AF
Product
Aqt1000 Firmware
On CISA KEVExploited in the wild
620
CVEs
7
On KEV
9.8
Max CVSS
3
New 30D
Severity mix
Critical 75High 424Medium 1Low 0
Watch
Add Aqt1000 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-24849 | 7.5 | Oct 3 | Buffer Over-read in Data Modem Affected: All versions, or not specified |
| CVE-2023-24848 | 7.5 | Oct 3 | Buffer Over-read in Data Modem Affected: All versions, or not specified |
| CVE-2023-24847 | 7.5 | Oct 3 | NULL pointer Dereference in Modem Affected: 0 |
| CVE-2023-33015 | 7.5 | Sep 5 | Buffer Over-read in WLAN Firmware Affected: All versions, or not specified |
| CVE-2023-28584 | 7.5 | Sep 5 | Improper Authorization in WLAN Host Affected: All versions, or not specified |
| CVE-2023-21669 | 7.5 | Jun 6 | Buffer Over-read in WLAN HOST Affected: 0 |
| CVE-2023-21659 | 7.5 | Jun 6 | Buffer Over-read in WLAN Firmware Affected: All versions, or not specified |
| CVE-2022-40521 | 7.5 | Jun 6 | Improper authorization in Modem Affected: All versions, or not specified |
| CVE-2022-40504 | 7.5 | May 2 | Reachable assertion in Modem Affected: All versions, or not specified |
| CVE-2022-40508 | 7.5 | May 2 | Reachable assertion in Modem Affected: 0 |
| CVE-2022-40503 | 7.5 | Apr 4 | Buffer over-read in Bluetooth Host. Affected: All versions, or not specified |
| CVE-2022-33254 | 7.5 | Mar 7 | Reachable assertion in Modem Affected: All versions, or not specified |
| CVE-2022-40512 | 7.5 | Feb 9 | Buffer over-read in WLAN Firmware. Affected: 0 |
| CVE-2022-33271 | 7.5 | Feb 9 | Buffer over-read in WLAN Affected: 0 |
| CVE-2022-33235 | 7.5 | Dec 13 | Information disclosure due to buffer over-read in WLAN firmware while parsing security context info attributes Affected: All versions, or not specified |
| CVE-2022-25685 | 7.5 | Dec 13 | Denial of service in Modem module due to improper authorization while error handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT,… Affected: All versions, or not specified |
| CVE-2022-25702 | 7.5 | Dec 13 | Denial of service in modem due to reachable assertion while processing reconfiguration message in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2022-33238 | 7.5 | Dec 13 | Transient DOS due to loop with unreachable exit condition in WLAN while processing an incoming FTM frames Affected: All versions, or not specified |
| CVE-2022-33239 | 7.5 | Nov 15 | Transient DOS due to loop with unreachable exit condition in WLAN firmware while parsing IPV6 extension header Affected: All versions, or not specified |
| CVE-2022-25741 | 7.5 | Nov 15 | Denial of service in WLAN due to potential null pointer dereference while accessing the memory location in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2022-33237 | 7.5 | Nov 15 | Transient DOS due to buffer over-read in WLAN firmware while processing PPE threshold Affected: All versions, or not specified |
| CVE-2022-25736 | 7.5 | Oct 19 | Denial of service in WLAN due to out-of-bound read happens while processing VHT action frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2022-25749 | 7.5 | Oct 19 | Transient Denial-of-Service in WLAN due to buffer over-read while parsing MDNS frames Affected: All versions, or not specified |
| CVE-2022-25706 | 7.5 | Sep 16 | Information disclosure in Bluetooth driver due to buffer over-read while reading l2cap length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2022-25690 | 7.5 | Sep 16 | Information disclosure in WLAN due to improper validation of array index while parsing crafted ANQP action frames in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2022-25670 | 7.5 | Sep 16 | Denial of service in WLAN HOST due to buffer over read while unpacking frames in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics… Affected: All versions, or not specified |
| CVE-2022-25669 | 7.5 | Sep 16 | Denial of service in video due to buffer over read while parsing MP4 clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2022-22091 | 7.5 | Sep 16 | Improper authorization of a replayed LTE security mode command can lead to a denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2021-35100 | 7.5 | Jun 14 | Possible buffer over read due to improper calculation of string length while parsing Id3 tag in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2021-30344 | 7.5 | Jun 14 | Improper authorization of a replayed LTE security mode command can lead to a denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2022-22065 | 7.5 | Jun 14 | Out of bound read in WLAN HOST due to improper length check can lead to DOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics… Affected: All versions, or not specified |
| CVE-2022-22064 | 7.5 | Jun 14 | Possible buffer over read due to lack of size validation while unpacking frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics… Affected: All versions, or not specified |
| CVE-2021-35078 | 7.5 | Jun 14 | Possible memory leak due to improper validation of certificate chain length while parsing server certificate chain in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2022-22083 | 7.5 | Jun 14 | Denial of service due to memory corruption while extracting ape header from clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2021-30312 | 7.5 | Oct 20 | Improper authentication of sub-frames of a multicast AMSDU frame can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30302 | 7.5 | Oct 20 | Improper authentication of EAP WAPI EAPOL frames from unauthenticated user can lead to information disclosure in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2021-1936 | 7.5 | Oct 20 | Null pointer dereference can occur due to lack of null check for user provided input in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2021-1974 | 7.5 | Sep 9 | Possible buffer over read due to lack of alignment between map or unmap length of IPA SMMU and WLAN SMMU in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2021-1971 | 7.5 | Sep 9 | Possible assertion due to lack of physical layer state validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity,… Affected: All versions, or not specified |
| CVE-2021-1948 | 7.5 | Sep 9 | Possible out of bound read due to lack of length check of data while parsing the beacon or probe response in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2021-1941 | 7.5 | Sep 9 | Possible buffer over read issue due to improper length check on WPA IE string sent by peer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2021-1914 | 7.5 | Sep 8 | Loop with unreachable exit condition may occur due to improper handling of unsupported input in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2020-11301 | 7.5 | Sep 8 | Improper authentication of un-encrypted plaintext Wi-Fi frames in an encrypted network can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1970 | 7.5 | Jul 13 | Possible out of bound read due to lack of length check of FT sub-elements in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1964 | 7.5 | Jul 13 | Possible buffer over read due to improper validation of IE size while parsing beacon from peer device in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1955 | 7.5 | Jul 13 | Denial of service in SAP case due to improper handling of connections when association is rejected in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1954 | 7.5 | Jul 13 | Possible buffer over read due to improper validation of data pointer while parsing FILS indication IE in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1953 | 7.5 | Jul 13 | Improper handling of received malformed FTMR request frame can lead to reachable assertion while responding with FTM1 frame in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1945 | 7.5 | Jul 13 | Possible out of bound read due to lack of length check of Bandwidth-NSS IE in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1943 | 7.5 | Jul 13 | Possible buffer out of bound read can occur due to improper validation of TBTT count and length while parsing the beacon response in Snapdragon Auto, Snapdragon Compute,… Affected: All versions, or not specified |
The 500 most important CVEs for this product (exploited first, then by severity)