QF
Product
Qca6595au Firmware
On CISA KEVExploited in the wild
678
CVEs
4
On KEV
9.8
Max CVSS
2
New 30D
Severity mix
Critical 59High 441Medium 0Low 0
Watch
Add Qca6595au Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-1892 | 7.8 | Apr 7 | Memory corruption due to improper input validation while processing IO control which is nonstandard in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics… Affected: All versions, or not specified |
| CVE-2020-11242 | 7.8 | Apr 7 | User could gain access to secure memory due to incorrect argument into address range validation api used in SDI to capture requested contents in Snapdragon Industrial IOT,… Affected: All versions, or not specified |
| CVE-2020-11237 | 7.8 | Apr 7 | Memory crash when accessing histogram type KPI input received due to lack of check of histogram definition before accessing it in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2020-11253 | 7.8 | Feb 22 | Arbitrary memory write issue in video driver while setting the internal buffers in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2020-11187 | 7.8 | Feb 22 | Possible memory corruption in BSI module due to improper validation of parameter count in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Mobile Affected: All versions, or not specified |
| CVE-2026-25275 | 7.5 | Sep 17 | Buffer Over-read in WLAN Firmware Affected: All versions, or not specified |
| CVE-2026-24084 | 7.5 | Aug 4 | Insecure Security Identifier Mechanism in Multi-Mode Call Processor Affected: All versions, or not specified |
| CVE-2025-47318 | 7.5 | Sep 24 | Buffer Over-read in BT Controller Affected: All versions, or not specified |
| CVE-2025-27073 | 7.5 | Aug 6 | Reachable Assertion in WLAN Firmware Affected: All versions, or not specified |
| CVE-2025-27065 | 7.5 | Aug 6 | Buffer Over-read in WLAN Firmware Affected: All versions, or not specified |
| CVE-2025-21477 | 7.5 | Aug 6 | Improper Input Validation in Modem Affected: All versions, or not specified |
| CVE-2025-21452 | 7.5 | Aug 6 | Reachable Assertion in Modem Affected: All versions, or not specified |
| CVE-2025-21446 | 7.5 | Jul 8 | Buffer Over-read in WLAN Firmware Affected: All versions, or not specified |
| CVE-2025-21463 | 7.5 | Jun 3 | Buffer Over-read in WLAN Host Communication Affected: All versions, or not specified |
| CVE-2025-21459 | 7.5 | May 6 | Buffer Over-read in WLAN Host Communication Affected: All versions, or not specified |
| CVE-2024-49847 | 7.5 | May 6 | Buffer Over-read in Multi-Mode Call Processor Affected: All versions, or not specified |
| CVE-2025-21435 | 7.5 | Apr 7 | Buffer Over-read in WLAN Host Communication Affected: All versions, or not specified |
| CVE-2025-21434 | 7.5 | Apr 7 | Buffer Over-read in WLAN Host Affected: All versions, or not specified |
| CVE-2025-21428 | 7.5 | Apr 7 | Buffer Over-read in WLAN Host Affected: All versions, or not specified |
| CVE-2024-33058 | 7.5 | Apr 7 | Insufficient Granularity of Access Control in Core Affected: All versions, or not specified |
| CVE-2024-49838 | 7.5 | Feb 3 | Buffer Over-read in WLAN HOST Affected: All versions, or not specified |
| CVE-2024-45558 | 7.5 | Jan 6 | Buffer Over-read in WLAN Host Cmn Affected: All versions, or not specified |
| CVE-2024-33063 | 7.5 | Dec 2 | Integer Overflow or Wraparound in WLAN Host Communication Affected: 0 |
| CVE-2024-38397 | 7.5 | Oct 7 | Buffer Over-read in WLAN Host Communication Affected: 0 |
| CVE-2024-33069 | 7.5 | Oct 7 | Use After Free in WLAN Host Affected: 0 |
| CVE-2024-33057 | 7.5 | Sep 2 | Buffer Over-read in WLAN Host Communication Affected: 0 |
| CVE-2024-33048 | 7.5 | Sep 2 | Buffer Over-read in WLAN Host Affected: 0 |
| CVE-2024-23364 | 7.5 | Sep 2 | Buffer Over-read in WLAN Firmware Affected: 0 |
| CVE-2024-33026 | 7.5 | Aug 5 | Buffer Over-read in WLAN Host Affected: 0 |
| CVE-2024-33025 | 7.5 | Aug 5 | Buffer Over-read in WLAN Host Affected: 0 |
| CVE-2024-33024 | 7.5 | Aug 5 | Integer Overflow or Wraparound in WLAN Host Affected: 0 |
| CVE-2024-33020 | 7.5 | Aug 5 | Buffer Over-read in WLAN HOST Affected: 0 |
| CVE-2024-33019 | 7.5 | Aug 5 | Buffer Over-read in WLAN Host Affected: 0 |
| CVE-2024-33018 | 7.5 | Aug 5 | Buffer Over-read in WLAN Host Affected: 0 |
| CVE-2024-33015 | 7.5 | Aug 5 | Buffer Over-read in WLAN Host Affected: 0 |
| CVE-2024-33013 | 7.5 | Aug 5 | Buffer Over-read in WLAN Host Affected: 0 |
| CVE-2024-23353 | 7.5 | Aug 5 | Buffer Over-read in Multi Mode Call Processor Affected: 0 |
| CVE-2024-23352 | 7.5 | Aug 5 | Loop with Unreachable Exit Condition (`Infinite Loop`) in Multi Mode Call Processor Affected: 0 |
| CVE-2024-21467 | 7.5 | Aug 5 | Buffer Over-read in WLAN Host Communication Affected: 0 |
| CVE-2024-21466 | 7.5 | Jul 1 | Integer Underflow (Wrap or Wraparound) in WLAN Host Communication Affected: 0 |
| CVE-2024-21458 | 7.5 | Jul 1 | Buffer Over-read in WLAN HOST Affected: 0 |
| CVE-2024-21457 | 7.5 | Jul 1 | Buffer Over-read in WLAN Host Communication Affected: 0 |
| CVE-2024-23363 | 7.5 | Jun 3 | Buffer Over-read in WLAN Firmware Affected: 0 |
| CVE-2023-43551 | 7.5 | Jun 3 | Improper Authentication in Multi-Mode Call Processor Affected: All versions, or not specified |
| CVE-2023-43537 | 7.5 | Jun 3 | Buffer Over-read in WLAN Host Affected: All versions, or not specified |
| CVE-2024-21477 | 7.5 | May 6 | Buffer Over-read in WLAN Firmware Affected: All versions, or not specified |
| CVE-2023-43529 | 7.5 | May 6 | Reachable Assertion in Data Modem Affected: All versions, or not specified |
| CVE-2023-33101 | 7.5 | Apr 1 | Transient DOS while processing DL NAS TRANSPORT message with payload length 0 Affected: All versions, or not specified |
| CVE-2023-33099 | 7.5 | Apr 1 | Transient DOS while processing SMS container of non-standard size received in DL NAS transport in NR Affected: All versions, or not specified |
| CVE-2023-43539 | 7.5 | Mar 4 | Transient DOS while processing an improperly formatted 802.11az Fine Time Measurement protocol frame Affected: All versions, or not specified |
The 500 most important CVEs for this product (exploited first, then by severity)