Qca4004 Firmware (Qualcomm) - vulnerabilities (CVEs)

165 CVEs, 2 in the last 30 days, 1 known versions, newest CVE from 2026-10-06. Vendor: Qualcomm.

CVEs of Qca4004 Firmware

CVE-2026-25267 - CVSS 7.8 (high), 2026-10-06: Memory corruption when non-secure loader rewrites page tables before secure memory initialization.
CVE-2026-25263 - CVSS 6.6 (medium), 2026-10-06: Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters.
CVE-2025-27054 - CVSS 7.8 (high), 2025-10-09: Memory corruption while processing a malformed license file during reboot.
CVE-2025-27053 - CVSS 7.8 (high), 2025-10-09: Memory corruption during PlayReady APP usecase while processing TA commands.
CVE-2025-21464 - CVSS 6.5 (medium), 2025-08-06: Information disclosure while reading data from an image using specified offset and size parameters.
CVE-2025-21465 - CVSS 6.5 (medium), 2025-08-06: Information disclosure while processing the hash segment in an MBN file.
CVE-2024-43046 - CVSS 5.5 (medium), 2025-04-07: There may be information disclosure during memory re-allocation in TZ Secure OS.
CVE-2024-38426 - CVSS 5.4 (medium), 2025-03-03: While processing the authentication message in UE, improper authentication may lead to information disclosure.
CVE-2024-33056 - CVSS 8.4 (high), 2024-12-02: Memory corruption when allocating and accessing an entry in an SMEM partition continuously.
CVE-2024-33016 - CVSS 6.8 (medium), 2024-09-02: memory corruption when an invalid firehose patch command is invoked.
CVE-2024-23362 - CVSS 7.1 (high), 2024-09-02: Cryptographic issue while parsing RSA keys in COBR format.
CVE-2024-23359 - CVSS 8.2 (high), 2024-09-02: Information disclosure while decoding Tracking Area Update Accept or Attach Accept message received from network.
CVE-2024-23353 - CVSS 7.5 (high), 2024-08-05: Transient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI.
CVE-2024-21469 - CVSS 7.8 (high), 2024-07-01: Memory corruption when an invoke call and a TEE call are bound for the same trusted application.
CVE-2024-21465 - CVSS 7.8 (high), 2024-07-01: Memory corruption while processing key blob passed by the user.
CVE-2024-21462 - CVSS 7.1 (high), 2024-07-01: Transient DOS while loading the TA ELF file.
CVE-2024-21461 - CVSS 8.4 (high), 2024-07-01: Memory corruption while performing finish HMAC operation when context is freed by keymaster.
CVE-2023-43551 - CVSS 9.1 (critical), 2024-06-03: Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode…
CVE-2023-43542 - CVSS 7.8 (high), 2024-06-03: Memory corruption while copying a keyblob`s material when the key material`s size is not accurately checked.
CVE-2023-28547 - CVSS 8.4 (high), 2024-04-01: Memory corruption in SPS Application while requesting for public key in sorter TA.
CVE-2023-33066 - CVSS 8.4 (high), 2024-03-04: Memory corruption in Audio while processing RT proxy port register driver.
CVE-2023-33072 - CVSS 9.3 (critical), 2024-02-06: Memory corruption in Core while processing control functions.
CVE-2023-33030 - CVSS 9.3 (critical), 2024-01-02: Memory corruption in HLOS while running playready use-case.
CVE-2023-33033 - CVSS 8.4 (high), 2024-01-02: Memory corruption in Audio during playback with speaker protection.
CVE-2023-33032 - CVSS 9.3 (critical), 2024-01-02: Memory corruption in TZ Secure OS while requesting a memory allocation from TA region.
CVE-2023-33018 - CVSS 7.8 (high), 2023-12-05: Memory corruption while using the UIM diag command to get the operators name.
CVE-2023-33017 - CVSS 7.8 (high), 2023-12-05: Memory corruption in Boot while running a ListVars test in UEFI Menu during boot.
CVE-2023-28586 - CVSS 6.5 (medium), 2023-12-05: Information disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE.
CVE-2023-28585 - CVSS 8.8 (high), 2023-12-05: Memory corruption while loading an ELF segment in TEE Kernel.
CVE-2023-28551 - CVSS 7.8 (high), 2023-12-05: Memory corruption in UTILS when modem processes memory specific Diag commands having arbitrary address values as input arguments.
CVE-2023-28550 - CVSS 7.8 (high), 2023-12-05: Memory corruption in MPP performance while accessing DSM watermark using external memory address.
CVE-2023-28546 - CVSS 7.8 (high), 2023-12-05: Memory Corruption in SPS Application while exporting public key in sorter TA.
CVE-2023-28556 - CVSS 7.8 (high), 2023-11-07: Cryptographic issue in HLOS during key management.
CVE-2023-28563 - CVSS 6.1 (medium), 2023-11-07: Information disclosure in IOE Firmware while handling WMI command.
