QF
Product
Qcn9024 Firmware
On CISA KEVExploited in the wild
158
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 12High 122Medium 24Low 0
Watch
Add Qcn9024 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-33016 | 6.8 | Sep 2 | Improper Restriction of Operations within the Bounds of a Memory Buffer in Storage Affected: All versions, or not specified |
| CVE-2023-33014 | 6.8 | Jan 2 | Information disclosure in Core services while processing a Diag command Affected: All versions, or not specified |
| CVE-2023-21629 | 6.8 | Jul 4 | Memory Corruption in Modem due to double free while parsing the PKCS15 sim files Affected: All versions, or not specified |
| CVE-2021-30349 | 6.7 | Jun 14 | Improper access control sequence for AC database after memory allocation can lead to possible memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2025-47371 | 6.5 | Mar 2 | Reachable Assertion in Modem Affected: All versions, or not specified |
| CVE-2025-27040 | 6.5 | Oct 9 | Information disclosure may occur while processing the hypervisor log Affected: All versions, or not specified |
| CVE-2025-21465 | 6.5 | Aug 6 | Information disclosure while processing the hash segment in an MBN file Affected: All versions, or not specified |
| CVE-2025-21464 | 6.5 | Aug 6 | Information disclosure while reading data from an image using specified offset and size parameters Affected: All versions, or not specified |
| CVE-2024-45556 | 6.5 | Apr 7 | Cryptographic issue may arise because the access control configuration permits Linux to read key registers in TCSR Affected: All versions, or not specified |
| CVE-2021-1960 | 6.5 | Sep 9 | Improper handling of ASB-C broadcast packets with crafted opcode in LMP can lead to uncontrolled resource consumption in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2025-47331 | 6.1 | Jan 7 | Information disclosure while processing a firmware event Affected: All versions, or not specified |
| CVE-2025-27064 | 6.1 | Nov 4 | Information disclosure while registering commands from clients with diag through diagHal Affected: All versions, or not specified |
| CVE-2022-33270 | 5.9 | Apr 13 | Transient DOS due to time-of-check time-of-use race condition in Modem while processing RRC Reconfiguration message Affected: All versions, or not specified |
| CVE-2025-47325 | 5.5 | Dec 18 | Information disclosure while processing system calls with invalid parameters Affected: All versions, or not specified |
| CVE-2024-43051 | 5.5 | Mar 3 | Information disclosure while deriving keys for a session for any Widevine use case Affected: All versions, or not specified |
| CVE-2024-23357 | 5.5 | Aug 5 | Transient DOS while importing a PKCS#8-encoded RSA key with zero bytes modulus Affected: All versions, or not specified |
| CVE-2023-33060 | 5.5 | Feb 6 | Transient DOS in Core when DDR memory check is called while DDR is not initialized Affected: All versions, or not specified |
| CVE-2023-33037 | 5.5 | Jan 2 | Cryptographic issue in Automotive while unwrapping the key secs2d and verifying with RPMB data Affected: All versions, or not specified |
| CVE-2022-40525 | 5.5 | Jun 6 | Information disclosure in Linux Networking Firmware due to unauthorized information leak during side channel analysis Affected: All versions, or not specified |
| CVE-2022-40523 | 5.5 | Jun 6 | Information disclosure in Kernel due to indirect branch misprediction Affected: All versions, or not specified |
| CVE-2022-40518 | 5.5 | Jan 9 | Information disclosure due to buffer overread in Core Affected: All versions, or not specified |
| CVE-2022-25725 | 5.5 | Jan 9 | Denial of service in MODEM due to improper pointer handling Affected: All versions, or not specified |
| CVE-2021-30278 | 5.5 | Jan 3 | Improper input validation in TrustZone memory transfer interface can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2024-38426 | 5.3 | Mar 3 | While processing the authentication message in UE, improper authentication may lead to information disclosure Affected: All versions, or not specified |
Showing 24