QF
Product
Qca6174a Firmware
On CISA KEVExploited in the wild
483
CVEs
5
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 76High 345Medium 62Low 0
Watch
Add Qca6174a Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-10526 | 9.8 | Mar 5 | Out of bound write in WLAN driver due to NULL character not properly placed after SSID name in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity,… Affected: All versions, or not specified |
| CVE-2019-10557 | 9.8 | Dec 18 | Out-of-bound read in the wireless driver in the Linux kernel due to lack of check of buffer length Affected: All versions, or not specified |
| CVE-2019-2268 | 9.8 | Nov 21 | Possible OOB read issue in P2P action frames while handling WLAN management frame in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2019-2302 | 9.8 | Nov 6 | While processing vendor command which contains corrupted channel count, an integer overflow occurs and finally will lead to heap overflow Affected: All versions, or not specified |
| CVE-2019-10542 | 9.8 | Nov 6 | Buffer over-read may occur when downloading a corrupted firmware file that has chunk length in header which doesn`t match the contents in Snapdragon Auto, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2019-10505 | 9.8 | Nov 6 | Out of bound access while processing a non-standard IE measurement request with length crossing past the size of frame in Snapdragon Auto, Snapdragon Consumer Electronics… Affected: All versions, or not specified |
| CVE-2019-10540 | 9.8 | Sep 30 | Buffer overflow in WLAN NAN function due to lack of check of count value received in NAN availability attribute in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2019-10539 | 9.8 | Sep 30 | Possible buffer overflow issue due to lack of length check when parsing the extended cap IE header length in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics… Affected: All versions, or not specified |
| CVE-2019-2309 | 9.8 | Jul 25 | While storing calibrated data from firmware in cache, An integer overflow may occur since data length received may exceed real data length Affected: All versions, or not specified |
| CVE-2019-2307 | 9.8 | Jul 25 | Possible integer underflow due to lack of validation before calculation of data length in 802.11 Rx management configuration in Snapdragon Auto, Snapdragon Consumer Electronics… Affected: All versions, or not specified |
| CVE-2019-2305 | 9.8 | Jul 25 | Out of bound access when reason code is extracted from frame data without validating the frame length in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2019-2276 | 9.8 | Jul 25 | Possible out of bound read occurs while processing beaconing request due to lack of check on action frames received from user controlled space in Snapdragon Auto, Snapdragon… Affected: All versions, or not specified |
| CVE-2018-13924 | 9.8 | Jul 22 | Lack of check to prevent the buffer length taking negative values can lead to stack overflow Affected: All versions, or not specified |
| CVE-2018-11955 | 9.8 | Jun 14 | Lack of check on length of reason-code fetched from payload may lead driver access the memory not allocated to the frame and results in out of bound read in Snapdragon Auto,… Affected: All versions, or not specified |
| CVE-2018-11953 | 9.8 | May 24 | While processing ssid IE length from remote AP, possible out-of-bounds access may occur due to crafted ssid IE length in Snapdragon Auto, Snapdragon Consumer Electronics… Affected: All versions, or not specified |
| CVE-2018-11936 | 9.8 | May 24 | Index of array is processed in a wrong way inside a while loop and result in invalid index (-1 or something else) leads to out of bound memory access Affected: All versions, or not specified |
| CVE-2016-10481 | 9.8 | Apr 18 | In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, QCA4531, QCA6174A,… Affected: All versions, or not specified |
| CVE-2015-9220 | 9.8 | Apr 18 | In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear IPQ4019, IPQ8064, MDM9206, MDM9607, MDM9640, MDM9650, QCA4531,… Affected: All versions, or not specified |
| CVE-2014-9998 | 9.8 | Apr 18 | In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear IPQ4019, IPQ8064, MDM9206, MDM9607,… Affected: All versions, or not specified |
| CVE-2014-10054 | 9.8 | Apr 18 | In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640,… Affected: All versions, or not specified |
| CVE-2025-21450 | 9.1 | Jul 8 | Cryptographic issue occurs due to use of insecure connection method while downloading Affected: All versions, or not specified |
| CVE-2023-33054 | 9.1 | Dec 5 | Cryptographic issue in GPS HLOS Driver while downloading Qualcomm GNSS assistance data Affected: All versions, or not specified |
| CVE-2022-22062 | 9.1 | Sep 2 | An out-of-bounds read can occur while parsing a server certificate due to improper length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-35083 | 9.1 | Jun 14 | Possible out of bound read due to improper validation of certificate chain in SSL or Internet key exchange in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2021-30284 | 9.1 | Nov 12 | Possible information exposure and denial of service due to NAS not dropping messages when integrity check fails in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2021-1977 | 9.1 | Oct 20 | Possible buffer over read due to improper validation of frame length while processing AEAD decryption during ASSOC response in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
