QF
Product
Qca4004 Firmware
by Qualcomm · last CVE Oct 9, 2025
125
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 18High 93Medium 14Low 0
Watch

Add Qca4004 Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-33016
6.8
0%
Sep 2
Improper Restriction of Operations within the Bounds of a Memory Buffer in Storage
Affected: 0
CVE-2022-33289
6.8
0%
Apr 13
Memory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card
Affected: All versions, or not specified
CVE-2021-30349
6.7
0%
Jun 14
Improper access control sequence for AC database after memory allocation can lead to possible memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
Affected: All versions, or not specified
CVE-2023-28586
6.5
0%
Dec 5
Information disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE
Affected: All versions, or not specified
CVE-2021-30342
5.9
0%
Jun 14
Improper integrity check can lead to race condition between tasks PDCP and RRC? after a valid RRC Command packet has been received in Snapdragon Auto, Snapdragon Compute,…
Affected: All versions, or not specified
CVE-2024-43046
5.5
0%
Apr 7
There may be information disclosure during memory re-allocation in TZ Secure OS
Affected: All versions, or not specified
CVE-2024-21462
5.5
0%
Jul 1
Transient DOS while loading the TA ELF file
Affected: All versions, or not specified
CVE-2023-28563
5.5
0%
Nov 7
Information disclosure in IOE Firmware while handling WMI command
Affected: All versions, or not specified
CVE-2022-40523
5.5
0%
Jun 6
Information disclosure in Kernel due to indirect branch misprediction
Affected: All versions, or not specified
CVE-2022-40519
5.5
0%
Jan 9
Information disclosure due to buffer overread in Core
Affected: All versions, or not specified
CVE-2022-40518
5.5
0%
Jan 9
Information disclosure due to buffer overread in Core
Affected: All versions, or not specified
CVE-2021-30278
5.5
0%
Jan 3
Improper input validation in TrustZone memory transfer interface can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
Affected: All versions, or not specified
CVE-2021-1935
5.5
0%
Sep 9
Possible null pointer dereference due to lack of validation check for passed pointer during key import in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
Affected: All versions, or not specified
CVE-2024-38426
5.3
0%
Mar 3
While processing the authentication message in UE, improper authentication may lead to information disclosure
Affected: All versions, or not specified
Showing 14