QF
Product
Qca7500 Firmware
34
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 16Medium 11Low 0
Watch
Add Qca7500 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-11259 | 8.8 | Jun 9 | Memory corruption due to lack of validation of pointer arguments passed to Trustzone BSP in Snapdragon Wired Infrastructure and Networking Affected: All versions, or not specified |
| CVE-2020-11258 | 8.8 | Jun 9 | Memory corruption due to lack of validation of pointer arguments passed to Trustzone BSP in Snapdragon Wired Infrastructure and Networking Affected: All versions, or not specified |
| CVE-2020-11257 | 8.8 | Jun 9 | Memory corruption due to lack of validation of pointer arguments passed to TrustZone BSP in Snapdragon Wired Infrastructure and Networking Affected: All versions, or not specified |
| CVE-2020-11256 | 8.8 | Jun 9 | Memory corruption due to lack of check of validation of pointer to buffer passed to trustzone in Snapdragon Wired Infrastructure and Networking Affected: All versions, or not specified |
| CVE-2022-33243 | 7.8 | Feb 12 | Memory corruption due to improper access control in Qualcomm IPC Affected: All versions, or not specified |
| CVE-2022-25677 | 7.8 | Dec 13 | Memory corruption in diag due to use after free while processing dci packet in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-35103 | 7.8 | Apr 1 | Possible out of bound write due to improper validation of number of timer values received from firmware while syncing timers in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30335 | 7.8 | Jan 3 | Possible assertion in QOS request due to improper validation when multiple add or update request are received simultaneously in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2023-33105 | 7.5 | Mar 4 | Transient DOS in WLAN Host and Firmware when large number of open authentication frames are sent with an invalid transaction sequence number Affected: All versions, or not specified |
| CVE-2023-33116 | 7.5 | Jan 2 | Transient DOS while parsing ieee80211_parse_mscs_ie in WIN WLAN driver Affected: All versions, or not specified |
| CVE-2022-25667 | 7.5 | Nov 15 | Information disclosure in kernel due to improper handling of ICMP requests in Snapdragon Wired Infrastructure and Networking Affected: All versions, or not specified |
| CVE-2021-1974 | 7.5 | Sep 9 | Possible buffer over read due to lack of alignment between map or unmap length of IPA SMMU and WLAN SMMU in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2021-1964 | 7.5 | Jul 13 | Possible buffer over read due to improper validation of IE size while parsing beacon from peer device in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1954 | 7.5 | Jul 13 | Possible buffer over read due to improper validation of data pointer while parsing FILS indication IE in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1943 | 7.5 | Jul 13 | Possible buffer out of bound read can occur due to improper validation of TBTT count and length while parsing the beacon response in Snapdragon Auto, Snapdragon Compute,… Affected: All versions, or not specified |
| CVE-2021-1887 | 7.5 | Jul 13 | An assertion can be reached in the WLAN subsystem while using the Wi-Fi Fine Timing Measurement protocol in Snapdragon Wired Infrastructure and Networking Affected: All versions, or not specified |
Showing 16