QF
Product
Qca4024 Firmware
On CISA KEVExploited in the wild
200
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 21High 150Medium 29Low 0
Watch
Add Qca4024 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-28549 | 7.8 | Sep 5 | Memory corruption in WLAN HAL while parsing Rx buffer in processing TLV payload Affected: All versions, or not specified |
| CVE-2023-28548 | 7.8 | Sep 5 | Memory corruption in WLAN HAL while processing Tx/Rx commands from QDART Affected: All versions, or not specified |
| CVE-2023-28544 | 7.8 | Sep 5 | Memory corruption in WLAN while sending transmit command from HLOS to UTF handlers Affected: All versions, or not specified |
| CVE-2022-33275 | 7.8 | Sep 5 | Memory corruption due to improper validation of array index in WLAN HAL when received lm_itemNum is out of range Affected: All versions, or not specified |
| CVE-2023-28537 | 7.8 | Aug 8 | Memory corruption while allocating memory in COmxApeDec module in Audio Affected: All versions, or not specified |
| CVE-2023-28541 | 7.8 | Jul 4 | Memory Corruption in Data Modem while processing DMA buffer release event about CFR data Affected: All versions, or not specified |
| CVE-2023-24854 | 7.8 | Jul 4 | Memory Corruption in WLAN HOST while parsing QMI WLAN Firmware response message Affected: All versions, or not specified |
| CVE-2023-24851 | 7.8 | Jul 4 | Memory Corruption in WLAN HOST while parsing QMI response message from firmware Affected: All versions, or not specified |
| CVE-2023-22387 | 7.8 | Jul 4 | Arbitrary memory overwrite when VM gets compromised in TX write leading to Memory Corruption Affected: All versions, or not specified |
| CVE-2023-22386 | 7.8 | Jul 4 | Memory Corruption in WLAN HOST while processing WLAN FW request to allocate memory Affected: All versions, or not specified |
| CVE-2022-40522 | 7.8 | Jun 6 | Memory corruption in Linux Networking due to double free while handling a hyp-assign Affected: All versions, or not specified |
| CVE-2022-40530 | 7.8 | Mar 10 | Memory corruption in WLAN due to integer overflow to buffer overflow in WLAN during initialization phase Affected: All versions, or not specified |
| CVE-2022-33277 | 7.8 | Feb 12 | Memory corruption in modem due to buffer copy without checking size of input while receiving WMI command Affected: All versions, or not specified |
| CVE-2022-33243 | 7.8 | Feb 12 | Memory corruption due to improper access control in Qualcomm IPC Affected: All versions, or not specified |
| CVE-2022-40517 | 7.8 | Jan 9 | Memory corruption in core due to stack-based buffer overflow Affected: All versions, or not specified |
| CVE-2022-40516 | 7.8 | Jan 9 | Memory corruption in Core due to stack-based buffer overflow Affected: All versions, or not specified |
| CVE-2022-33276 | 7.8 | Jan 9 | Memory corruption due to buffer copy without checking size of input in modem while receiving WMI_REQUEST_STATS_CMDID command Affected: All versions, or not specified |
| CVE-2022-25677 | 7.8 | Dec 13 | Memory corruption in diag due to use after free while processing dci packet in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2022-25652 | 7.8 | Sep 16 | Cryptographic issues in BSP due to improper hash verification in Snapdragon Wired Infrastructure and Networking Affected: All versions, or not specified |
| CVE-2021-30281 | 7.8 | Jun 14 | Possible unauthorized access to secure space due to improper check of data allowed while flashing the no access control device configuration in Snapdragon Auto, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-35103 | 7.8 | Apr 1 | Possible out of bound write due to improper validation of number of timer values received from firmware while syncing timers in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1950 | 7.8 | Apr 1 | Improper cleaning of secure memory between authenticated users can lead to face authentication bypass in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-35069 | 7.8 | Feb 11 | Improper validation of data length received from DMA buffer can lead to memory corruption Affected: All versions, or not specified |
| CVE-2021-30337 | 7.8 | Jan 3 | Possible use after free when process shell memory is freed using IOCTL call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30335 | 7.8 | Jan 3 | Possible assertion in QOS request due to improper validation when multiple add or update request are received simultaneously in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30303 | 7.8 | Jan 3 | Possible buffer overflow due to lack of buffer length check when segmented WMI command is received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30272 | 7.8 | Jan 3 | Possible null pointer dereference in thread cache operation handler due to lack of validation of user provided input in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30271 | 7.8 | Jan 3 | Possible null pointer dereference in trap handler due to lack of thread ID validation before dereferencing it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2021-30288 | 7.8 | Oct 20 | Possible stack overflow due to improper length check of TLV while copying the TLV to a local stack variable in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2026-25275 | 7.5 | Sep 17 | Buffer Over-read in WLAN Firmware Affected: All versions, or not specified |
| CVE-2026-21367 | 7.5 | Apr 6 | Buffer Over-read in WLAN Firmware Affected: All versions, or not specified |
| CVE-2025-47326 | 7.5 | Sep 24 | Buffer Over-read in WLAN HAL Affected: All versions, or not specified |
| CVE-2025-27073 | 7.5 | Aug 6 | Reachable Assertion in WLAN Firmware Affected: All versions, or not specified |
| CVE-2025-27057 | 7.5 | Jul 8 | Buffer Over-read in WLAN Host Affected: All versions, or not specified |
| CVE-2025-21446 | 7.5 | Jul 8 | Buffer Over-read in WLAN Firmware Affected: All versions, or not specified |
| CVE-2025-21463 | 7.5 | Jun 3 | Buffer Over-read in WLAN Host Communication Affected: All versions, or not specified |
| CVE-2024-45558 | 7.5 | Jan 6 | Buffer Over-read in WLAN Host Cmn Affected: All versions, or not specified |
| CVE-2024-33057 | 7.5 | Sep 2 | Buffer Over-read in WLAN Host Communication Affected: 0 |
| CVE-2024-33050 | 7.5 | Sep 2 | Buffer Over-read in WLAN Host Communication Affected: 0 |
| CVE-2024-33048 | 7.5 | Sep 2 | Buffer Over-read in WLAN Host Affected: 0 |
| CVE-2024-33026 | 7.5 | Aug 5 | Buffer Over-read in WLAN Host Affected: 0 |
| CVE-2024-33025 | 7.5 | Aug 5 | Buffer Over-read in WLAN Host Affected: 0 |
| CVE-2024-33024 | 7.5 | Aug 5 | Integer Overflow or Wraparound in WLAN Host Affected: 0 |
| CVE-2024-33019 | 7.5 | Aug 5 | Buffer Over-read in WLAN Host Affected: 0 |
| CVE-2024-33018 | 7.5 | Aug 5 | Buffer Over-read in WLAN Host Affected: 0 |
| CVE-2024-33015 | 7.5 | Aug 5 | Buffer Over-read in WLAN Host Affected: 0 |
| CVE-2024-33013 | 7.5 | Aug 5 | Buffer Over-read in WLAN Host Affected: 0 |
| CVE-2024-33012 | 7.5 | Aug 5 | Buffer Over-read in WLAN Host Affected: 0 |
| CVE-2024-33011 | 7.5 | Aug 5 | Buffer Over-read in WLAN Host Affected: 0 |
| CVE-2024-33010 | 7.5 | Aug 5 | Use After Free in WLAN Host Affected: 0 |
