDIUM· v3
4.6 MEDIUM· v2
Processing DCB/AVB algorithm with an invalid queue index from IOCTL request could lead to arbitrary address modification in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdrago...Show more
Processing DCB/AVB algorithm with an invalid queue index from IOCTL request could lead to arbitrary address modification in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & MusicShow less
CVE-2021-35090
1Qualcomm
56Aqt1000 Firmware
Qca6390 FirmwareQca6391 Firmware+53 more
Nov 21, 2024
Jun 14, 2022
N/A· v4
7.8 HIGH· v3
6.9 MEDIUM· v2
Possible hypervisor memory corruption due to TOC TOU race condition when updating address mappings in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2021-35085
1Qualcomm
70Aqt1000 Firmware
Ar8035 FirmwareCsrb31024 Firmware+67 more
Nov 21, 2024
Jun 14, 2022
N/A· v4
7.1 HIGH· v3
3.6 LOW· v2
Possible buffer overflow due to lack of buffer length check during management frame Rx handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2021-35084
1Qualcomm
92Aqt1000 Firmware
Ar8031 FirmwareAr8035 Firmware+89 more
Nov 21, 2024
Jun 14, 2022
N/A· v4
7.1 HIGH· v3
3.6 LOW· v2
Possible out of bound read due to lack of length check of data length for a DIAG event in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IO...Show more
Possible out of bound read due to lack of length check of data length for a DIAG event in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & MusicShow less
CVE-2021-35083
1Qualcomm
174Apq8009 Firmware
Apq8009w FirmwareApq8017 Firmware+171 more
Nov 21, 2024
Jun 14, 2022
N/A· v4
9.1 CRITICAL· v3
9.4 HIGH· v2
Possible out of bound read due to improper validation of certificate chain in SSL or Internet key exchange in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Sn...Show more
Possible out of bound read due to improper validation of certificate chain in SSL or Internet key exchange in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesShow less