CF
Product
Csra6640 Firmware
On CISA KEVExploited in the wild
439
CVEs
9
On KEV
9.8
Max CVSS
5
New 30D
Severity mix
Critical 44High 329Medium 66Low 0
Watch
Add Csra6640 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-21385 In wildKEV | 7.8 | Mar 2 | Integer Overflow or Wraparound in Graphics Affected: All versions, or not specified |
| CVE-2023-33107 In wildKEV | 7.8 | Dec 5 | Integer Overflow or Wraparound in Graphics Linux Affected: 0 |
| CVE-2023-33106 In wildKEV | 7.8 | Dec 5 | Use of Out-of-range Pointer Offset in Graphics Affected: 0 |
| CVE-2023-33063 In wildKEV | 7.8 | Dec 5 | Use After Free in DSP Services Affected: 0 |
| CVE-2022-22071 In wildKEV | 7.8 | Jun 14 | Qualcomm Multiple Chipsets Use-After-Free Vulnerability Affected: All versions, or not specified |
| CVE-2020-11261 In wildKEV | 7.8 | Jun 9 | Qualcomm Multiple Chipsets Improper Input Validation Vulnerability Affected: All versions, or not specified |
| CVE-2021-1905 In wildKEV | 7.8 | May 7 | Qualcomm Multiple Chipsets Use-After-Free Vulnerability Affected: All versions, or not specified |
| CVE-2025-27038 In wildKEV | 7.5 | Jun 3 | Use After Free in Graphics Affected: All versions, or not specified |
| CVE-2025-47392 | 8.8 | Apr 6 | Integer Overflow or Wraparound in GPS Affected: All versions, or not specified |
| CVE-2023-28585 | 8.8 | Dec 5 | Memory corruption while loading an ELF segment in TEE Kernel Affected: All versions, or not specified |
| CVE-2022-33213 | 8.8 | Mar 10 | Memory corruption in modem due to buffer overflow while processing a PPP packet Affected: All versions, or not specified |
| CVE-2022-33280 | 8.8 | Feb 12 | Memory corruption due to access of uninitialized pointer in Bluetooth HOST while processing the AVRCP packet Affected: All versions, or not specified |
| CVE-2022-22088 | 8.8 | Jan 9 | Memory corruption in Bluetooth HOST due to buffer overflow while parsing the command response received from remote Affected: All versions, or not specified |
| CVE-2021-1942 | 8.8 | Apr 1 | Improper handling of permissions of a shared memory region can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2021-30285 | 8.8 | Jan 13 | Improper validation of memory region in Hypervisor can lead to incorrect region mapping in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2020-11269 | 8.8 | Feb 22 | Possible memory corruption while processing EAPOL frames due to lack of validation of key length before using it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2020-11303 | 8.6 | Oct 20 | Accepting AMSDU frames with mismatched destination and source address can lead to information disclosure in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2021-1949 | 8.4 | Oct 20 | Possible integer overflow due to improper check of batch count value while sanitizer is enabled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2026-24079 | 8.1 | Aug 4 | Missing Authentication for Critical Function in Data Modem Affected: All versions, or not specified |
| CVE-2022-33268 | 8.1 | Dec 13 | Information disclosure due to buffer over-read in Bluetooth HOST while pairing and connecting A2DP Affected: All versions, or not specified |
| CVE-2026-57554 | 7.8 | Oct 6 | Use After Free in DSP Service Affected: All versions, or not specified |
| CVE-2026-57545 | 7.8 | Oct 6 | Untrusted Pointer Dereference in Graphics Affected: All versions, or not specified |
| CVE-2026-25267 | 7.8 | Oct 6 | Missing Authorization in Core Affected: All versions, or not specified |
| CVE-2025-59605 | 7.8 | Jun 1 | Out-of-bounds Write in HLOS Affected: All versions, or not specified |
| CVE-2025-59604 | 7.8 | Jun 1 | NULL Pointer Dereference in SPS Applications Affected: All versions, or not specified |
| CVE-2026-24082 | 7.8 | May 4 | Use After Free in Automotive GPU Affected: All versions, or not specified |
| CVE-2025-47404 | 7.8 | May 4 | Buffer Copy Without Checking Size of Input in Automotive Audio Affected: All versions, or not specified |
| CVE-2025-47389 | 7.8 | Apr 6 | Buffer Copy Without Checking Size of Input in Automotive Platform Affected: All versions, or not specified |
| CVE-2025-47386 | 7.8 | Mar 2 | Use After Free in Automotive Audio Affected: All versions, or not specified |
| CVE-2025-47379 | 7.8 | Mar 2 | Use After Free in Automotive Audio Affected: All versions, or not specified |
| CVE-2025-47376 | 7.8 | Mar 2 | Use After Free in Automotive Audio Affected: All versions, or not specified |
| CVE-2025-47375 | 7.8 | Mar 2 | Use After Free in Automotive Audio Affected: All versions, or not specified |
| CVE-2025-47398 | 7.8 | Feb 2 | Use After Free in Graphics Affected: All versions, or not specified |
| CVE-2025-47397 | 7.8 | Feb 2 | Improper Release of Memory Before Removing Last Reference in Graphics Affected: All versions, or not specified |
| CVE-2025-47348 | 7.8 | Jan 6 | Use of Uninitialized Variable in HLOS Affected: All versions, or not specified |
| CVE-2025-47323 | 7.8 | Dec 18 | Integer Overflow or Wraparound in Audio Affected: All versions, or not specified |
| CVE-2025-47322 | 7.8 | Dec 18 | Use After Free in Automotive Linux OS Affected: All versions, or not specified |
| CVE-2025-47321 | 7.8 | Dec 18 | Buffer Copy Without Checking Size of Input in Core Services Affected: All versions, or not specified |
| CVE-2025-47320 | 7.8 | Dec 18 | Out-of-bounds Write in Audio Affected: All versions, or not specified |
| CVE-2025-27063 | 7.8 | Dec 18 | Use After Free in Video Affected: All versions, or not specified |
| CVE-2025-27053 | 7.8 | Oct 9 | Incorrect Calculation of Buffer Size in HLOS Affected: All versions, or not specified |
| CVE-2025-21481 | 7.8 | Sep 24 | Buffer Copy Without Checking Size of Input in HLOS Affected: All versions, or not specified |
| CVE-2025-27062 | 7.8 | Aug 6 | Improper Access Control in Automotive Multimedia Affected: All versions, or not specified |
| CVE-2025-27042 | 7.8 | Jul 8 | Memory corruption while processing video packets received from video firmware Affected: All versions, or not specified |
| CVE-2025-21432 | 7.8 | Jul 8 | Memory corruption while retrieving the CBOR data from TA Affected: All versions, or not specified |
| CVE-2025-21468 | 7.8 | May 6 | Memory corruption while reading response from FW, when buffer size is changed by FW while driver is using this size to write null character at the end of buffer Affected: All versions, or not specified |
| CVE-2025-21467 | 7.8 | May 6 | Memory corruption while reading the FW response from the shared queue Affected: All versions, or not specified |
| CVE-2024-49835 | 7.8 | May 6 | Memory corruption while reading secure file Affected: All versions, or not specified |
| CVE-2025-21424 | 7.8 | Mar 3 | Memory corruption while calling the NPU driver APIs concurrently Affected: All versions, or not specified |
| CVE-2024-53024 | 7.8 | Mar 3 | Memory corruption in display driver while detaching a device Affected: All versions, or not specified |