QF
Product
Qcn6024 Firmware
On CISA KEVExploited in the wild
165
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 13High 130Medium 22Low 0
Watch
Add Qcn6024 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-28540 | 7.5 | Oct 3 | Cryptographic issue in Data Modem due to improper authentication during TLS handshake Affected: All versions, or not specified |
| CVE-2023-24843 | 7.5 | Oct 3 | Transient DOS in Modem while triggering a camping on an 5G cell Affected: All versions, or not specified |
| CVE-2023-33016 | 7.5 | Sep 5 | Transient DOS in WLAN firmware while parsing MLO (multi-link operation) Affected: All versions, or not specified |
| CVE-2023-21653 | 7.5 | Sep 5 | Transient DOS in Modem while processing RRC reconfiguration message Affected: All versions, or not specified |
| CVE-2023-21646 | 7.5 | Sep 5 | Transient DOS in Modem while processing invalid System Information Block 1 Affected: All versions, or not specified |
| CVE-2023-28555 | 7.5 | Aug 8 | Transient DOS in Audio while remapping channel buffer in media codec decoding Affected: All versions, or not specified |
| CVE-2023-21660 | 7.5 | Jun 6 | Transient DOS in WLAN Firmware while parsing FT Information Elements Affected: All versions, or not specified |
| CVE-2022-40538 | 7.5 | Jun 6 | Transient DOS due to reachable assertion in modem while processing sib with incorrect values from network Affected: All versions, or not specified |
| CVE-2022-40536 | 7.5 | Jun 6 | Transient DOS due to improper authentication in modem while receiving plain TLB OTA request message from network Affected: All versions, or not specified |
| CVE-2022-33251 | 7.5 | Jun 6 | Transient DOS due to reachable assertion in Modem because of invalid network configuration Affected: All versions, or not specified |
| CVE-2022-22060 | 7.5 | Jun 6 | Assertion occurs while processing Reconfiguration message due to improper validation Affected: All versions, or not specified |
| CVE-2022-40504 | 7.5 | May 2 | Transient DOS due to reachable assertion in Modem when UE received Downlink Data Indication message from the network Affected: All versions, or not specified |
| CVE-2022-40508 | 7.5 | May 2 | Transient DOS due to reachable assertion in Modem while processing config related to cross carrier scheduling, which is not supported Affected: All versions, or not specified |
| CVE-2022-34144 | 7.5 | May 2 | Transient DOS due to reachable assertion in Modem during OSI decode scheduling Affected: All versions, or not specified |
| CVE-2022-33305 | 7.5 | May 2 | Transient DOS due to NULL pointer dereference in Modem while sending invalid messages in DCCH Affected: All versions, or not specified |
| CVE-2022-40535 | 7.5 | Mar 10 | Transient DOS due to buffer over-read in WLAN while sending a packet to device Affected: All versions, or not specified |
| CVE-2022-40527 | 7.5 | Mar 10 | Transient DOS due to reachable assertion in WLAN while processing PEER ID populated by TQM Affected: All versions, or not specified |
| CVE-2022-33309 | 7.5 | Mar 10 | Transient DOS due to buffer over-read in WLAN Firmware while parsing secure FTMR frame with size lesser than 39 Bytes Affected: All versions, or not specified |
| CVE-2022-33272 | 7.5 | Mar 10 | Transient DOS in modem due to reachable assertion Affected: All versions, or not specified |
| CVE-2022-33254 | 7.5 | Mar 10 | Transient DOS due to reachable assertion in Modem while processing SIB1 Message Affected: All versions, or not specified |
| CVE-2022-33250 | 7.5 | Mar 10 | Transient DOS due to reachable assertion in modem when network repeatedly sent invalid message container for NR to LTE handover Affected: All versions, or not specified |
| CVE-2022-33244 | 7.5 | Mar 10 | Transient DOS due to reachable assertion in modem during MIB reception and SIB timeout Affected: All versions, or not specified |
| CVE-2022-40513 | 7.5 | Feb 12 | Transient DOS due to uncontrolled resource consumption in WLAN firmware when peer is freed in non qos state Affected: All versions, or not specified |
| CVE-2022-40502 | 7.5 | Feb 12 | Transient DOS due to improper input validation in WLAN Host Affected: All versions, or not specified |