CVE-2023-28545 - CVSS 8.2 (high), 2023-11-07: Memory corruption in TZ Secure OS while loading an app ELF.
CVE-2023-24852 - CVSS 8.4 (high), 2023-11-07: Memory Corruption in Core due to secure memory access by user while loading modem image.
CVE-2023-22388 - CVSS 9.8 (critical), 2023-11-07: Memory Corruption in Multi-mode Call Processor while processing bit mask API.
CVE-2023-22385 - CVSS 9.8 (critical), 2023-10-03: Memory Corruption in Data Modem while making a MO call or MT VOLTE call.
CVE-2023-28565 - CVSS 7.8 (high), 2023-09-05: Memory corruption in WLAN HAL while handling command streams through WMI interfaces.
CVE-2023-28560 - CVSS 7.8 (high), 2023-09-05: Memory corruption in WLAN HAL while processing devIndex from untrusted WMI payload.
CVE-2023-21651 - CVSS 9.3 (critical), 2023-08-08: Memory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE.
CVE-2023-21626 - CVSS 7.1 (high), 2023-08-08: Cryptographic issue in HLOS due to improper authentication while performing key velocity checks using more than one key.
CVE-2023-21625 - CVSS 8.2 (high), 2023-08-08: Information disclosure in Network Services due to buffer over-read while the device receives DNS response.
CVE-2023-21631 - CVSS 9.8 (critical), 2023-07-04: Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network.
CVE-2022-40507 - CVSS 8.4 (high), 2023-06-06: Memory corruption due to double free in Core while mapping HLOS address to the list.
CVE-2022-40523 - CVSS 7.1 (high), 2023-06-06: Information disclosure in Kernel due to indirect branch misprediction.
CVE-2022-40521 - CVSS 7.5 (high), 2023-06-06: Transient DOS due to improper authorization in Modem
CVE-2022-22076 - CVSS 7.1 (high), 2023-06-06: information disclosure due to cryptographic issue in Core during RPMB read request.
CVE-2022-40505 - CVSS 8.2 (high), 2023-05-02: Information disclosure due to buffer over-read in Modem while parsing DNS hostname.
CVE-2022-33304 - CVSS 7.5 (high), 2023-05-02: Transient DOS due to NULL pointer dereference in Modem while performing pullup for received TCP/UDP packet.
CVE-2022-40532 - CVSS 8.4 (high), 2023-04-13: Memory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target.
CVE-2022-33302 - CVSS 7.8 (high), 2023-04-13: Memory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than command length.
CVE-2022-33294 - CVSS 7.5 (high), 2023-04-13: Transient DOS in Modem due to NULL pointer dereference while receiving response of lwm2m registration/update/bootstrap request message.
CVE-2022-33295 - CVSS 8.2 (high), 2023-04-13: Information disclosure in Modem due to buffer over-read while parsing the wms message received given the buffer and its length.
CVE-2022-33291 - CVSS 8.2 (high), 2023-04-13: Information disclosure in Modem due to buffer over-read while receiving a IP header with malformed length.
CVE-2022-33289 - CVSS 6.8 (medium), 2023-04-13: Memory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card.
CVE-2022-33287 - CVSS 8.2 (high), 2023-04-13: Information disclosure in Modem due to buffer over-read while getting length of Unfragmented headers in an IPv6 packet.
CVE-2022-33231 - CVSS 9.3 (critical), 2023-04-13: Memory corruption due to double free in core while initializing the encryption key.
CVE-2022-33259 - CVSS 9.8 (critical), 2023-04-13: Memory corruption due to buffer copy without checking the size of input in modem while decoding raw SMS received.
CVE-2022-33258 - CVSS 8.2 (high), 2023-04-13: Information disclosure due to buffer over-read in modem while reading configuration parameters.
CVE-2022-33222 - CVSS 8.2 (high), 2023-04-13: Information disclosure due to buffer over-read while parsing DNS response packets in Modem.
CVE-2022-33228 - CVSS 8.2 (high), 2023-04-13: Information disclosure sue to buffer over-read in modem while processing ipv6 packet with hop-by-hop or destination option in header.
CVE-2022-33223 - CVSS 7.5 (high), 2023-04-13: Transient DOS in Modem due to null pointer dereference while processing the incoming packet with http chunked encoding.
