QF
Product
Qca4004 Firmware
by Qualcomm · last CVE Oct 9, 2025
125
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 18High 93Medium 14Low 0
Watch

Add Qca4004 Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-25695
7.8
0%
Dec 13
Memory corruption in MODEM due to Improper Validation of Array Index while processing GSTK Proactive commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
Affected: All versions, or not specified
CVE-2022-25682
7.8
0%
Dec 13
Memory corruption in MODEM UIM due to usage of out of range pointer offset while decoding command from card in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
Affected: All versions, or not specified
CVE-2021-30281
7.8
0%
Jun 14
Possible unauthorized access to secure space due to improper check of data allowed while flashing the no access control device configuration in Snapdragon Auto, Snapdragon…
Affected: All versions, or not specified
CVE-2021-30323
7.8
0%
Feb 11
Improper validation of maximum size of data write to EFS file can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial…
Affected: All versions, or not specified
CVE-2021-30289
7.8
0%
Jan 3
Possible buffer overflow due to lack of range check while processing a DIAG command for COEX management in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon…
Affected: All versions, or not specified
CVE-2021-30282
7.8
0%
Jan 3
Possible out of bound write in RAM partition table due to improper validation on number of partitions provided in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
Affected: All versions, or not specified
CVE-2021-30275
7.8
0%
Jan 3
Possible integer overflow in page alignment interface due to lack of address and size validation before alignment in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
Affected: All versions, or not specified
CVE-2021-30274
7.8
0%
Jan 3
Possible integer overflow in access control initialization interface due to lack and size and address validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
Affected: All versions, or not specified
CVE-2021-30272
7.8
0%
Jan 3
Possible null pointer dereference in thread cache operation handler due to lack of validation of user provided input in Snapdragon Auto, Snapdragon Compute, Snapdragon…
Affected: All versions, or not specified
CVE-2021-30271
7.8
0%
Jan 3
Possible null pointer dereference in trap handler due to lack of thread ID validation before dereferencing it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
Affected: All versions, or not specified
CVE-2021-30270
7.8
0%
Jan 3
Possible null pointer dereference in thread profile trap handler due to lack of thread ID validation before dereferencing it in Snapdragon Auto, Snapdragon Compute, Snapdragon…
Affected: All versions, or not specified
CVE-2021-30269
7.8
0%
Jan 3
Possible null pointer dereference due to lack of TLB validation for user provided address in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…
Affected: All versions, or not specified
CVE-2021-30268
7.8
0%
Jan 3
Possible heap Memory Corruption Issue due to lack of input validation when sending HWTC IQ Capture command in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
Affected: All versions, or not specified
CVE-2021-1894
7.8
0%
Jan 3
Improper access control in TrustZone due to improper error handling while handling the signing key in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
Affected: All versions, or not specified
CVE-2021-30259
7.8
0%
Nov 12
Possible out of bound access due to improper validation of function table entries in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
Affected: All versions, or not specified
CVE-2021-30255
7.8
0%
Nov 12
Possible buffer overflow due to improper input validation in PDM DIAG command in FTM in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
Affected: All versions, or not specified
CVE-2021-30254
7.8
0%
Nov 12
Possible buffer overflow due to improper input validation in factory calibration and test DIAG command in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
Affected: All versions, or not specified
CVE-2021-1973
7.8
0%
Nov 12
A FTM Diag command can allow an arbitrary write into modem OS space in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial…
Affected: All versions, or not specified
CVE-2021-30261
7.8
0%
Sep 17
Possible integer and heap overflow due to lack of input command size validation while handling beacon template update command from HLOS in Snapdragon Auto, Snapdragon Consumer…
Affected: All versions, or not specified
CVE-2021-1952
7.8
0%
Sep 9
Possible buffer over read occurs due to lack of length check of request buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon…
Affected: All versions, or not specified
CVE-2021-1890
7.8
0%
Jul 13
Improper length check of public exponent in RSA import key function could cause memory corruption
Affected: All versions, or not specified
CVE-2021-1889
7.8
0%
Jul 13
Possible buffer overflow due to lack of length check in Trusted Application in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon…
