QF
Product
Qca6420 Firmware
by Qualcomm · last CVE Oct 6, 2026
On CISA KEVExploited in the wild
457
CVEs
2
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 41High 338Medium 78Low 0
Watch

Add Qca6420 Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-33269
7.8
0%
Apr 13
Memory corruption due to integer overflow or wraparound in Core while DDR memory assignment
Affected: All versions, or not specified
CVE-2022-33231
7.8
0%
Apr 13
Memory corruption due to double free in core while initializing the encryption key
Affected: All versions, or not specified
CVE-2022-40530
7.8
0%
Mar 10
Memory corruption in WLAN due to integer overflow to buffer overflow in WLAN during initialization phase
Affected: All versions, or not specified
CVE-2022-33278
7.8
0%
Mar 10
Memory corruption due to buffer copy without checking the size of input in HLOS when input message size is larger than the buffer capacity
Affected: All versions, or not specified
CVE-2022-33260
7.8
0%
Mar 10
Memory corruption due to stack based buffer overflow in core while sending command from USB of large size
Affected: All versions, or not specified
CVE-2022-33245
7.8
0%
Mar 10
Memory corruption in WLAN due to use after free
Affected: All versions, or not specified
CVE-2022-33242
7.8
0%
Mar 10
Memory corruption due to improper authentication in Qualcomm IPC while loading unsigned lib in audio PD
Affected: All versions, or not specified
CVE-2022-25705
7.8
0%
Mar 10
Memory corruption in modem due to integer overflow to buffer overflow while handling APDU response
Affected: All versions, or not specified
CVE-2022-25694
7.8
0%
Mar 10
Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM
Affected: All versions, or not specified
CVE-2022-33277
7.8
0%
Feb 12
Memory corruption in modem due to buffer copy without checking size of input while receiving WMI command
Affected: All versions, or not specified
CVE-2022-33248
7.8
0%
Feb 12
Memory corruption in User Identity Module due to integer overflow to buffer overflow when a segement is received via qmi http
Affected: All versions, or not specified
CVE-2022-33246
7.8
0%
Feb 12
Memory corruption in Audio due to use of out-of-range pointer offset while Initiating a voice call session from user space with invalid session id
Affected: All versions, or not specified
CVE-2022-33243
7.8
0%
Feb 12
Memory corruption due to improper access control in Qualcomm IPC
Affected: All versions, or not specified
CVE-2022-33233
7.8
0%
Feb 12
Memory corruption due to configuration weakness in modem wile sending command to write protected files
Affected: All versions, or not specified
CVE-2022-33232
7.8
0%
Feb 12
Memory corruption due to buffer copy without checking size of input while running memory sharing tests with large scattered memory
Affected: All versions, or not specified
CVE-2022-40520
7.8
1%
Jan 9
Memory corruption due to stack-based buffer overflow in Core
Affected: All versions, or not specified
CVE-2022-40517
7.8
0%
Jan 9
Memory corruption in core due to stack-based buffer overflow
Affected: All versions, or not specified
CVE-2022-40516
7.8
1%
Jan 9
Memory corruption in Core due to stack-based buffer overflow
Affected: All versions, or not specified
CVE-2022-33266
7.8
0%
Jan 9
Memory corruption in Audio due to integer overflow to buffer overflow while music playback of clips like amr,evrc,qcelp with modified content
Affected: All versions, or not specified
CVE-2022-25746
7.8
0%
Jan 9
Memory corruption in kernel due to missing checks when updating the access rights of a memextent mapping
Affected: All versions, or not specified
CVE-2022-25721
7.8
0%
Jan 9
Memory corruption in video driver due to type confusion error during video playback
Affected: All versions, or not specified
CVE-2022-25717
7.8
0%
Jan 9
Memory corruption in display due to double free while allocating frame buffer memory
Affected: All versions, or not specified
CVE-2022-25715
7.8
0%
Jan 9
Memory corruption in display driver due to incorrect type casting while accessing the fence structure fields
Affected: All versions, or not specified
CVE-2022-25712
7.8
0%
Dec 13
Memory corruption in camera due to buffer copy without checking size of input in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon…
Affected: All versions, or not specified
CVE-2022-25711
7.8
0%
Dec 13
Memory corruption in camera due to improper validation of array index in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon…
Affected: All versions, or not specified
CVE-2022-25695
7.8
0%
Dec 13
Memory corruption in MODEM due to Improper Validation of Array Index while processing GSTK Proactive commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
Affected: All versions, or not specified
CVE-2022-25682
7.8
0%
Dec 13
Memory corruption in MODEM UIM due to usage of out of range pointer offset while decoding command from card in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
