QF
Product
Qcn9074 Firmware
115
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 79Medium 33Low 0
Watch
Add Qcn9074 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-33037 | 6.1 | Dec 2 | Information disclosure as NPU firmware can send invalid IPC message to NPU driver as the driver doesn`t validate the IPC message received from the firmware Affected: All versions, or not specified |
| CVE-2025-47325 | 5.5 | Dec 18 | Information disclosure while processing system calls with invalid parameters Affected: All versions, or not specified |
| CVE-2024-43051 | 5.5 | Mar 3 | Information disclosure while deriving keys for a session for any Widevine use case Affected: All versions, or not specified |
| CVE-2024-38417 | 5.5 | Feb 3 | Information disclosure while processing IO control commands Affected: All versions, or not specified |
| CVE-2024-38416 | 5.5 | Feb 3 | Information disclosure during audio playback Affected: All versions, or not specified |
| CVE-2024-33067 | 5.5 | Jan 6 | Buffer Over-read in Audio Affected: All versions, or not specified |
| CVE-2023-43528 | 5.5 | May 6 | Information disclosure when the ADSP payload size received in HLOS in response to Audio Stream Manager matrix session is less than this expected size Affected: All versions, or not specified |
| CVE-2023-43527 | 5.5 | May 6 | Information disclosure while parsing dts header atom in Video Affected: All versions, or not specified |
| CVE-2023-33111 | 5.5 | Apr 1 | Information disclosure when VI calibration state set by ADSP is greater than MAX_FBSP_STATE in the response payload to AFE calibration command Affected: All versions, or not specified |
| CVE-2023-33064 | 5.5 | Feb 6 | Transient DOS in Audio when invoking callback function of ASM driver Affected: All versions, or not specified |
| CVE-2023-33070 | 5.5 | Dec 5 | Transient DOS in Automotive OS due to improper authentication to the secure IO calls Affected: All versions, or not specified |
| CVE-2023-28571 | 5.5 | Oct 3 | Information disclosure in WLAN HOST while processing the WLAN scan descriptor list during roaming scan Affected: All versions, or not specified |
| CVE-2022-40525 | 5.5 | Jun 6 | Information disclosure in Linux Networking Firmware due to unauthorized information leak during side channel analysis Affected: All versions, or not specified |
| CVE-2022-40518 | 5.5 | Jan 9 | Information disclosure due to buffer overread in Core Affected: All versions, or not specified |
| CVE-2021-30278 | 5.5 | Jan 3 | Improper input validation in TrustZone memory transfer interface can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
