Qca4020 Firmware (Qualcomm) - vulnerabilities (CVEs)

121 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2023-12-05. Vendor: Qualcomm.

CVEs of Qca4020 Firmware

CVE-2023-33080 - CVSS 7.5 (high), 2023-12-05: Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame.
CVE-2023-33017 - CVSS 7.8 (high), 2023-12-05: Memory corruption in Boot while running a ListVars test in UEFI Menu during boot.
CVE-2023-33059 - CVSS 7.8 (high), 2023-11-07: Memory corruption in Audio while processing the VOC packet data from ADSP.
CVE-2023-28560 - CVSS 7.8 (high), 2023-09-05: Memory corruption in WLAN HAL while processing devIndex from untrusted WMI payload.
CVE-2023-28537 - CVSS 8.4 (high), 2023-08-08: Memory corruption while allocating memory in COmxApeDec module in Audio.
CVE-2023-21626 - CVSS 7.1 (high), 2023-08-08: Cryptographic issue in HLOS due to improper authentication while performing key velocity checks using more than one key.
CVE-2023-21625 - CVSS 8.2 (high), 2023-08-08: Information disclosure in Network Services due to buffer over-read while the device receives DNS response.
CVE-2023-22666 - CVSS 8.4 (high), 2023-08-08: Memory Corruption in Audio while playing amrwbplus clips with modified content.
CVE-2022-40510 - CVSS 9.8 (critical), 2023-08-08: Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder.
CVE-2022-40531 - CVSS 8.4 (high), 2023-03-10: Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message.
CVE-2022-25655 - CVSS 8.4 (high), 2023-03-10: Memory corruption in WLAN HAL while arbitrary value is passed in WMI UTF command payload.
CVE-2022-40512 - CVSS 7.5 (high), 2023-02-12: Transient DOS in WLAN Firmware due to buffer over-read while processing probe response or beacon.
CVE-2022-33229 - CVSS 8.2 (high), 2023-02-12: Information disclosure due to buffer over-read in Modem while using static array to process IPv4 packets.
CVE-2022-25733 - CVSS 7.5 (high), 2023-02-12: Denial of service in modem due to null pointer dereference while processing DNS packets
CVE-2022-25738 - CVSS 8.2 (high), 2023-02-12: Information disclosure in modem due to buffer over-red while performing checksum of packet received
CVE-2022-25732 - CVSS 8.2 (high), 2023-02-12: Information disclosure in modem due to buffer over read in dns client due to missing length check
CVE-2022-25735 - CVSS 7.5 (high), 2023-02-12: Denial of service in modem due to missing null check while processing TCP or UDP packets from server
CVE-2022-25729 - CVSS 9.8 (critical), 2023-02-12: Memory corruption in modem due to improper length check while copying into memory
CVE-2022-25734 - CVSS 7.5 (high), 2023-02-12: Denial of service in modem due to missing null check while processing IP packets with padding
CVE-2022-25728 - CVSS 8.2 (high), 2023-02-12: Information disclosure in modem due to buffer over-read while processing response from DNS server
CVE-2022-33286 - CVSS 7.5 (high), 2023-01-09: Transient DOS due to buffer over-read in WLAN while processing 802.11 management frames.
CVE-2022-33285 - CVSS 7.5 (high), 2023-01-09: Transient DOS due to buffer over-read in WLAN while parsing WLAN CSA action frames.