Affected: All versions, or not specified
CVE-2022-25681
7.8
0%
Dec 13
Possible memory corruption in kernel while performing memory access due to hypervisor not correctly invalidated the processor translation caches in Snapdragon Auto, Snapdragon…
Affected: All versions, or not specified
CVE-2022-25677
7.8
0%
Dec 13
Memory corruption in diag due to use after free while processing dci packet in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon…
Affected: All versions, or not specified
CVE-2022-25743
7.8
0%
Nov 15
Memory corruption in graphics due to use-after-free while importing graphics buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
Affected: All versions, or not specified
CVE-2022-25724
7.8
0%
Nov 15
Memory corruption in graphics due to buffer overflow while validating the user address in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
Affected: All versions, or not specified
CVE-2022-25661
7.8
0%
Oct 12
Memory corruption due to untrusted pointer dereference in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
Affected: All versions, or not specified
CVE-2022-25660
7.8
0%
Oct 12
Memory corruption due to double free issue in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
Affected: All versions, or not specified
CVE-2022-22058
7.8
0%
Sep 26
Memory corruption due to use after free issue in kernel while processing ION handles in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…
Affected: All versions, or not specified
CVE-2022-22074
7.8
0%
Sep 16
Memory Corruption during wma file playback due to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial…
Affected: All versions, or not specified
CVE-2022-22066
7.8
0%
Sep 16
Memory corruption occurs while processing command received from HLOS due to improper length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
Affected: All versions, or not specified
CVE-2022-22080
7.8
0%
Sep 2
Improper validation of backend id in PCM routing process can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
Affected: All versions, or not specified
CVE-2022-22070
7.8
0%
Sep 2
Memory corruption in audio due to lack of check of invalid routing address into APR Routing table in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
Affected: All versions, or not specified
CVE-2022-22069
7.8
0%
Sep 2
Devices with keyprotect off may store unencrypted keybox in RPMB and cause cryptographic issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
Affected: All versions, or not specified
CVE-2022-22059
7.8
0%
Sep 2
Memory corruption due to out of bound read while parsing a video file in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
Affected: All versions, or not specified
CVE-2021-35132
7.8
0%
Sep 2
Out of bound write in DSP service due to improper bound check for response buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
Affected: All versions, or not specified
CVE-2021-35122
7.8
0%
Sep 2
Non-secure region can try modifying RG permissions of IO space xPUs due to improper input validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
Affected: All versions, or not specified
CVE-2022-22085
7.8
0%
Jun 14
Memory corruption in video due to buffer overflow while reading the dts file in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon…
Affected: All versions, or not specified
CVE-2022-22084
7.8
0%
Jun 14
Memory corruption when extracting qcp audio file due to lack of check on data length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
Affected: All versions, or not specified
CVE-2022-22082
7.8
0%
Jun 14
Memory corruption due to possible buffer overflow while parsing DSF header with corrupted channel count in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
Affected: All versions, or not specified
CVE-2022-22068
7.8
0%
Jun 14
kernel event may contain unexpected content which is not generated by NPU software in asynchronous execution mode in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
Affected: All versions, or not specified
CVE-2021-35094
7.8
0%
Jun 14
Improper verification of timeout-based authentication in identity credential can lead to invalid authorization in HLOS in Snapdragon Auto, Snapdragon Compute, Snapdragon…
Affected: All versions, or not specified
CVE-2021-35090
7.8
0%
Jun 14
Possible hypervisor memory corruption due to TOC TOU race condition when updating address mappings in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
Affected: All versions, or not specified
CVE-2021-30350
7.8
0%
Jun 14
Lack of MBN header size verification against input buffer can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
Affected: All versions, or not specified
CVE-2021-30281
7.8
0%
Jun 14
Possible unauthorized access to secure space due to improper check of data allowed while flashing the no access control device configuration in Snapdragon Auto, Snapdragon…
Affected: All versions, or not specified
Page 5 of 10 · 457 total
1…456…10