QF
Product
Qcn7606 Firmware
66
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 11High 40Medium 15Low 0
Watch
Add Qcn7606 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-33214 | 7.0 | Oct 17 | Memory corruption in display due to time-of-check time-of-use of metadata reserved size in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT,… Affected: All versions, or not specified |
| CVE-2024-33016 | 6.8 | Sep 2 | Improper Restriction of Operations within the Bounds of a Memory Buffer in Storage Affected: All versions, or not specified |
| CVE-2021-30327 | 6.8 | Jun 14 | Buffer overflow in sahara protocol while processing commands leads to overwrite of secure configuration data in Snapdragon Mobile, Snapdragon Compute, Snapdragon Auto, Snapdragon… Affected: All versions, or not specified |
| CVE-2025-21465 | 6.5 | Aug 6 | Information disclosure while processing the hash segment in an MBN file Affected: All versions, or not specified |
| CVE-2025-21464 | 6.5 | Aug 6 | Information disclosure while reading data from an image using specified offset and size parameters Affected: All versions, or not specified |
| CVE-2021-30348 | 6.5 | Jan 3 | Improper validation of LLM utility timers availability can lead to denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2021-1960 | 6.5 | Sep 9 | Improper handling of ASB-C broadcast packets with crafted opcode in LMP can lead to uncontrolled resource consumption in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1956 | 6.5 | Sep 9 | Improper handling of ASB-U packet with L2CAP channel ID by slave host can lead to interference with piconet in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2024-43051 | 5.5 | Mar 3 | Information disclosure while deriving keys for a session for any Widevine use case Affected: All versions, or not specified |
| CVE-2024-23357 | 5.5 | Aug 5 | Transient DOS while importing a PKCS#8-encoded RSA key with zero bytes modulus Affected: All versions, or not specified |
| CVE-2023-28566 | 5.5 | Nov 7 | Information disclosure in WLAN HAL while handling the WMI state info command Affected: All versions, or not specified |
| CVE-2022-40523 | 5.5 | Jun 6 | Information disclosure in Kernel due to indirect branch misprediction Affected: All versions, or not specified |
| CVE-2022-22075 | 5.5 | Mar 10 | Information Disclosure in Graphics during GPU context switch Affected: All versions, or not specified |
| CVE-2022-40518 | 5.5 | Jan 9 | Information disclosure due to buffer overread in Core Affected: All versions, or not specified |
| CVE-2022-25679 | 5.5 | Nov 15 | Denial of service in video due to improper access control in broadcast receivers in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,… Affected: All versions, or not specified |
| CVE-2022-25676 | 5.5 | Nov 15 | Information disclosure in video due to buffer over-read while parsing avi files in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT,… Affected: All versions, or not specified |