CVE-2022-22079 - CVSS 4.6 (medium), 2023-01-09: Denial of service while processing fastboot flash command on mmc due to buffer over read
CVE-2022-33238 - CVSS 7.5 (high), 2022-12-13: Transient DOS due to loop with unreachable exit condition in WLAN while processing an incoming FTM frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2022-33235 - CVSS 8.2 (high), 2022-12-13: Information disclosure due to buffer over-read in WLAN firmware while parsing security context info attributes. in Snapdragon Auto, Snapdragon Compute,…
CVE-2022-33239 - CVSS 7.5 (high), 2022-11-15: Transient DOS due to loop with unreachable exit condition in WLAN firmware while parsing IPV6 extension header. in Snapdragon Auto, Snapdragon Compute,…
CVE-2022-25743 - CVSS 8.4 (high), 2022-11-15: Memory corruption in graphics due to use-after-free while importing graphics buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
CVE-2022-25742 - CVSS 7.5 (high), 2022-11-15: Denial of service in modem due to infinite loop while parsing IGMPv2 packet from server in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon…
CVE-2022-25727 - CVSS 9.8 (critical), 2022-11-15: Memory Corruption in modem due to improper length check while copying into memory in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice &…
CVE-2022-25724 - CVSS 8.4 (high), 2022-11-15: Memory corruption in graphics due to buffer overflow while validating the user address in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
CVE-2022-25710 - CVSS 7.5 (high), 2022-11-15: Denial of service due to null pointer dereference when GATT is disconnected in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon…
CVE-2022-25674 - CVSS 9.8 (critical), 2022-11-15: Cryptographic issues in WLAN during the group key handshake of the WPA/WPA2 protocol in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice &…
CVE-2022-25719 - CVSS 9.1 (critical), 2022-10-19: Information disclosure in WLAN due to improper length check while processing authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon…
CVE-2022-25749 - CVSS 7.5 (high), 2022-10-19: Transient Denial-of-Service in WLAN due to buffer over-read while parsing MDNS frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
CVE-2022-25718 - CVSS 9.8 (critical), 2022-10-19: Cryptographic issue in WLAN due to improper check on return value while authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon…
CVE-2022-25748 - CVSS 9.8 (critical), 2022-10-19: Memory corruption in WLAN due to integer overflow to buffer overflow while parsing GTK frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2022-25687 - CVSS 9.8 (critical), 2022-10-19: memory corruption in video due to buffer overflow while parsing asf clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…
CVE-2022-25720 - CVSS 9.8 (critical), 2022-10-19: Memory corruption in WLAN due to out of bound array access during connect/roaming in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
CVE-2022-22058 - CVSS 8.4 (high), 2022-09-26: Memory corruption due to use after free issue in kernel while processing ION handles in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
CVE-2022-25669 - CVSS 7.5 (high), 2022-09-16: Denial of service in video due to buffer over read while parsing MP4 clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…
CVE-2022-22105 - CVSS 9.8 (critical), 2022-09-16: Memory corruption in bluetooth due to integer overflow while processing HFP-UNIT profile in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile,…
CVE-2022-25688 - CVSS 9.8 (critical), 2022-09-16: Memory corruption in video due to buffer overflow while parsing ps video clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
CVE-2022-25670 - CVSS 7.5 (high), 2022-09-16: Denial of service in WLAN HOST due to buffer over read while unpacking frames in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
CVE-2022-22074 - CVSS 8.4 (high), 2022-09-16: Memory Corruption during wma file playback due to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
CVE-2022-25668 - CVSS 9.8 (critical), 2022-09-02: Memory corruption in video driver due to double free while parsing ASF clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
CVE-2022-25659 - CVSS 9.8 (critical), 2022-09-02: Memory corruption due to buffer overflow while parsing MKV clips with invalid bitmap size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
CVE-2022-25658 - CVSS 9.8 (critical), 2022-09-02: Memory corruption due to incorrect pointer arithmetic when attempting to change the endianness in video parser function in Snapdragon Auto, Snapdragon…
CVE-2022-22062 - CVSS 9.1 (critical), 2022-09-02: An out-of-bounds read can occur while parsing a server certificate due to improper length check in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2022-22072 - CVSS 7.8 (high), 2022-06-14: Buffer overflow can occur due to improper validation of NDP application information length in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer…
