QF
Product
Qca6421 Firmware
by Qualcomm · last CVE Nov 4, 2025
On CISA KEVExploited in the wild
309
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 22High 242Medium 45Low 0
Watch

Add Qca6421 Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-28537
7.8
0%
Aug 8
Memory corruption while allocating memory in COmxApeDec module in Audio
Affected: All versions, or not specified
CVE-2023-22666
7.8
0%
Aug 8
Memory Corruption in Audio while playing amrwbplus clips with modified content
Affected: All versions, or not specified
CVE-2023-21651
7.8
0%
Aug 8
Memory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE
Affected: All versions, or not specified
CVE-2023-21649
7.8
0%
Aug 8
Memory corruption in WLAN while running doDriverCmd for an unspecific command
Affected: All versions, or not specified
CVE-2023-28542
7.8
0%
Jul 4
Memory Corruption in WLAN HOST while fetching TX status information
Affected: All versions, or not specified
CVE-2023-28541
7.8
0%
Jul 4
Memory Corruption in Data Modem while processing DMA buffer release event about CFR data
Affected: All versions, or not specified
CVE-2023-22667
7.8
0%
Jul 4
Memory Corruption in Audio while allocating the ion buffer during the music playback
Affected: All versions, or not specified
CVE-2023-22387
7.8
0%
Jul 4
Arbitrary memory overwrite when VM gets compromised in TX write leading to Memory Corruption
Affected: All versions, or not specified
CVE-2023-22386
7.8
0%
Jul 4
Memory Corruption in WLAN HOST while processing WLAN FW request to allocate memory
Affected: All versions, or not specified
CVE-2023-21633
7.8
0%
Jul 4
Memory Corruption in Linux while processing QcRilRequestImsRegisterMultiIdentityMessage request
Affected: All versions, or not specified
CVE-2022-40529
7.8
0%
Jun 6
Memory corruption due to improper access control in kernel while processing a mapping request from root process
Affected: All versions, or not specified
CVE-2022-40507
7.8
1%
Jun 6
Memory corruption due to double free in Core while mapping HLOS address to the list
Affected: All versions, or not specified
CVE-2022-33307
7.8
0%
Jun 6
Memory Corruption due to double free in automotive when a bad HLOS address for one of the lists to be mapped is passed
Affected: All versions, or not specified
CVE-2022-33264
7.8
0%
Jun 6
Memory corruption in modem due to stack based buffer overflow while parsing OTASP Key Generation Request Message
Affected: All versions, or not specified
CVE-2023-21666
7.8
0%
May 2
Memory Corruption in Graphics while accessing a buffer allocated through the graphics pool
Affected: All versions, or not specified
CVE-2023-21665
7.8
0%
May 2
Memory corruption in Graphics while importing a file
Affected: All versions, or not specified
CVE-2022-25713
7.8
0%
May 2
Memory corruption in Automotive due to Improper Restriction of Operations within the Bounds of a Memory Buffer while exporting a shared key
Affected: All versions, or not specified
CVE-2022-33302
7.8
0%
Apr 13
Memory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than command length
Affected: All versions, or not specified
CVE-2022-33296
7.8
0%
Apr 13
Memory corruption due to integer overflow to buffer overflow in Modem while parsing Traffic Channel Neighbor List Update message
Affected: All versions, or not specified
CVE-2022-33269
7.8
0%
Apr 13
Memory corruption due to integer overflow or wraparound in Core while DDR memory assignment
Affected: All versions, or not specified
CVE-2022-33231
7.8
0%
Apr 13
Memory corruption due to double free in core while initializing the encryption key
Affected: All versions, or not specified
CVE-2022-40530
7.8
0%
Mar 10
Memory corruption in WLAN due to integer overflow to buffer overflow in WLAN during initialization phase
Affected: All versions, or not specified
CVE-2022-33278
7.8
0%
Mar 10
Memory corruption due to buffer copy without checking the size of input in HLOS when input message size is larger than the buffer capacity
Affected: All versions, or not specified
CVE-2022-33242
7.8
0%
Mar 10
Memory corruption due to improper authentication in Qualcomm IPC while loading unsigned lib in audio PD
Affected: All versions, or not specified
CVE-2022-25709
7.8
0%
Mar 10
Memory corruption in modem due to use of out of range pointer offset while processing qmi msg
Affected: All versions, or not specified
CVE-2022-25705
7.8
0%
Mar 10
Memory corruption in modem due to integer overflow to buffer overflow while handling APDU response
Affected: All versions, or not specified
