QF
Product
Qca6174a Firmware
On CISA KEVExploited in the wild
483
CVEs
5
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 76High 345Medium 62Low 0
Watch
Add Qca6174a Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-30342 | 5.9 | Jun 14 | Improper integrity check can lead to race condition between tasks PDCP and RRC? after a valid RRC Command packet has been received in Snapdragon Auto, Snapdragon Compute,… Affected: All versions, or not specified |
| CVE-2025-47369 | 5.5 | Jan 7 | Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID Affected: All versions, or not specified |
| CVE-2025-47330 | 5.5 | Jan 7 | Transient DOS while parsing video packets received from the video firmware Affected: All versions, or not specified |
| CVE-2025-27041 | 5.5 | Oct 9 | Transient DOS while processing video packets received from video firmware Affected: All versions, or not specified |
| CVE-2024-43046 | 5.5 | Apr 7 | There may be information disclosure during memory re-allocation in TZ Secure OS Affected: All versions, or not specified |
| CVE-2024-43051 | 5.5 | Mar 3 | Information disclosure while deriving keys for a session for any Widevine use case Affected: All versions, or not specified |
| CVE-2024-38414 | 5.5 | Feb 3 | Information disclosure while processing information on firmware image during core initialization Affected: All versions, or not specified |
| CVE-2024-23357 | 5.5 | Aug 5 | Transient DOS while importing a PKCS#8-encoded RSA key with zero bytes modulus Affected: All versions, or not specified |
| CVE-2024-21462 | 5.5 | Jul 1 | Transient DOS while loading the TA ELF file Affected: All versions, or not specified |
| CVE-2023-33036 | 5.5 | Jan 2 | Permanent DOS in Hypervisor while untrusted VM without PSCI support makes a PSCI call Affected: All versions, or not specified |
| CVE-2023-33070 | 5.5 | Dec 5 | Transient DOS in Automotive OS due to improper authentication to the secure IO calls Affected: All versions, or not specified |
| CVE-2023-28563 | 5.5 | Nov 7 | Information disclosure in IOE Firmware while handling WMI command Affected: All versions, or not specified |
| CVE-2022-40523 | 5.5 | Jun 6 | Information disclosure in Kernel due to indirect branch misprediction Affected: All versions, or not specified |
| CVE-2022-33273 | 5.5 | May 2 | Information disclosure due to buffer over-read in Trusted Execution Environment while QRKS report generation Affected: All versions, or not specified |
| CVE-2022-22075 | 5.5 | Mar 10 | Information Disclosure in Graphics during GPU context switch Affected: All versions, or not specified |
| CVE-2022-40519 | 5.5 | Jan 9 | Information disclosure due to buffer overread in Core Affected: All versions, or not specified |
| CVE-2022-40518 | 5.5 | Jan 9 | Information disclosure due to buffer overread in Core Affected: All versions, or not specified |
| CVE-2022-25664 | 5.5 | Oct 12 | Information disclosure due to exposure of information while GPU reads the data in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-35135 | 5.5 | Sep 2 | A null pointer dereference may potentially occur during RSA key import in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30331 | 5.5 | Apr 1 | Possible buffer overflow due to improper data validation of external commands sent via DIAG interface in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30278 | 5.5 | Jan 3 | Improper input validation in TrustZone memory transfer interface can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1939 | 5.5 | Sep 17 | Null pointer dereference occurs due to improper validation when the preemption feature enablement is toggled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2021-30294 | 5.5 | Sep 9 | Potential null pointer dereference in KGSL GPU auxiliary command due to improper validation of user input in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Industrial IOT,… Affected: All versions, or not specified |
| CVE-2021-1935 | 5.5 | Sep 9 | Possible null pointer dereference due to lack of validation check for passed pointer during key import in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1904 | 5.5 | Sep 8 | Child process can leak information from parent process due to numeric pids are getting compared and these pid can be reused in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2019-2240 | 5.5 | Jul 25 | While sending the rendered surface content to the screen, Error handling is not properly checked results in an unpredictable behaviour in Snapdragon Auto, Snapdragon Compute,… Affected: All versions, or not specified |
| CVE-2018-11947 | 5.5 | Jun 14 | The txrx stats req might be double freed in the pdev detach when the host driver is unloading in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2024-38426 | 5.3 | Mar 3 | While processing the authentication message in UE, improper authentication may lead to information disclosure Affected: All versions, or not specified |
| CVE-2021-1967 | 5.3 | Oct 20 | Possible stack buffer overflow due to lack of check on the maximum number of post NAN discovery attributes while processing a NAN Match event in Snapdragon Auto, Snapdragon… Affected: All versions, or not specified |
| CVE-2022-22079 | 4.6 | Jan 9 | Denial of service while processing fastboot flash command on mmc due to buffer over read Affected: All versions, or not specified |
| CVE-2022-22078 | 4.6 | Oct 12 | Denial of service in BOOT when partition size for a particular partition is requested due to integer overflow when blocks are calculated in Snapdragon Auto, Snapdragon Compute,… Affected: All versions, or not specified |
| CVE-2021-1899 | 4.6 | Jul 13 | Possible buffer over read due to lack of length check while flashing meta images in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables Affected: All versions, or not specified |
| CVE-2021-1896 | 4.3 | Jul 13 | Weak configuration in WLAN could cause forwarding of unencrypted packets from one client to another in Snapdragon Compute, Snapdragon Connectivity Affected: All versions, or not specified |