CVE-2022-25745 - CVSS 9.8 (critical), 2023-04-13: Memory corruption in modem due to improper input validation while handling the incoming CoAP message
CVE-2022-33211 - CVSS 9.8 (critical), 2023-04-13: memory corruption in modem due to improper check while calculating size of serialized CoAP message
CVE-2022-25747 - CVSS 8.2 (high), 2023-04-13: Information disclosure in modem due to improper input validation during parsing of upcoming CoAP message
CVE-2022-25740 - CVSS 9.8 (critical), 2023-04-13: Memory corruption in modem due to buffer overwrite while building an IPv6 multicast address based on the MAC address of the iface
CVE-2022-25739 - CVSS 7.5 (high), 2023-04-13: Denial of service in modem due to missing null check while processing the ipv6 packet received during ECM call
CVE-2022-25737 - CVSS 7.5 (high), 2023-04-13: Information disclosure in modem due to missing NULL check while reading packets received from local network
CVE-2022-25731 - CVSS 7.5 (high), 2023-04-13: Information disclosure in modem due to buffer over-read while processing packets from DNS server
CVE-2022-25730 - CVSS 8.2 (high), 2023-04-13: Information disclosure in modem due to improper check of IP type while processing DNS server query
CVE-2022-25726 - CVSS 8.2 (high), 2023-04-13: Information disclosure in modem data due to array out of bound access while handling the incoming DNS response packet
CVE-2022-25678 - CVSS 9.8 (critical), 2023-04-13: Memory correction in modem due to buffer overwrite during coap connection
CVE-2022-40531 - CVSS 8.4 (high), 2023-03-10: Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message.
CVE-2022-33213 - CVSS 8.8 (high), 2023-03-10: Memory corruption in modem due to buffer overflow while processing a PPP packet
CVE-2022-25705 - CVSS 7.8 (high), 2023-03-10: Memory corruption in modem due to integer overflow to buffer overflow while handling APDU response
CVE-2022-25694 - CVSS 8.4 (high), 2023-03-10: Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM
CVE-2022-33257 - CVSS 9.3 (critical), 2023-03-10: Memory corruption in Core due to time-of-check time-of-use race condition during dump collection in trust zone.
CVE-2022-33233 - CVSS 7.8 (high), 2023-02-12: Memory corruption due to configuration weakness in modem wile sending command to write protected files.
CVE-2022-25735 - CVSS 7.5 (high), 2023-02-12: Denial of service in modem due to missing null check while processing TCP or UDP packets from server
CVE-2022-25729 - CVSS 9.8 (critical), 2023-02-12: Memory corruption in modem due to improper length check while copying into memory
CVE-2022-25734 - CVSS 7.5 (high), 2023-02-12: Denial of service in modem due to missing null check while processing IP packets with padding
CVE-2022-33229 - CVSS 8.2 (high), 2023-02-12: Information disclosure due to buffer over-read in Modem while using static array to process IPv4 packets.
CVE-2022-25733 - CVSS 7.5 (high), 2023-02-12: Denial of service in modem due to null pointer dereference while processing DNS packets
CVE-2022-25738 - CVSS 8.2 (high), 2023-02-12: Information disclosure in modem due to buffer over-red while performing checksum of packet received
CVE-2022-25732 - CVSS 8.2 (high), 2023-02-12: Information disclosure in modem due to buffer over read in dns client due to missing length check
CVE-2022-25728 - CVSS 8.2 (high), 2023-02-12: Information disclosure in modem due to buffer over-read while processing response from DNS server
CVE-2022-40519 - CVSS 6.8 (medium), 2023-01-09: Information disclosure due to buffer overread in Core
CVE-2022-40518 - CVSS 6.8 (medium), 2023-01-09: Information disclosure due to buffer overread in Core
CVE-2022-40517 - CVSS 8.4 (high), 2023-01-09: Memory corruption in core due to stack-based buffer overflow
CVE-2022-40520 - CVSS 8.4 (high), 2023-01-09: Memory corruption due to stack-based buffer overflow in Core
CVE-2022-40516 - CVSS 8.4 (high), 2023-01-09: Memory corruption in Core due to stack-based buffer overflow.
CVE-2022-25695 - CVSS 8.4 (high), 2022-12-13: Memory corruption in MODEM due to Improper Validation of Array Index while processing GSTK Proactive commands in Snapdragon Auto, Snapdragon Compute,…
CVE-2022-25682 - CVSS 8.4 (high), 2022-12-13: Memory corruption in MODEM UIM due to usage of out of range pointer offset while decoding command from card in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2022-25742 - CVSS 7.5 (high), 2022-11-15: Denial of service in modem due to infinite loop while parsing IGMPv2 packet from server in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon…
CVE-2022-25727 - CVSS 9.8 (critical), 2022-11-15: Memory Corruption in modem due to improper length check while copying into memory in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice &…
CVE-2022-25674 - CVSS 9.8 (critical), 2022-11-15: Cryptographic issues in WLAN during the group key handshake of the WPA/WPA2 protocol in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice &…
CVE-2022-25719 - CVSS 9.1 (critical), 2022-10-19: Information disclosure in WLAN due to improper length check while processing authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon…
CVE-2022-25718 - CVSS 9.8 (critical), 2022-10-19: Cryptographic issue in WLAN due to improper check on return value while authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon…
CVE-2021-30349 - CVSS 8.2 (high), 2022-06-14: Improper access control sequence for AC database after memory allocation can lead to possible memory corruption in Snapdragon Auto, Snapdragon Compute,…