Affected: All versions, or not specified
CVE-2021-1888
7.8
0%
Jul 13
Memory corruption in key parsing and import function due to double freeing the same heap allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
Affected: All versions, or not specified
CVE-2021-1886
7.8
0%
Jul 13
Incorrect handling of pointers in trusted application key import mechanism could cause memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
Affected: All versions, or not specified
CVE-2020-11292
7.8
1%
Jun 9
Possible buffer overflow in voice service due to lack of input validation of parameters in QMI Voice API in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
Affected: All versions, or not specified
CVE-2023-43551
7.5
0%
Jun 3
Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command
Affected: All versions, or not specified
CVE-2023-21625
7.5
0%
Aug 8
Information disclosure in Network Services due to buffer over-read while the device receives DNS response
Affected: All versions, or not specified
CVE-2022-40521
7.5
0%
Jun 6
Transient DOS due to improper authorization in Modem
Affected: All versions, or not specified
CVE-2022-40505
7.5
0%
May 2
Information disclosure due to buffer over-read in Modem while parsing DNS hostname
Affected: All versions, or not specified
CVE-2022-33304
7.5
0%
May 2
Transient DOS due to NULL pointer dereference in Modem while performing pullup for received TCP/UDP packet
Affected: All versions, or not specified
CVE-2022-33295
7.5
0%
Apr 13
Information disclosure in Modem due to buffer over-read while parsing the wms message received given the buffer and its length
Affected: All versions, or not specified
CVE-2022-33294
7.5
0%
Apr 13
Transient DOS in Modem due to NULL pointer dereference while receiving response of lwm2m registration/update/bootstrap request message
Affected: All versions, or not specified
CVE-2022-33291
7.5
0%
Apr 13
Information disclosure in Modem due to buffer over-read while receiving a IP header with malformed length
Affected: All versions, or not specified
CVE-2022-33287
7.5
0%
Apr 13
Information disclosure in Modem due to buffer over-read while getting length of Unfragmented headers in an IPv6 packet
Affected: All versions, or not specified
CVE-2022-33258
7.5
0%
Apr 13
Information disclosure due to buffer over-read in modem while reading configuration parameters
Affected: All versions, or not specified
CVE-2022-33228
7.5
0%
Apr 13
Information disclosure sue to buffer over-read in modem while processing ipv6 packet with hop-by-hop or destination option in header
Affected: All versions, or not specified
CVE-2022-33223
7.5
0%
Apr 13
Transient DOS in Modem due to null pointer dereference while processing the incoming packet with http chunked encoding
Affected: All versions, or not specified
CVE-2022-33222
7.5
0%
Apr 13
Information disclosure due to buffer over-read while parsing DNS response packets in Modem
Affected: All versions, or not specified
CVE-2022-25747
7.5
0%
Apr 13
Information disclosure in modem due to improper input validation during parsing of upcoming CoAP message
Affected: All versions, or not specified
CVE-2022-25739
7.5
0%
Apr 13
Denial of service in modem due to missing null check while processing the ipv6 packet received during ECM call
Affected: All versions, or not specified
CVE-2022-25737
7.5
0%
Apr 13
Information disclosure in modem due to missing NULL check while reading packets received from local network
Affected: All versions, or not specified
CVE-2022-25731
7.5
0%
Apr 13
Information disclosure in modem due to buffer over-read while processing packets from DNS server
Affected: All versions, or not specified
CVE-2022-25730
7.5
0%
Apr 13
Information disclosure in modem due to improper check of IP type while processing DNS server query
Affected: All versions, or not specified
CVE-2022-25726
7.5
0%
Apr 13
Information disclosure in modem data due to array out of bound access while handling the incoming DNS response packet
Affected: All versions, or not specified
CVE-2022-33229
7.5
0%
Feb 12
Information disclosure due to buffer over-read in Modem while using static array to process IPv4 packets
Affected: All versions, or not specified
CVE-2022-25738
7.5
0%
Feb 12
Information disclosure in modem due to buffer over-red while performing checksum of packet received
Affected: All versions, or not specified
CVE-2022-25735
7.5
0%
Feb 12
Denial of service in modem due to missing null check while processing TCP or UDP packets from server
Affected: All versions, or not specified
CVE-2022-25734
7.5
0%
Feb 12
Denial of service in modem due to missing null check while processing IP packets with padding
Affected: All versions, or not specified
CVE-2022-25733
7.5
0%
Feb 12
Denial of service in modem due to null pointer dereference while processing DNS packets
Affected: All versions, or not specified
CVE-2022-25732
7.5
0%
Feb 12
Information disclosure in modem due to buffer over read in dns client due to missing length check
Affected: All versions, or not specified
Page 2 of 3 · 125 total