QF
Product
Qca4024 Firmware
On CISA KEVExploited in the wild
194
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 21High 144Medium 29Low 0
Watch
Add Qca4024 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-49839 | 9.8 | Feb 3 | Memory corruption during management frame processing due to mismatch in T2LM info element Affected: All versions, or not specified |
| CVE-2024-45569 | 9.8 | Feb 3 | Memory corruption while parsing the ML IE due to invalid frame content Affected: All versions, or not specified |
| CVE-2024-33066 | 9.8 | Oct 7 | Memory corruption while redirecting log file to any file location with any file name Affected: All versions, or not specified |
| CVE-2024-21473 | 9.8 | Apr 1 | Memory corruption while redirecting log file to any file location with any file name Affected: All versions, or not specified |
| CVE-2023-43553 | 9.8 | Mar 4 | Memory corruption while parsing beacon/probe response frame when AP sends more supported links in MLIE Affected: All versions, or not specified |
| CVE-2023-43552 | 9.8 | Mar 4 | Memory corruption while processing MBSSID beacon containing several subelement IE Affected: All versions, or not specified |
| CVE-2023-33083 | 9.8 | Dec 5 | Memory corruption in WLAN Host while processing RRM beacon on the AP Affected: All versions, or not specified |
| CVE-2023-33082 | 9.8 | Dec 5 | Memory corruption while sending an Assoc Request having BTM Query or BTM Response containing MBO IE Affected: All versions, or not specified |
| CVE-2023-33045 | 9.8 | Nov 7 | Memory corruption in WLAN Firmware while parsing a NAN management frame carrying a S3 attribute Affected: All versions, or not specified |
| CVE-2023-33028 | 9.8 | Oct 3 | Memory corruption in WLAN Firmware while doing a memory copy of pmk cache Affected: All versions, or not specified |
| CVE-2022-40514 | 9.8 | Feb 12 | Memory corruption due to buffer copy without checking the size of input in WLAN Firmware while processing CCKM IE in reassoc response frame Affected: All versions, or not specified |
| CVE-2022-33279 | 9.8 | Feb 12 | Memory corruption due to stack based buffer overflow in WLAN having invalid WNM frame length Affected: All versions, or not specified |
| CVE-2022-25729 | 9.8 | Feb 12 | Memory corruption in modem due to improper length check while copying into memory Affected: All versions, or not specified |
| CVE-2022-25727 | 9.8 | Nov 15 | Memory Corruption in modem due to improper length check while copying into memory in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music Affected: All versions, or not specified |
| CVE-2022-25674 | 9.8 | Nov 15 | Cryptographic issues in WLAN during the group key handshake of the WPA/WPA2 protocol in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music Affected: All versions, or not specified |
| CVE-2022-25718 | 9.8 | Oct 19 | Cryptographic issue in WLAN due to improper check on return value while authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics… Affected: All versions, or not specified |
| CVE-2021-35104 | 9.8 | Jun 14 | Possible buffer overflow due to improper parsing of headers while playing the FLAC audio clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2021-30351 | 9.8 | Jan 3 | An out of bound memory access can occur due to improper validation of number of frames being passed during music playback in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1965 | 9.8 | Jul 13 | Possible buffer overflow due to lack of parameter length check during MBSSID scan IE parse in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile,… Affected: All versions, or not specified |
| CVE-2021-35088 | 9.1 | Apr 1 | Possible out of bound read due to improper validation of IE length during SSID IE parse when channel is DFS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2021-1980 | 9.1 | Oct 20 | Possible buffer over read due to lack of length check while parsing beacon IE response in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
Showing 21