QF
Product
Qca10901 Firmware
9
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 6Medium 3Low 0
Watch
Add Qca10901 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-11259 | 8.8 | Jun 9 | Memory corruption due to lack of validation of pointer arguments passed to Trustzone BSP in Snapdragon Wired Infrastructure and Networking Affected: All versions, or not specified |
| CVE-2020-11258 | 8.8 | Jun 9 | Memory corruption due to lack of validation of pointer arguments passed to Trustzone BSP in Snapdragon Wired Infrastructure and Networking Affected: All versions, or not specified |
| CVE-2020-11257 | 8.8 | Jun 9 | Memory corruption due to lack of validation of pointer arguments passed to TrustZone BSP in Snapdragon Wired Infrastructure and Networking Affected: All versions, or not specified |
| CVE-2020-11256 | 8.8 | Jun 9 | Memory corruption due to lack of check of validation of pointer to buffer passed to trustzone in Snapdragon Wired Infrastructure and Networking Affected: All versions, or not specified |
| CVE-2021-30288 | 7.8 | Oct 20 | Possible stack overflow due to improper length check of TLV while copying the TLV to a local stack variable in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2021-30302 | 7.5 | Oct 20 | Improper authentication of EAP WAPI EAPOL frames from unauthenticated user can lead to information disclosure in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2020-11266 | 6.5 | Jun 9 | Image address is dereferenced before validating its range which can cause potential QSEE information leakage in Snapdragon Wired Infrastructure and Networking Affected: All versions, or not specified |
| CVE-2020-11265 | 5.5 | Jun 9 | Information disclosure issue due to lack of validation of pointer arguments passed to TZ BSP in Snapdragon Wired Infrastructure and Networking Affected: All versions, or not specified |
| CVE-2021-1903 | 5.3 | Nov 12 | Possible denial of service scenario can occur due to lack of length check on Channel Switch Announcement IE in beacon or probe response frame in Snapdragon Auto, Snapdragon… Affected: All versions, or not specified |
Showing 9