QF
Product
Qca9886 Firmware
by Qualcomm · last CVE Jan 2, 2024
57
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 16High 29Medium 12Low 0
Watch

Add Qca9886 Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-11259
8.8
0%
Jun 9
Memory corruption due to lack of validation of pointer arguments passed to Trustzone BSP in Snapdragon Wired Infrastructure and Networking
Affected: All versions, or not specified
CVE-2020-11258
8.8
0%
Jun 9
Memory corruption due to lack of validation of pointer arguments passed to Trustzone BSP in Snapdragon Wired Infrastructure and Networking
Affected: All versions, or not specified
CVE-2020-11257
8.8
0%
Jun 9
Memory corruption due to lack of validation of pointer arguments passed to TrustZone BSP in Snapdragon Wired Infrastructure and Networking
Affected: All versions, or not specified
CVE-2020-11256
8.8
0%
Jun 9
Memory corruption due to lack of check of validation of pointer to buffer passed to trustzone in Snapdragon Wired Infrastructure and Networking
Affected: All versions, or not specified
CVE-2020-11303
8.6
1%
Oct 20
Accepting AMSDU frames with mismatched destination and source address can lead to information disclosure in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer…
Affected: All versions, or not specified
CVE-2022-33243
7.8
0%
Feb 12
Memory corruption due to improper access control in Qualcomm IPC
Affected: All versions, or not specified
CVE-2022-33276
7.8
0%
Jan 9
Memory corruption due to buffer copy without checking size of input in modem while receiving WMI_REQUEST_STATS_CMDID command
Affected: All versions, or not specified
CVE-2022-25677
7.8
0%
Dec 13
Memory corruption in diag due to use after free while processing dci packet in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon…
Affected: All versions, or not specified
CVE-2021-35103
7.8
0%
Apr 1
Possible out of bound write due to improper validation of number of timer values received from firmware while syncing timers in Snapdragon Auto, Snapdragon Compute, Snapdragon…
Affected: All versions, or not specified
CVE-2021-1947
7.8
0%
Sep 17
Use-after-free vulnerability in kernel graphics driver because of storing an invalid pointer in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon…
Affected: All versions, or not specified
CVE-2020-3666
7.8
0%
Sep 8
u'Out of bounds memory access during memory copy while processing Host command' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics…
Affected: All versions, or not specified
CVE-2019-14135
7.8
0%
Apr 16
Possible integer overflow to buffer overflow in WLAN while parsing nonstandard NAN IE messages
Affected: All versions, or not specified
CVE-2019-14028
7.8
0%
Mar 5
Buffer overwrite during memcpy due to lack of check on SSID length validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics…
Affected: All versions, or not specified
CVE-2019-14026
7.8
0%
Mar 5
Possible buffer overflow in WLAN WMI handler due to lack of ssid length check when copying data in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
Affected: All versions, or not specified
CVE-2019-10607
7.8
0%
Dec 18
Out of bounds memcpy can occur by providing the embedded NULL character string and length greater than the actual string length in Snapdragon Auto, Snapdragon Compute, Snapdragon…
Affected: All versions, or not specified
CVE-2019-10595
7.8
0%
Dec 18
Possible buffer overwrite in message handler due to lack of validation of tid value calculated from packets received from firmware in Snapdragon Auto, Snapdragon Consumer…
Affected: All versions, or not specified
CVE-2018-11968
7.8
0%
May 24
Improper check before assigning value can lead to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity,…
Affected: All versions, or not specified
CVE-2018-11928
7.8
0%
May 24
Lack of check on length parameter may cause buffer overflow while processing WMI commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…
Affected: All versions, or not specified
CVE-2017-18279
7.8
0%
May 6
Lack of check of buffer length before copying can lead to buffer overflow in camera module in Small Cell SoC, Snapdragon Mobile, Snapdragon Wear in FSM9055, FSM9955, IPQ4019,…
Affected: All versions, or not specified
CVE-2018-11871
7.8
0%
Oct 29
Buffer overwrite can happen in WLAN function while processing set pdev parameter command due to lack of input validation in Snapdragon Automobile, Snapdragon Mobile, Snapdragon…
Affected: All versions, or not specified
CVE-2018-11849
7.8
0%
Oct 26
Lack of check on out of range of bssid parameter When processing scan start command will lead to buffer flow in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in…
Affected: All versions, or not specified
CVE-2023-33116
7.5
0%
Jan 2
Transient DOS while parsing ieee80211_parse_mscs_ie in WIN WLAN driver
Affected: All versions, or not specified
CVE-2023-21661
7.5
0%
Jun 6
Transient DOS while parsing WLAN beacon or probe-response frame
Affected: All versions, or not specified
CVE-2022-33306
7.5
0%
Feb 12
Transient DOS due to buffer over-read in WLAN while processing an incoming management frame with incorrectly filled IEs
Affected: All versions, or not specified
CVE-2022-25667
7.5
0%
Nov 15
Information disclosure in kernel due to improper handling of ICMP requests in Snapdragon Wired Infrastructure and Networking
Affected: All versions, or not specified
CVE-2021-30310
7.5
1%
Oct 20
Possible buffer overflow due to Improper validation of received CF-ACK and CF-Poll data frames in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics…
Affected: All versions, or not specified
CVE-2021-1954
7.5
1%
Jul 13
Possible buffer over read due to improper validation of data pointer while parsing FILS indication IE in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
Affected: All versions, or not specified
CVE-2020-3704
7.5
1%
Nov 2
u'While processing invalid connection request PDU which is nonstandard (interval or timeout is 0) from central device may lead peripheral system enter into dead lock state.(This…
Affected: All versions, or not specified
CVE-2020-11157
7.5
0%
Nov 2
u'Lack of handling unexpected control messages while encryption was in progress can terminate the connection and thus leading to a DoS' in Snapdragon Auto, Snapdragon…
Affected: All versions, or not specified
Showing 29