QF
Product
Qca8081 Firmware
On CISA KEVExploited in the wild
500
CVEs
3
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 56High 372Medium 72Low 0
Watch
Add Qca8081 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-40525 | 5.5 | Jun 6 | Information disclosure in Linux Networking Firmware due to unauthorized information leak during side channel analysis Affected: All versions, or not specified |
| CVE-2022-40523 | 5.5 | Jun 6 | Information disclosure in Kernel due to indirect branch misprediction Affected: All versions, or not specified |
| CVE-2022-33273 | 5.5 | May 2 | Information disclosure due to buffer over-read in Trusted Execution Environment while QRKS report generation Affected: All versions, or not specified |
| CVE-2022-22075 | 5.5 | Mar 10 | Information Disclosure in Graphics during GPU context switch Affected: All versions, or not specified |
| CVE-2022-40519 | 5.5 | Jan 9 | Information disclosure due to buffer overread in Core Affected: All versions, or not specified |
| CVE-2022-40518 | 5.5 | Jan 9 | Information disclosure due to buffer overread in Core Affected: All versions, or not specified |
| CVE-2022-33253 | 5.5 | Jan 9 | Transient DOS due to buffer over-read in WLAN while parsing corrupted NAN frames Affected: All versions, or not specified |
| CVE-2022-33252 | 5.5 | Jan 9 | Information disclosure due to buffer over-read in WLAN while handling IBSS beacons frame Affected: All versions, or not specified |
| CVE-2022-25725 | 5.5 | Jan 9 | Denial of service in MODEM due to improper pointer handling Affected: All versions, or not specified |
| CVE-2022-25722 | 5.5 | Jan 9 | Information exposure in DSP services due to improper handling of freeing memory Affected: All versions, or not specified |
| CVE-2021-35135 | 5.5 | Sep 2 | A null pointer dereference may potentially occur during RSA key import in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-35119 | 5.5 | Jun 14 | Potential out of Bounds read in FIPS event processing due to improper validation of the length from the firmware in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2021-35071 | 5.5 | Jun 14 | Possible buffer over read due to lack of size validation while copying data from DBR buffer to RX buffer and can lead to Denial of Service in Snapdragon Auto, Snapdragon Compute,… Affected: All versions, or not specified |
| CVE-2021-30339 | 5.5 | Jun 14 | Reading PRNG output may lead to improper key generation due to lack of buffer validation in Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30331 | 5.5 | Apr 1 | Possible buffer overflow due to improper data validation of external commands sent via DIAG interface in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30278 | 5.5 | Jan 3 | Improper input validation in TrustZone memory transfer interface can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2020-3621 | 5.5 | Sep 8 | u'Lack of check to ensure that the TX read index & RX write index that are read from shared memory are less than the FIFO size results into memory corruption and potential… Affected: All versions, or not specified |
| CVE-2020-3620 | 5.5 | Sep 8 | u'Lack of check of integer overflow while doing a round up operation for data read from shared memory for G-link SMEM transport can lead to corruption and potential information… Affected: All versions, or not specified |
| CVE-2019-10483 | 5.5 | Apr 16 | Side channel issue in QTEE due to usage of non-time-constant comparison function such as memcmp or strcmp in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2019-10513 | 5.5 | Dec 18 | Possibility of Null pointer access if the SPDM commands are executed in the non-standard way in Trustzone in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2019-2318 | 5.5 | Nov 21 | Non Secure Kernel can cause Trustzone to do an arbitrary memory read which will result into DOS in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2019-2240 | 5.5 | Jul 25 | While sending the rendered surface content to the screen, Error handling is not properly checked results in an unpredictable behaviour in Snapdragon Auto, Snapdragon Compute,… Affected: All versions, or not specified |
The 500 most important CVEs for this product (exploited first, then by severity)
