QF
Product
Qca4004 Firmware
125
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 18High 93Medium 14Low 0
Watch
Add Qca4004 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-33016 | 6.8 | Sep 2 | Improper Restriction of Operations within the Bounds of a Memory Buffer in Storage Affected: 0 |
| CVE-2022-33289 | 6.8 | Apr 13 | Memory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card Affected: All versions, or not specified |
| CVE-2021-30349 | 6.7 | Jun 14 | Improper access control sequence for AC database after memory allocation can lead to possible memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2023-28586 | 6.5 | Dec 5 | Information disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE Affected: All versions, or not specified |
| CVE-2021-30342 | 5.9 | Jun 14 | Improper integrity check can lead to race condition between tasks PDCP and RRC? after a valid RRC Command packet has been received in Snapdragon Auto, Snapdragon Compute,… Affected: All versions, or not specified |
| CVE-2024-43046 | 5.5 | Apr 7 | There may be information disclosure during memory re-allocation in TZ Secure OS Affected: All versions, or not specified |
| CVE-2024-21462 | 5.5 | Jul 1 | Transient DOS while loading the TA ELF file Affected: All versions, or not specified |
| CVE-2023-28563 | 5.5 | Nov 7 | Information disclosure in IOE Firmware while handling WMI command Affected: All versions, or not specified |
| CVE-2022-40523 | 5.5 | Jun 6 | Information disclosure in Kernel due to indirect branch misprediction Affected: All versions, or not specified |
| CVE-2022-40519 | 5.5 | Jan 9 | Information disclosure due to buffer overread in Core Affected: All versions, or not specified |
| CVE-2022-40518 | 5.5 | Jan 9 | Information disclosure due to buffer overread in Core Affected: All versions, or not specified |
| CVE-2021-30278 | 5.5 | Jan 3 | Improper input validation in TrustZone memory transfer interface can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1935 | 5.5 | Sep 9 | Possible null pointer dereference due to lack of validation check for passed pointer during key import in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2024-38426 | 5.3 | Mar 3 | While processing the authentication message in UE, improper authentication may lead to information disclosure Affected: All versions, or not specified |
Showing 14
