QF
Product
Qca6595 Firmware
On CISA KEVExploited in the wild
405
CVEs
3
On KEV
9.8
Max CVSS
2
New 30D
Severity mix
Critical 27High 316Medium 62Low 0
Watch
Add Qca6595 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-43047 In wildKEV | 7.8 | Oct 7 | Use After Free in DSP Service Affected: 0 |
| CVE-2023-33107 In wildKEV | 7.8 | Dec 5 | Integer Overflow or Wraparound in Graphics Linux Affected: 0 |
| CVE-2023-33106 In wildKEV | 7.8 | Dec 5 | Use of Out-of-range Pointer Offset in Graphics Affected: 0 |
| CVE-2024-53029 | 8.8 | Mar 3 | Memory corruption while reading a value from a buffer controlled by the Guest Virtual Machine Affected: All versions, or not specified |
| CVE-2023-43556 | 8.8 | Jun 3 | Memory corruption in Hypervisor when platform information mentioned is not aligned Affected: All versions, or not specified |
| CVE-2023-28585 | 8.8 | Dec 5 | Memory corruption while loading an ELF segment in TEE Kernel Affected: All versions, or not specified |
| CVE-2023-28572 | 8.8 | Nov 7 | Memory corruption in WLAN HOST while processing the WLAN scan descriptor list Affected: All versions, or not specified |
| CVE-2022-33288 | 8.8 | Apr 13 | Memory corruption due to buffer copy without checking the size of input in Core while sending SCM command to get write protection information Affected: All versions, or not specified |
| CVE-2020-11303 | 8.6 | Oct 20 | Accepting AMSDU frames with mismatched destination and source address can lead to information disclosure in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2025-47345 | 8.4 | Jan 6 | Reusing a Nonce, Key Pair in Encryption in Automotive Platform Affected: All versions, or not specified |
| CVE-2025-47372 | 8.4 | Dec 18 | Buffer Copy Without Checking Size of Input in Boot Affected: All versions, or not specified |
| CVE-2024-21481 | 8.4 | Aug 5 | Memory corruption when preparing a shared memory notification for a memparcel in Resource Manager Affected: All versions, or not specified |
| CVE-2021-1949 | 8.4 | Oct 20 | Possible integer overflow due to improper check of batch count value while sanitizer is enabled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1932 | 8.4 | Oct 20 | Improper access control in trusted application environment can cause unauthorized access to CDSP or ADSP VM memory with either privilege in Snapdragon Auto, Snapdragon Compute,… Affected: All versions, or not specified |
| CVE-2021-1917 | 8.4 | Oct 20 | Null pointer dereference can occur due to memory allocation failure in DIAG in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1913 | 8.4 | Oct 20 | Possible integer overflow due to improper length check while updating grace period and count record in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2023-22382 | 8.2 | Oct 3 | Weak configuration in Automotive while VM is processing a listener request from TEE Affected: All versions, or not specified |
| CVE-2024-53011 | 7.9 | Mar 3 | Information disclosure may occur due to improper permission and access controls to Video Analytics engine Affected: All versions, or not specified |
| CVE-2026-25291 | 7.8 | Oct 6 | Use After Free in Graphics Affected: All versions, or not specified |
| CVE-2026-21366 | 7.8 | Aug 4 | Integer Overflow or Wraparound in Data Network Stack & Connectivity Affected: All versions, or not specified |
| CVE-2025-59606 | 7.8 | Jun 1 | NULL Pointer Dereference in HLOS Affected: All versions, or not specified |
| CVE-2025-59605 | 7.8 | Jun 1 | Out-of-bounds Write in HLOS Affected: All versions, or not specified |
| CVE-2025-47391 | 7.8 | Apr 6 | Stack-based Buffer Overflow in Camera Driver Affected: All versions, or not specified |
| CVE-2025-59600 | 7.8 | Mar 2 | Buffer Over-read in Graphics Affected: All versions, or not specified |
| CVE-2025-47386 | 7.8 | Mar 2 | Use After Free in Automotive Audio Affected: All versions, or not specified |
| CVE-2025-47385 | 7.8 | Mar 2 | Improper Access Control for Register Interface in SCE-Mink Affected: All versions, or not specified |
| CVE-2025-47381 | 7.8 | Mar 2 | Use After Free in Automotive Audio Affected: All versions, or not specified |
| CVE-2025-47377 | 7.8 | Mar 2 | Use After Free in Automotive Audio Affected: All versions, or not specified |
| CVE-2025-47376 | 7.8 | Mar 2 | Use After Free in Automotive Audio Affected: All versions, or not specified |
| CVE-2025-47375 | 7.8 | Mar 2 | Use After Free in Automotive Audio Affected: All versions, or not specified |
| CVE-2025-47373 | 7.8 | Mar 2 | Out-of-bounds Write in Automotive Affected: All versions, or not specified |
| CVE-2025-47397 | 7.8 | Feb 2 | Improper Release of Memory Before Removing Last Reference in Graphics Affected: All versions, or not specified |
| CVE-2025-47366 | 7.8 | Feb 2 | Exposed Dangerous Method or Function in HLOS Affected: All versions, or not specified |
| CVE-2025-47364 | 7.8 | Feb 2 | Integer Overflow or Wraparound in Automotive Affected: All versions, or not specified |
| CVE-2025-47363 | 7.8 | Feb 2 | Integer Overflow or Wraparound in Automotive Affected: All versions, or not specified |
| CVE-2025-47393 | 7.8 | Jan 6 | Improper Validation of Array Index in Automotive Linux OS Affected: All versions, or not specified |
| CVE-2025-47346 | 7.8 | Jan 6 | Out-of-bounds Write in HLOS Affected: All versions, or not specified |
| CVE-2025-47382 | 7.8 | Dec 18 | Incorrect Authorization in Boot Affected: All versions, or not specified |
| CVE-2025-47323 | 7.8 | Dec 18 | Integer Overflow or Wraparound in Audio Affected: All versions, or not specified |
| CVE-2025-47322 | 7.8 | Dec 18 | Use After Free in Automotive Linux OS Affected: All versions, or not specified |
| CVE-2025-27063 | 7.8 | Dec 18 | Use After Free in Video Affected: All versions, or not specified |
| CVE-2025-47365 | 7.8 | Nov 4 | Integer Overflow or Wraparound in Automotive Platform Affected: All versions, or not specified |
| CVE-2025-47361 | 7.8 | Nov 4 | Improper Validation of Array Index in Automotive Software platform based on QNX Affected: All versions, or not specified |
| CVE-2025-47360 | 7.8 | Nov 4 | Stack-based Buffer Overflow in Automotive Software platform based on QNX Affected: All versions, or not specified |
| CVE-2025-47357 | 7.8 | Nov 4 | Missing Authentication for Critical Function in SMSS Affected: All versions, or not specified |
| CVE-2025-47353 | 7.8 | Nov 4 | Exposed Dangerous Method or Function in Automotive Software platform based on QNX Affected: All versions, or not specified |
| CVE-2025-47347 | 7.8 | Oct 9 | Stack-based Buffer Overflow in Automotive Software platform based on QNX Affected: All versions, or not specified |
| CVE-2025-47329 | 7.8 | Sep 24 | Release of Invalid Pointer or Reference in Android Core Affected: All versions, or not specified |
| CVE-2025-47315 | 7.8 | Sep 24 | Use After Free in Automotive Software platform based on QNX Affected: All versions, or not specified |
| CVE-2025-47314 | 7.8 | Sep 24 | Improper Input Validation in Automotive Software platform based on QNX Affected: All versions, or not specified |
