QF
Product
Qcn9024 Firmware
On CISA KEVExploited in the wild
158
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 12High 122Medium 24Low 0
Watch
Add Qcn9024 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-33254 | 7.5 | Mar 10 | Transient DOS due to reachable assertion in Modem while processing SIB1 Message Affected: All versions, or not specified |
| CVE-2022-33250 | 7.5 | Mar 10 | Transient DOS due to reachable assertion in modem when network repeatedly sent invalid message container for NR to LTE handover Affected: All versions, or not specified |
| CVE-2022-33244 | 7.5 | Mar 10 | Transient DOS due to reachable assertion in modem during MIB reception and SIB timeout Affected: All versions, or not specified |
| CVE-2022-40513 | 7.5 | Feb 12 | Transient DOS due to uncontrolled resource consumption in WLAN firmware when peer is freed in non qos state Affected: All versions, or not specified |
| CVE-2022-40502 | 7.5 | Feb 12 | Transient DOS due to improper input validation in WLAN Host Affected: All versions, or not specified |
| CVE-2022-34146 | 7.5 | Feb 12 | Transient DOS due to improper input validation in WLAN Host while parsing frame during defragmentation Affected: All versions, or not specified |
| CVE-2022-25702 | 7.5 | Dec 13 | Denial of service in modem due to reachable assertion while processing reconfiguration message in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2022-25692 | 7.5 | Dec 13 | Denial of service in Modem due to reachable assertion while processing the common config procedure in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2022-25691 | 7.5 | Dec 13 | Denial of service in Modem due to reachable assertion while processing SIB1 with invalid SCS and bandwidth settings in Snapdragon Mobile Affected: All versions, or not specified |
| CVE-2022-25689 | 7.5 | Dec 13 | Denial of service in Modem due to reachable assertion in Snapdragon Mobile Affected: All versions, or not specified |
| CVE-2022-25685 | 7.5 | Dec 13 | Denial of service in Modem module due to improper authorization while error handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT,… Affected: All versions, or not specified |
| CVE-2022-25673 | 7.5 | Dec 13 | Denial of service in MODEM due to reachable assertion while processing configuration from network in Snapdragon Mobile Affected: All versions, or not specified |
| CVE-2022-25672 | 7.5 | Dec 13 | Denial of service in MODEM due to reachable assertion while processing SIB1 with invalid Bandwidth in Snapdragon Mobile Affected: All versions, or not specified |
| CVE-2022-33236 | 7.5 | Nov 15 | Transient DOS due to buffer over-read in WLAN firmware while parsing cipher suite info attributes Affected: All versions, or not specified |
| CVE-2022-25741 | 7.5 | Nov 15 | Denial of service in WLAN due to potential null pointer dereference while accessing the memory location in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2022-25671 | 7.5 | Nov 15 | Denial of service in MODEM due to reachable assertion in Snapdragon Mobile Affected: All versions, or not specified |
| CVE-2026-24085 | 7.2 | Jun 1 | Stack-based Buffer Overflow in Display Affected: All versions, or not specified |
| CVE-2025-47383 | 7.2 | Mar 2 | Missing Cryptographic Step in Data Modem Affected: All versions, or not specified |
| CVE-2024-23362 | 7.1 | Sep 2 | Improper Input Validation in Trusted Execution Environment Affected: All versions, or not specified |
| CVE-2023-21652 | 7.1 | Aug 8 | Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use Affected: All versions, or not specified |
| CVE-2023-33046 | 7.0 | Feb 6 | Memory corruption in Trusted Execution Environment while deinitializing an object used for license validation Affected: All versions, or not specified |
| CVE-2022-33257 | 7.0 | Mar 10 | Memory corruption in Core due to time-of-check time-of-use race condition during dump collection in trust zone Affected: All versions, or not specified |