| CVE-2022-34146 | 7.5 | Feb 12 | Transient DOS due to improper input validation in WLAN Host while parsing frame during defragmentation Affected: All versions, or not specified |
| CVE-2022-34145 | 7.5 | Feb 12 | Transient DOS due to buffer over-read in WLAN Host while parsing frame information Affected: All versions, or not specified |
| CVE-2022-25702 | 7.5 | Dec 13 | Denial of service in modem due to reachable assertion while processing reconfiguration message in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2022-25692 | 7.5 | Dec 13 | Denial of service in Modem due to reachable assertion while processing the common config procedure in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2022-25691 | 7.5 | Dec 13 | Denial of service in Modem due to reachable assertion while processing SIB1 with invalid SCS and bandwidth settings in Snapdragon Mobile Affected: All versions, or not specified |
| CVE-2022-25689 | 7.5 | Dec 13 | Denial of service in Modem due to reachable assertion in Snapdragon Mobile Affected: All versions, or not specified |
| CVE-2022-25685 | 7.5 | Dec 13 | Denial of service in Modem module due to improper authorization while error handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT,… Affected: All versions, or not specified |
| CVE-2022-25673 | 7.5 | Dec 13 | Denial of service in MODEM due to reachable assertion while processing configuration from network in Snapdragon Mobile Affected: All versions, or not specified |
| CVE-2022-25672 | 7.5 | Dec 13 | Denial of service in MODEM due to reachable assertion while processing SIB1 with invalid Bandwidth in Snapdragon Mobile Affected: All versions, or not specified |
| CVE-2022-33236 | 7.5 | Nov 15 | Transient DOS due to buffer over-read in WLAN firmware while parsing cipher suite info attributes Affected: All versions, or not specified |
| CVE-2022-25741 | 7.5 | Nov 15 | Denial of service in WLAN due to potential null pointer dereference while accessing the memory location in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2022-25671 | 7.5 | Nov 15 | Denial of service in MODEM due to reachable assertion in Snapdragon Mobile Affected: All versions, or not specified |
| CVE-2022-25667 | 7.5 | Nov 15 | Information disclosure in kernel due to improper handling of ICMP requests in Snapdragon Wired Infrastructure and Networking Affected: All versions, or not specified |
| CVE-2026-24085 | 7.2 | Jun 1 | Stack-based Buffer Overflow in Display Affected: All versions, or not specified |
| CVE-2025-47383 | 7.2 | Mar 2 | Missing Cryptographic Step in Data Modem Affected: All versions, or not specified |
| CVE-2024-23362 | 7.1 | Sep 2 | Improper Input Validation in Trusted Execution Environment Affected: 0 |
| CVE-2023-21652 | 7.1 | Aug 8 | Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use Affected: All versions, or not specified |
| CVE-2023-33046 | 7.0 | Feb 6 | Memory corruption in Trusted Execution Environment while deinitializing an object used for license validation Affected: All versions, or not specified |
| CVE-2022-33257 | 7.0 | Mar 10 | Memory corruption in Core due to time-of-check time-of-use race condition during dump collection in trust zone Affected: All versions, or not specified |
| CVE-2024-33016 | 6.8 | Sep 2 | Improper Restriction of Operations within the Bounds of a Memory Buffer in Storage Affected: All versions, or not specified |
| CVE-2023-33014 | 6.8 | Jan 2 | Information disclosure in Core services while processing a Diag command Affected: All versions, or not specified |
| CVE-2023-21629 | 6.8 | Jul 4 | Memory Corruption in Modem due to double free while parsing the PKCS15 sim files Affected: All versions, or not specified |
| CVE-2021-30349 | 6.7 | Jun 14 | Improper access control sequence for AC database after memory allocation can lead to possible memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2025-47371 | 6.5 | Mar 2 | Reachable Assertion in Modem Affected: All versions, or not specified |
| CVE-2025-27040 | 6.5 | Oct 9 | Information disclosure may occur while processing the hypervisor log Affected: All versions, or not specified |
| CVE-2025-21465 | 6.5 | Aug 6 | Information disclosure while processing the hash segment in an MBN file Affected: All versions, or not specified |
