QF
Product
Qca4020 Firmware
by Qualcomm · last CVE Dec 5, 2023
68
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 17High 45Medium 6Low 0
Watch

Add Qca4020 Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-40510
9.8
0%
Aug 8
Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder
Affected: All versions, or not specified
CVE-2022-25729
9.8
0%
Feb 12
Memory corruption in modem due to improper length check while copying into memory
Affected: All versions, or not specified
CVE-2022-25727
9.8
0%
Nov 15
Memory Corruption in modem due to improper length check while copying into memory in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music
Affected: All versions, or not specified
CVE-2022-25674
9.8
0%
Nov 15
Cryptographic issues in WLAN during the group key handshake of the WPA/WPA2 protocol in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music
Affected: All versions, or not specified
CVE-2022-25720
9.8
1%
Oct 19
Memory corruption in WLAN due to out of bound array access during connect/roaming in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics…
Affected: All versions, or not specified
CVE-2022-25687
9.8
0%
Oct 19
memory corruption in video due to buffer overflow while parsing asf clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon…
Affected: All versions, or not specified
CVE-2022-25718
9.8
0%
Oct 19
Cryptographic issue in WLAN due to improper check on return value while authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics…
Affected: All versions, or not specified
CVE-2022-25688
9.8
0%
Sep 16
Memory corruption in video due to buffer overflow while parsing ps video clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon…
Affected: All versions, or not specified
CVE-2022-22105
9.8
1%
Sep 16
Memory corruption in bluetooth due to integer overflow while processing HFP-UNIT profile in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Voice & Music
Affected: All versions, or not specified
CVE-2022-25668
9.8
0%
Sep 2
Memory corruption in video driver due to double free while parsing ASF clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon…
Affected: All versions, or not specified
CVE-2022-25659
9.8
0%
Sep 2
Memory corruption due to buffer overflow while parsing MKV clips with invalid bitmap size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
Affected: All versions, or not specified
CVE-2022-25658
9.8
0%
Sep 2
Memory corruption due to incorrect pointer arithmetic when attempting to change the endianness in video parser function in Snapdragon Auto, Snapdragon Compute, Snapdragon…
Affected: All versions, or not specified
CVE-2022-25651
9.8
1%
Jun 14
Memory corruption in bluetooth host due to integer overflow while processing BT HFP-UNIT profile in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon…
Affected: All versions, or not specified
CVE-2022-22087
9.8
1%
Jun 14
memory corruption in video due to buffer overflow while parsing mkv clip with no codechecker in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…
Affected: All versions, or not specified
CVE-2022-25719
9.1
1%
Oct 19
Information disclosure in WLAN due to improper length check while processing authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics…
Affected: All versions, or not specified
CVE-2022-22062
9.1
0%
Sep 2
An out-of-bounds read can occur while parsing a server certificate due to improper length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
Affected: All versions, or not specified
CVE-2021-1977
9.1
1%
Oct 20
Possible buffer over read due to improper validation of frame length while processing AEAD decryption during ASSOC response in Snapdragon Auto, Snapdragon Compute, Snapdragon…
Affected: All versions, or not specified
CVE-2020-11303
8.6
1%
Oct 20
Accepting AMSDU frames with mismatched destination and source address can lead to information disclosure in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer…
Affected: All versions, or not specified
CVE-2021-1949
8.4
0%
Oct 20
Possible integer overflow due to improper check of batch count value while sanitizer is enabled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
Affected: All versions, or not specified
CVE-2023-33017
7.8
0%
Dec 5
Memory corruption in Boot while running a ListVars test in UEFI Menu during boot
Affected: All versions, or not specified
CVE-2023-33059
7.8
0%
Nov 7
Memory corruption in Audio while processing the VOC packet data from ADSP
Affected: All versions, or not specified
CVE-2023-28560
7.8
0%
Sep 5
Memory corruption in WLAN HAL while processing devIndex from untrusted WMI payload
Affected: All versions, or not specified
CVE-2023-28537
7.8
0%
Aug 8
Memory corruption while allocating memory in COmxApeDec module in Audio
Affected: All versions, or not specified
CVE-2023-22666
7.8
0%
Aug 8
Memory Corruption in Audio while playing amrwbplus clips with modified content
Affected: All versions, or not specified
CVE-2022-25743
7.8
0%
Nov 15
