Qca7520 Firmware

qca7520_firmware

Vendor: Qualcomm • 19 CVEs

CVEs (19)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-28565 1Qualcomm 2929205 Lte Firmware Apq8017 FirmwareApq8064au Firmware+289 more Nov 21, 2024 Sep 5, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in WLAN HAL while handling command streams through WMI interfaces.
CVE-2022-33265 1Qualcomm 3Qca7500 Firmware Qca7520 FirmwareQca7550 Firmware Apr 9, 2025 Jan 9, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Memory corruption due to information exposure in Powerline Communication Firmware while sending different MMEs from a single, unassociated device.
CVE-2021-30303 1Qualcomm 239Apq8009 Firmware Apq8017 FirmwareApq8064au Firmware+236 more Nov 21, 2024 Jan 3, 2022 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 Possible buffer overflow due to lack of buffer length check when segmented WMI command is received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon...Show more Possible buffer overflow due to lack of buffer length check when segmented WMI command is received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and NetworkingShow less
CVE-2021-1924 1Qualcomm 317Apq8009 Firmware Apq8009w FirmwareApq8016 Firmware+314 more Nov 21, 2024 Nov 12, 2021 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 Information disclosure through timing and power side-channels during mod exponentiation for RSA-CRT in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdrago...Show more Information disclosure through timing and power side-channels during mod exponentiation for RSA-CRT in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingShow less
CVE-2021-1976 1Qualcomm 247Apq8009 Firmware Apq8009w FirmwareApq8017 Firmware+244 more Nov 21, 2024 Sep 17, 2021 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 A use after free can occur due to improper validation of P2P device address in PD Request frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdra...Show more A use after free can occur due to improper validation of P2P device address in PD Request frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingShow less
CVE-2021-1909 1Qualcomm 327Apq8009 Firmware Apq8009w FirmwareApq8016 Firmware+324 more Nov 21, 2024 Sep 9, 2021 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 Buffer overflow occurs in trusted applications due to lack of length check of parameters in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer...Show more Buffer overflow occurs in trusted applications due to lack of length check of parameters in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingShow less
CVE-2021-1972 1Qualcomm 277Apq8009 Firmware Apq8009w FirmwareApq8017 Firmware+274 more Nov 21, 2024 Sep 8, 2021 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 Possible buffer overflow due to improper validation of device types during P2P search in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile...Show more Possible buffer overflow due to improper validation of device types during P2P search in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingShow less
CVE-2020-11301 1Qualcomm 267Apq8009 Firmware Apq8017 FirmwareApq8053 Firmware+264 more Nov 21, 2024 Sep 8, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Improper authentication of un-encrypted plaintext Wi-Fi frames in an encrypted network can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics C...Show more Improper authentication of un-encrypted plaintext Wi-Fi frames in an encrypted network can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingShow less
CVE-2021-1887 1Qualcomm 39Ar7420 Firmware Ar9380 FirmwareCsr8811 Firmware+36 more Nov 21, 2024 Jul 13, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An assertion can be reached in the WLAN subsystem while using the Wi-Fi Fine Timing Measurement protocol in Snapdragon Wired Infrastructure and Networking
CVE-2020-11267 1Qualcomm 271Apq8009 Firmware Apq8009w FirmwareApq8017 Firmware+268 more Nov 21, 2024 Jun 9, 2021 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 Stack out-of-bounds write occurs while setting up a cipher device if the provided IV length exceeds the max limit value in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon...Show more Stack out-of-bounds write occurs while setting up a cipher device if the provided IV length exceeds the max limit value in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingShow less
CVE-2020-11266 1Qualcomm 26Ar7420 Firmware Ar9580 FirmwareCsr8811 Firmware+23 more Nov 21, 2024 Jun 9, 2021 N/A· v4 6.5 MEDIUM· v3 2.1 LOW· v2 Image address is dereferenced before validating its range which can cause potential QSEE information leakage in Snapdragon Wired Infrastructure and Networking
CVE-2020-11265 1Qualcomm 26Ar7420 Firmware Ar9580 FirmwareCsr8811 Firmware+23 more Nov 21, 2024 Jun 9, 2021 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 Information disclosure issue due to lack of validation of pointer arguments passed to TZ BSP in Snapdragon Wired Infrastructure and Networking
CVE-2020-11259 1Qualcomm 26Ar7420 Firmware Ar9580 FirmwareCsr8811 Firmware+23 more Nov 21, 2024 Jun 9, 2021 N/A· v4 8.8 HIGH· v3 7.2 HIGH· v2 Memory corruption due to lack of validation of pointer arguments passed to Trustzone BSP in Snapdragon Wired Infrastructure and Networking
CVE-2020-11258 1Qualcomm 26Ar7420 Firmware Ar9580 FirmwareCsr8811 Firmware+23 more Nov 21, 2024 Jun 9, 2021 N/A· v4 8.8 HIGH· v3 7.2 HIGH· v2 Memory corruption due to lack of validation of pointer arguments passed to Trustzone BSP in Snapdragon Wired Infrastructure and Networking
CVE-2020-11257 1Qualcomm 26Ar7420 Firmware Ar9580 FirmwareCsr8811 Firmware+23 more Nov 21, 2024 Jun 9, 2021 N/A· v4 8.8 HIGH· v3 7.2 HIGH· v2 Memory corruption due to lack of validation of pointer arguments passed to TrustZone BSP in Snapdragon Wired Infrastructure and Networking
CVE-2020-11256 1Qualcomm 26Ar7420 Firmware Ar9580 FirmwareCsr8811 Firmware+23 more Nov 21, 2024 Jun 9, 2021 N/A· v4 8.8 HIGH· v3 7.2 HIGH· v2 Memory corruption due to lack of check of validation of pointer to buffer passed to trustzone in Snapdragon Wired Infrastructure and Networking
CVE-2020-11235 1Qualcomm 538Apq8009 Firmware Apq8017 FirmwareApq8053 Firmware+535 more Nov 21, 2024 Jun 9, 2021 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 Buffer overflow might occur while parsing unified command due to lack of check of input data received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdra...Show more Buffer overflow might occur while parsing unified command due to lack of check of input data received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and NetworkingShow less
CVE-2020-11280 1Qualcomm 412Aqt1000 Firmware Ar7420 FirmwareAr8031 Firmware+409 more Nov 21, 2024 Feb 22, 2021 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 Denial of service while processing fine timing measurement request (FTMR) frame with reserved bits set in the FTM parameter IE due to improper error handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivit...Show more Denial of service while processing fine timing measurement request (FTMR) frame with reserved bits set in the FTM parameter IE due to improper error handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and NetworkingShow less
CVE-2020-11270 1Qualcomm 415Aqt1000 Firmware Ar7420 FirmwareAr8031 Firmware+412 more Nov 21, 2024 Feb 22, 2021 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 Possible denial of service due to RTT responder consistently rejects all FTMR by transmitting FTM1 with failure status in the FTM parameter IE in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon C...Show more Possible denial of service due to RTT responder consistently rejects all FTMR by transmitting FTM1 with failure status in the FTM parameter IE in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and NetworkingShow less