QF
Product
Qca8337 Firmware
On CISA KEVExploited in the wild
458
CVEs
3
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 36High 346Medium 76Low 0
Watch
Add Qca8337 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-27034 | 9.8 | Sep 24 | Memory corruption while selecting the PLMN from SOR failed list Affected: All versions, or not specified |
| CVE-2024-21480 | 9.8 | May 6 | Memory corruption while playing audio file having large-sized input buffer Affected: All versions, or not specified |
| CVE-2024-21473 | 9.8 | Apr 1 | Memory corruption while redirecting log file to any file location with any file name Affected: All versions, or not specified |
| CVE-2024-21463 | 9.8 | Apr 1 | Memory corruption while processing Codec2 during v13k decoder pitch synthesis Affected: All versions, or not specified |
| CVE-2023-43553 | 9.8 | Mar 4 | Memory corruption while parsing beacon/probe response frame when AP sends more supported links in MLIE Affected: All versions, or not specified |
| CVE-2023-43552 | 9.8 | Mar 4 | Memory corruption while processing MBSSID beacon containing several subelement IE Affected: All versions, or not specified |
| CVE-2023-28582 | 9.8 | Mar 4 | Memory corruption in Data Modem while verifying hello-verify message during the DTLS handshake Affected: All versions, or not specified |
| CVE-2023-43534 | 9.8 | Feb 6 | Memory corruption while validating the TID to Link Mapping action request frame, when a station connects to an access point Affected: All versions, or not specified |
| CVE-2023-43520 | 9.8 | Feb 6 | Memory corruption when AP includes TID to link mapping IE in the beacons and STA is parsing the beacon TID to link mapping IE Affected: All versions, or not specified |
| CVE-2023-33025 | 9.8 | Jan 2 | Memory corruption in Data Modem when a non-standard SDP body, during a VOLTE call Affected: All versions, or not specified |
| CVE-2023-33083 | 9.8 | Dec 5 | Memory corruption in WLAN Host while processing RRM beacon on the AP Affected: All versions, or not specified |
| CVE-2023-33082 | 9.8 | Dec 5 | Memory corruption while sending an Assoc Request having BTM Query or BTM Response containing MBO IE Affected: All versions, or not specified |
| CVE-2023-33045 | 9.8 | Nov 7 | Memory corruption in WLAN Firmware while parsing a NAN management frame carrying a S3 attribute Affected: All versions, or not specified |
| CVE-2023-22388 | 9.8 | Nov 7 | Memory Corruption in Multi-mode Call Processor while processing bit mask API Affected: All versions, or not specified |
| CVE-2023-24855 | 9.8 | Oct 3 | Memory corruption in Modem while processing security related configuration before AS Security Exchange Affected: All versions, or not specified |
| CVE-2023-22385 | 9.8 | Oct 3 | Memory Corruption in Data Modem while making a MO call or MT VOLTE call Affected: All versions, or not specified |
| CVE-2022-40510 | 9.8 | Aug 8 | Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder Affected: All versions, or not specified |
| CVE-2023-21631 | 9.8 | Jul 4 | Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network Affected: All versions, or not specified |
| CVE-2022-40537 | 9.8 | Mar 10 | Memory corruption in Bluetooth HOST while processing the AVRC_PDU_GET_PLAYER_APP_VALUE_TEXT AVRCP response Affected: All versions, or not specified |
| CVE-2022-33256 | 9.8 | Mar 10 | Memory corruption due to improper validation of array index in Multi-mode call processor Affected: All versions, or not specified |
| CVE-2021-35104 | 9.8 | Jun 14 | Possible buffer overflow due to improper parsing of headers while playing the FLAC audio clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2021-35081 | 9.8 | Jun 14 | Possible buffer overflow due to improper validation of SSID length received from beacon or probe response during an IBSS session in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30341 | 9.8 | Jun 14 | Improper buffer size validation of DSM packet received can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2021-1946 | 9.8 | Sep 9 | Null Pointer Dereference may occur due to improper validation while processing crafted SDP body in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2020-11264 | 9.8 | Sep 8 | Improper authentication of Non-EAPOL/WAPI plaintext frames during four-way handshake can lead to arbitrary network packet injection in Snapdragon Auto, Snapdragon Compute,… Affected: All versions, or not specified |
| CVE-2020-11176 | 9.8 | Jun 9 | While processing server certificate from IPSec server, certificate validation for subject alternative name API can cause heap overflow which can lead to memory corruption in… Affected: All versions, or not specified |
| CVE-2025-21450 | 9.1 | Jul 8 | Cryptographic issue occurs due to use of insecure connection method while downloading Affected: All versions, or not specified |
| CVE-2024-49846 | 9.1 | May 6 | Memory corruption while decoding of OTA messages from T3448 IE Affected: All versions, or not specified |
| CVE-2024-21456 | 9.1 | Jul 1 | Information Disclosure while parsing beacon frame in STA Affected: All versions, or not specified |
| CVE-2023-33058 | 9.1 | Feb 6 | Information disclosure in Modem while processing SIB5 Affected: All versions, or not specified |
| CVE-2023-33054 | 9.1 | Dec 5 | Cryptographic issue in GPS HLOS Driver while downloading Qualcomm GNSS assistance data Affected: All versions, or not specified |
| CVE-2021-35083 | 9.1 | Jun 14 | Possible out of bound read due to improper validation of certificate chain in SSL or Internet key exchange in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2021-35117 | 9.1 | Apr 1 | An Out of Bounds read may potentially occur while processing an IBSS beacon, in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-35088 | 9.1 | Apr 1 | Possible out of bound read due to improper validation of IE length during SSID IE parse when channel is DFS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2021-1981 | 9.1 | Nov 12 | Possible buffer over read due to improper IE size check of Bearer capability IE in MT setup request from network in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2021-1977 | 9.1 | Oct 20 | Possible buffer over read due to improper validation of frame length while processing AEAD decryption during ASSOC response in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
Showing 36