Memory corruption in graphics due to use-after-free while importing graphics buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
Affected: All versions, or not specified
CVE-2022-25724
7.8
0%
Nov 15
Memory corruption in graphics due to buffer overflow while validating the user address in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
Affected: All versions, or not specified
CVE-2022-22058
7.8
0%
Sep 26
Memory corruption due to use after free issue in kernel while processing ION handles in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…
Affected: All versions, or not specified
CVE-2022-22074
7.8
0%
Sep 16
Memory Corruption during wma file playback due to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial…
Affected: All versions, or not specified
CVE-2022-22085
7.8
0%
Jun 14
Memory corruption in video due to buffer overflow while reading the dts file in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon…
Affected: All versions, or not specified
CVE-2022-22084
7.8
0%
Jun 14
Memory corruption when extracting qcp audio file due to lack of check on data length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
Affected: All versions, or not specified
CVE-2022-22082
7.8
0%
Jun 14
Memory corruption due to possible buffer overflow while parsing DSF header with corrupted channel count in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
Affected: All versions, or not specified
CVE-2022-22072
7.8
0%
Jun 14
Buffer overflow can occur due to improper validation of NDP application information length in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity,…
Affected: All versions, or not specified
CVE-2021-30288
7.8
0%
Oct 20
Possible stack overflow due to improper length check of TLV while copying the TLV to a local stack variable in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
Affected: All versions, or not specified
CVE-2021-1890
7.8
0%
Jul 13
Improper length check of public exponent in RSA import key function could cause memory corruption
Affected: All versions, or not specified
CVE-2021-1889
7.8
0%
Jul 13
Possible buffer overflow due to lack of length check in Trusted Application in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon…
Affected: All versions, or not specified
CVE-2021-1888
7.8
0%
Jul 13
Memory corruption in key parsing and import function due to double freeing the same heap allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
Affected: All versions, or not specified
CVE-2021-1886
7.8
0%
Jul 13
Incorrect handling of pointers in trusted application key import mechanism could cause memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
Affected: All versions, or not specified
CVE-2018-11968
7.8
0%
May 24
Improper check before assigning value can lead to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity,…
Affected: All versions, or not specified
CVE-2023-33080
7.5
0%
Dec 5
Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame
Affected: All versions, or not specified
CVE-2023-21625
7.5
0%
Aug 8
Information disclosure in Network Services due to buffer over-read while the device receives DNS response
Affected: All versions, or not specified
CVE-2022-33229
7.5
0%
Feb 12
Information disclosure due to buffer over-read in Modem while using static array to process IPv4 packets
Affected: All versions, or not specified
CVE-2022-25738
7.5
0%
Feb 12
Information disclosure in modem due to buffer over-red while performing checksum of packet received
Affected: All versions, or not specified
CVE-2022-25735
7.5
0%
Feb 12
Denial of service in modem due to missing null check while processing TCP or UDP packets from server
Affected: All versions, or not specified
CVE-2022-25734
7.5
0%
Feb 12
Denial of service in modem due to missing null check while processing IP packets with padding
Affected: All versions, or not specified
CVE-2022-25733
7.5
0%
Feb 12
Denial of service in modem due to null pointer dereference while processing DNS packets
Affected: All versions, or not specified
CVE-2022-25732
7.5
0%
Feb 12
Information disclosure in modem due to buffer over read in dns client due to missing length check
Affected: All versions, or not specified
CVE-2022-25728
7.5
0%
Feb 12
Information disclosure in modem due to buffer over-read while processing response from DNS server
Affected: All versions, or not specified
CVE-2022-33235
7.5
0%
Dec 13
Information disclosure due to buffer over-read in WLAN firmware while parsing security context info attributes
Affected: All versions, or not specified
CVE-2022-33239
7.5
0%
Nov 15
Transient DOS due to loop with unreachable exit condition in WLAN firmware while parsing IPV6 extension header
Affected: All versions, or not specified
CVE-2022-25742
7.5
0%
Nov 15
Denial of service in modem due to infinite loop while parsing IGMPv2 packet from server in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music
Affected: All versions, or not specified
Page 1 of 2 · 68 total