QF
Product
Qca0000 Firmware
102
CVEs
0
On KEV
9.8
Max CVSS
3
New 30D
Severity mix
Critical 10High 78Medium 14Low 0
Watch
Add Qca0000 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-21457 | 7.5 | Jul 1 | INformation disclosure while handling Multi-link IE in beacon frame Affected: All versions, or not specified |
| CVE-2024-23363 | 7.5 | Jun 3 | Transient DOS while processing an improperly formatted Fine Time Measurement (FTM) management frame Affected: All versions, or not specified |
| CVE-2023-43537 | 7.5 | Jun 3 | Information disclosure while handling T2LM Action Frame in WLAN Host Affected: All versions, or not specified |
| CVE-2024-21477 | 7.5 | May 6 | Transient DOS while parsing a protected 802.11az Fine Time Measurement (FTM) frame Affected: All versions, or not specified |
| CVE-2023-43539 | 7.5 | Mar 4 | Transient DOS while processing an improperly formatted 802.11az Fine Time Measurement protocol frame Affected: All versions, or not specified |
| CVE-2023-33105 | 7.5 | Mar 4 | Transient DOS in WLAN Host and Firmware when large number of open authentication frames are sent with an invalid transaction sequence number Affected: All versions, or not specified |
| CVE-2023-43523 | 7.5 | Feb 6 | Transient DOS while processing 11AZ RTT management action frame received through OTA Affected: All versions, or not specified |
| CVE-2023-43522 | 7.5 | Feb 6 | Transient DOS while key unwrapping process, when the given encrypted key is empty or NULL Affected: All versions, or not specified |
| CVE-2023-33116 | 7.5 | Jan 2 | Transient DOS while parsing ieee80211_parse_mscs_ie in WIN WLAN driver Affected: All versions, or not specified |
| CVE-2023-33109 | 7.5 | Jan 2 | Transient DOS while processing a WMI P2P listen start command (0xD00A) sent from host Affected: All versions, or not specified |
| CVE-2023-33062 | 7.5 | Jan 2 | Transient DOS in WLAN Firmware while parsing a BTM request Affected: All versions, or not specified |
| CVE-2023-33098 | 7.5 | Dec 5 | Transient DOS while parsing WPA IES, when it is passed with length more than expected size Affected: All versions, or not specified |
| CVE-2023-33097 | 7.5 | Dec 5 | Transient DOS in WLAN Firmware while processing a FTMR frame Affected: All versions, or not specified |
| CVE-2023-33089 | 7.5 | Dec 5 | Transient DOS when processing a NULL buffer while parsing WLAN vdev Affected: All versions, or not specified |
| CVE-2023-33081 | 7.5 | Dec 5 | Transient DOS while converting TWT (Target Wake Time) frame parameters in the OTA broadcast Affected: All versions, or not specified |
| CVE-2023-33041 | 7.5 | Dec 5 | Under certain scenarios the WLAN Firmware will reach an assertion due to state confusion while looking up peer ids Affected: All versions, or not specified |
| CVE-2023-33061 | 7.5 | Nov 7 | Transient DOS in WLAN Firmware while parsing WLAN beacon or probe-response frame Affected: All versions, or not specified |
| CVE-2023-33056 | 7.5 | Nov 7 | Transient DOS in WLAN Firmware when firmware receives beacon including T2LM IE Affected: All versions, or not specified |
| CVE-2023-33048 | 7.5 | Nov 7 | Transient DOS in WLAN Firmware while parsing t2lm buffers Affected: All versions, or not specified |
| CVE-2023-33047 | 7.5 | Nov 7 | Transient DOS in WLAN Firmware while parsing no-inherit IES Affected: All versions, or not specified |
| CVE-2023-33027 | 7.5 | Oct 3 | Transient DOS in WLAN Firmware while parsing rsn ies Affected: All versions, or not specified |
| CVE-2023-33026 | 7.5 | Oct 3 | Transient DOS in WLAN Firmware while parsing a NAN management frame Affected: All versions, or not specified |
| CVE-2022-33238 | 7.5 | Dec 13 | Transient DOS due to loop with unreachable exit condition in WLAN while processing an incoming FTM frames Affected: All versions, or not specified |
| CVE-2022-33237 | 7.5 | Nov 15 | Transient DOS due to buffer over-read in WLAN firmware while processing PPE threshold Affected: All versions, or not specified |
| CVE-2022-25749 | 7.5 | Oct 19 | Transient Denial-of-Service in WLAN due to buffer over-read while parsing MDNS frames Affected: All versions, or not specified |
| CVE-2026-24081 | 7.4 | Sep 17 | Buffer Over-read in BT Controller Affected: All versions, or not specified |
| CVE-2026-24075 | 7.0 | Sep 17 | Buffer Over-read in Qualcomm IPC Affected: All versions, or not specified |
| CVE-2026-25271 | 7.0 | Jul 6 | Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service Affected: All versions, or not specified |