CVE-2022-25694
7.8
0%
Mar 10
Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM
Affected: All versions, or not specified
CVE-2022-33277
7.8
0%
Feb 12
Memory corruption in modem due to buffer copy without checking size of input while receiving WMI command
Affected: All versions, or not specified
CVE-2022-33248
7.8
0%
Feb 12
Memory corruption in User Identity Module due to integer overflow to buffer overflow when a segement is received via qmi http
Affected: All versions, or not specified
CVE-2022-33243
7.8
0%
Feb 12
Memory corruption due to improper access control in Qualcomm IPC
Affected: All versions, or not specified
CVE-2022-33233
7.8
0%
Feb 12
Memory corruption due to configuration weakness in modem wile sending command to write protected files
Affected: All versions, or not specified
CVE-2022-33232
7.8
0%
Feb 12
Memory corruption due to buffer copy without checking size of input while running memory sharing tests with large scattered memory
Affected: All versions, or not specified
CVE-2022-40520
7.8
1%
Jan 9
Memory corruption due to stack-based buffer overflow in Core
Affected: All versions, or not specified
CVE-2022-40517
7.8
0%
Jan 9
Memory corruption in core due to stack-based buffer overflow
Affected: All versions, or not specified
CVE-2022-40516
7.8
1%
Jan 9
Memory corruption in Core due to stack-based buffer overflow
Affected: All versions, or not specified
CVE-2022-33276
7.8
0%
Jan 9
Memory corruption due to buffer copy without checking size of input in modem while receiving WMI_REQUEST_STATS_CMDID command
Affected: All versions, or not specified
CVE-2022-33266
7.8
0%
Jan 9
Memory corruption in Audio due to integer overflow to buffer overflow while music playback of clips like amr,evrc,qcelp with modified content
Affected: All versions, or not specified
CVE-2022-25746
7.8
0%
Jan 9
Memory corruption in kernel due to missing checks when updating the access rights of a memextent mapping
Affected: All versions, or not specified
CVE-2022-25695
7.8
0%
Dec 13
Memory corruption in MODEM due to Improper Validation of Array Index while processing GSTK Proactive commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
Affected: All versions, or not specified
CVE-2022-25682
7.8
0%
Dec 13
Memory corruption in MODEM UIM due to usage of out of range pointer offset while decoding command from card in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
Affected: All versions, or not specified
CVE-2022-25681
7.8
0%
Dec 13
Possible memory corruption in kernel while performing memory access due to hypervisor not correctly invalidated the processor translation caches in Snapdragon Auto, Snapdragon…
Affected: All versions, or not specified
CVE-2022-25743
7.8
0%
Nov 15
Memory corruption in graphics due to use-after-free while importing graphics buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
Affected: All versions, or not specified
CVE-2022-25724
7.8
0%
Nov 15
Memory corruption in graphics due to buffer overflow while validating the user address in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
Affected: All versions, or not specified
CVE-2022-25660
7.8
0%
Oct 12
Memory corruption due to double free issue in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
Affected: All versions, or not specified
CVE-2022-25661
7.8
0%
Oct 12
Memory corruption due to untrusted pointer dereference in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
Affected: All versions, or not specified
CVE-2022-22092
7.8
0%
Sep 16
Memory corruption in kernel due to use after free issue in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
Affected: All versions, or not specified
CVE-2022-22074
7.8
0%
Sep 16
Memory Corruption during wma file playback due to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial…
Affected: All versions, or not specified
CVE-2022-22066
7.8
0%
Sep 16
Memory corruption occurs while processing command received from HLOS due to improper length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
Affected: All versions, or not specified
CVE-2022-22070
7.8
0%
Sep 2
Memory corruption in audio due to lack of check of invalid routing address into APR Routing table in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
Affected: All versions, or not specified
CVE-2022-22069
7.8
0%
Sep 2
Devices with keyprotect off may store unencrypted keybox in RPMB and cause cryptographic issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
Affected: All versions, or not specified
Page 3 of 7 · 309 total