QF
Product
Qca6426 Firmware
On CISA KEVExploited in the wild
522
CVEs
5
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 45High 389Medium 66Low 0
Watch
Add Qca6426 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-33111 | 5.5 | Apr 1 | Information disclosure when VI calibration state set by ADSP is greater than MAX_FBSP_STATE in the response payload to AFE calibration command Affected: All versions, or not specified |
| CVE-2023-33090 | 5.5 | Mar 4 | Transient DOS while processing channel information for speaker protection v2 module in ADSP Affected: All versions, or not specified |
| CVE-2023-33064 | 5.5 | Feb 6 | Transient DOS in Audio when invoking callback function of ASM driver Affected: All versions, or not specified |
| CVE-2023-33037 | 5.5 | Jan 2 | Cryptographic issue in Automotive while unwrapping the key secs2d and verifying with RPMB data Affected: All versions, or not specified |
| CVE-2023-33036 | 5.5 | Jan 2 | Permanent DOS in Hypervisor while untrusted VM without PSCI support makes a PSCI call Affected: All versions, or not specified |
| CVE-2023-28554 | 5.5 | Nov 7 | Information Disclosure in Qualcomm IPC while reading values from shared memory in VM Affected: All versions, or not specified |
| CVE-2023-28553 | 5.5 | Nov 7 | Information Disclosure in WLAN Host when processing WMI event command Affected: All versions, or not specified |
| CVE-2023-28571 | 5.5 | Oct 3 | Information disclosure in WLAN HOST while processing the WLAN scan descriptor list during roaming scan Affected: All versions, or not specified |
| CVE-2022-33220 | 5.5 | Sep 5 | Information disclosure in Automotive multimedia due to buffer over-read Affected: All versions, or not specified |
| CVE-2023-21624 | 5.5 | Jul 4 | Information disclosure in DSP Services while loading dynamic module Affected: All versions, or not specified |
| CVE-2022-40533 | 5.5 | Jun 6 | Transient DOS due to untrusted Pointer Dereference in core while sending USB QMI request Affected: All versions, or not specified |
| CVE-2022-40523 | 5.5 | Jun 6 | Information disclosure in Kernel due to indirect branch misprediction Affected: All versions, or not specified |
| CVE-2022-33273 | 5.5 | May 2 | Information disclosure due to buffer over-read in Trusted Execution Environment while QRKS report generation Affected: All versions, or not specified |
| CVE-2022-22075 | 5.5 | Mar 10 | Information Disclosure in Graphics during GPU context switch Affected: All versions, or not specified |
| CVE-2022-40519 | 5.5 | Jan 9 | Information disclosure due to buffer overread in Core Affected: All versions, or not specified |
| CVE-2022-40518 | 5.5 | Jan 9 | Information disclosure due to buffer overread in Core Affected: All versions, or not specified |
The 500 most important CVEs for this product (exploited first, then by severity)
