QF
Product
Qca4004 Firmware
125
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 18High 93Medium 14Low 0
Watch
Add Qca4004 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-25695 | 7.8 | Dec 13 | Memory corruption in MODEM due to Improper Validation of Array Index while processing GSTK Proactive commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2022-25682 | 7.8 | Dec 13 | Memory corruption in MODEM UIM due to usage of out of range pointer offset while decoding command from card in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2021-30281 | 7.8 | Jun 14 | Possible unauthorized access to secure space due to improper check of data allowed while flashing the no access control device configuration in Snapdragon Auto, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30323 | 7.8 | Feb 11 | Improper validation of maximum size of data write to EFS file can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial… Affected: All versions, or not specified |
| CVE-2021-30289 | 7.8 | Jan 3 | Possible buffer overflow due to lack of range check while processing a DIAG command for COEX management in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30282 | 7.8 | Jan 3 | Possible out of bound write in RAM partition table due to improper validation on number of partitions provided in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2021-30275 | 7.8 | Jan 3 | Possible integer overflow in page alignment interface due to lack of address and size validation before alignment in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2021-30274 | 7.8 | Jan 3 | Possible integer overflow in access control initialization interface due to lack and size and address validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2021-30272 | 7.8 | Jan 3 | Possible null pointer dereference in thread cache operation handler due to lack of validation of user provided input in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30271 | 7.8 | Jan 3 | Possible null pointer dereference in trap handler due to lack of thread ID validation before dereferencing it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2021-30270 | 7.8 | Jan 3 | Possible null pointer dereference in thread profile trap handler due to lack of thread ID validation before dereferencing it in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30269 | 7.8 | Jan 3 | Possible null pointer dereference due to lack of TLB validation for user provided address in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2021-30268 | 7.8 | Jan 3 | Possible heap Memory Corruption Issue due to lack of input validation when sending HWTC IQ Capture command in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2021-1894 | 7.8 | Jan 3 | Improper access control in TrustZone due to improper error handling while handling the signing key in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30259 | 7.8 | Nov 12 | Possible out of bound access due to improper validation of function table entries in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2021-30255 | 7.8 | Nov 12 | Possible buffer overflow due to improper input validation in PDM DIAG command in FTM in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2021-30254 | 7.8 | Nov 12 | Possible buffer overflow due to improper input validation in factory calibration and test DIAG command in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1973 | 7.8 | Nov 12 | A FTM Diag command can allow an arbitrary write into modem OS space in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial… Affected: All versions, or not specified |
| CVE-2021-30261 | 7.8 | Sep 17 | Possible integer and heap overflow due to lack of input command size validation while handling beacon template update command from HLOS in Snapdragon Auto, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2021-1952 | 7.8 | Sep 9 | Possible buffer over read occurs due to lack of length check of request buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1890 | 7.8 | Jul 13 | Improper length check of public exponent in RSA import key function could cause memory corruption Affected: All versions, or not specified |
| CVE-2021-1889 | 7.8 | Jul 13 | Possible buffer overflow due to lack of length check in Trusted Application in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1888 | 7.8 | Jul 13 | Memory corruption in key parsing and import function due to double freeing the same heap allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1886 | 7.8 | Jul 13 | Incorrect handling of pointers in trusted application key import mechanism could cause memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2020-11292 | 7.8 | Jun 9 | Possible buffer overflow in voice service due to lack of input validation of parameters in QMI Voice API in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2023-43551 | 7.5 | Jun 3 | Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command Affected: All versions, or not specified |
| CVE-2023-21625 | 7.5 | Aug 8 | Information disclosure in Network Services due to buffer over-read while the device receives DNS response Affected: All versions, or not specified |
| CVE-2022-40521 | 7.5 | Jun 6 | Transient DOS due to improper authorization in Modem Affected: All versions, or not specified |
| CVE-2022-40505 | 7.5 | May 2 | Information disclosure due to buffer over-read in Modem while parsing DNS hostname Affected: All versions, or not specified |
| CVE-2022-33304 | 7.5 | May 2 | Transient DOS due to NULL pointer dereference in Modem while performing pullup for received TCP/UDP packet Affected: All versions, or not specified |
| CVE-2022-33295 | 7.5 | Apr 13 | Information disclosure in Modem due to buffer over-read while parsing the wms message received given the buffer and its length Affected: All versions, or not specified |
| CVE-2022-33294 | 7.5 | Apr 13 | Transient DOS in Modem due to NULL pointer dereference while receiving response of lwm2m registration/update/bootstrap request message Affected: All versions, or not specified |
| CVE-2022-33291 | 7.5 | Apr 13 | Information disclosure in Modem due to buffer over-read while receiving a IP header with malformed length Affected: All versions, or not specified |
| CVE-2022-33287 | 7.5 | Apr 13 | Information disclosure in Modem due to buffer over-read while getting length of Unfragmented headers in an IPv6 packet Affected: All versions, or not specified |
| CVE-2022-33258 | 7.5 | Apr 13 | Information disclosure due to buffer over-read in modem while reading configuration parameters Affected: All versions, or not specified |
| CVE-2022-33228 | 7.5 | Apr 13 | Information disclosure sue to buffer over-read in modem while processing ipv6 packet with hop-by-hop or destination option in header Affected: All versions, or not specified |
| CVE-2022-33223 | 7.5 | Apr 13 | Transient DOS in Modem due to null pointer dereference while processing the incoming packet with http chunked encoding Affected: All versions, or not specified |
| CVE-2022-33222 | 7.5 | Apr 13 | Information disclosure due to buffer over-read while parsing DNS response packets in Modem Affected: All versions, or not specified |
| CVE-2022-25747 | 7.5 | Apr 13 | Information disclosure in modem due to improper input validation during parsing of upcoming CoAP message Affected: All versions, or not specified |
| CVE-2022-25739 | 7.5 | Apr 13 | Denial of service in modem due to missing null check while processing the ipv6 packet received during ECM call Affected: All versions, or not specified |
| CVE-2022-25737 | 7.5 | Apr 13 | Information disclosure in modem due to missing NULL check while reading packets received from local network Affected: All versions, or not specified |
| CVE-2022-25731 | 7.5 | Apr 13 | Information disclosure in modem due to buffer over-read while processing packets from DNS server Affected: All versions, or not specified |
| CVE-2022-25730 | 7.5 | Apr 13 | Information disclosure in modem due to improper check of IP type while processing DNS server query Affected: All versions, or not specified |
| CVE-2022-25726 | 7.5 | Apr 13 | Information disclosure in modem data due to array out of bound access while handling the incoming DNS response packet Affected: All versions, or not specified |
| CVE-2022-33229 | 7.5 | Feb 12 | Information disclosure due to buffer over-read in Modem while using static array to process IPv4 packets Affected: All versions, or not specified |
| CVE-2022-25738 | 7.5 | Feb 12 | Information disclosure in modem due to buffer over-red while performing checksum of packet received Affected: All versions, or not specified |
| CVE-2022-25735 | 7.5 | Feb 12 | Denial of service in modem due to missing null check while processing TCP or UDP packets from server Affected: All versions, or not specified |
| CVE-2022-25734 | 7.5 | Feb 12 | Denial of service in modem due to missing null check while processing IP packets with padding Affected: All versions, or not specified |
| CVE-2022-25733 | 7.5 | Feb 12 | Denial of service in modem due to null pointer dereference while processing DNS packets Affected: All versions, or not specified |
| CVE-2022-25732 | 7.5 | Feb 12 | Information disclosure in modem due to buffer over read in dns client due to missing length check Affected: All versions, or not specified |