CVE-2022-22084 - CVSS 8.4 (high), 2022-06-14: Memory corruption when extracting qcp audio file due to lack of check on data length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
CVE-2022-25651 - CVSS 9.8 (critical), 2022-06-14: Memory corruption in bluetooth host due to integer overflow while processing BT HFP-UNIT profile in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon…
CVE-2022-22083 - CVSS 7.5 (high), 2022-06-14: Denial of service due to memory corruption while extracting ape header from clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
CVE-2022-22087 - CVSS 9.8 (critical), 2022-06-14: memory corruption in video due to buffer overflow while parsing mkv clip with no codechecker in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
CVE-2022-22082 - CVSS 8.4 (high), 2022-06-14: Memory corruption due to possible buffer overflow while parsing DSF header with corrupted channel count in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2022-22085 - CVSS 8.4 (high), 2022-06-14: Memory corruption in video due to buffer overflow while reading the dts file in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
CVE-2022-22065 - CVSS 7.5 (high), 2022-06-14: Out of bound read in WLAN HOST due to improper length check can lead to DOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
CVE-2022-22064 - CVSS 7.5 (high), 2022-06-14: Possible buffer over read due to lack of size validation while unpacking frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
CVE-2021-1924 - CVSS 9 (critical), 2021-11-12: Information disclosure through timing and power side-channels during mod exponentiation for RSA-CRT in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2021-30310 - CVSS 7.5 (high), 2021-10-20: Possible buffer overflow due to Improper validation of received CF-ACK and CF-Poll data frames in Snapdragon Auto, Snapdragon Connectivity, Snapdragon…
CVE-2021-30288 - CVSS 8.4 (high), 2021-10-20: Possible stack overflow due to improper length check of TLV while copying the TLV to a local stack variable in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2021-1977 - CVSS 9.1 (critical), 2021-10-20: Possible buffer over read due to improper validation of frame length while processing AEAD decryption during ASSOC response in Snapdragon Auto, Snapdragon…
CVE-2021-1949 - CVSS 8.4 (high), 2021-10-20: Possible integer overflow due to improper check of batch count value while sanitizer is enabled in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2020-11303 - CVSS 8.6 (high), 2021-10-20: Accepting AMSDU frames with mismatched destination and source address can lead to information disclosure in Snapdragon Auto, Snapdragon Connectivity,…
CVE-2021-30260 - CVSS 8.4 (high), 2021-09-17: Possible Integer overflow to buffer overflow issue can occur due to improper validation of input parameters when extscan hostlist configuration command is…
CVE-2021-1939 - CVSS 8.4 (high), 2021-09-17: Null pointer dereference occurs due to improper validation when the preemption feature enablement is toggled in Snapdragon Auto, Snapdragon Compute,…
CVE-2021-1935 - CVSS 7.1 (high), 2021-09-09: Possible null pointer dereference due to lack of validation check for passed pointer during key import in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2021-1909 - CVSS 7.8 (high), 2021-09-09: Buffer overflow occurs in trusted applications due to lack of length check of parameters in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
CVE-2021-1972 - CVSS 9.8 (critical), 2021-09-08: Possible buffer overflow due to improper validation of device types during P2P search in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
CVE-2021-1904 - CVSS 6.2 (medium), 2021-09-08: Child process can leak information from parent process due to numeric pids are getting compared and these pid can be reused in Snapdragon Auto, Snapdragon…
CVE-2021-1955 - CVSS 7.5 (high), 2021-07-13: Denial of service in SAP case due to improper handling of connections when association is rejected in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2021-1899 - CVSS 4.6 (medium), 2021-07-13: Possible buffer over read due to lack of length check while flashing meta images in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,…
CVE-2021-1888 - CVSS 8.4 (high), 2021-07-13: Memory corruption in key parsing and import function due to double freeing the same heap allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2021-1886 - CVSS 8.4 (high), 2021-07-13: Incorrect handling of pointers in trusted application key import mechanism could cause memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2021-1890 - CVSS 8.4 (high), 2021-07-13: Improper length check of public exponent in RSA import key function could cause memory corruption. in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2021-1889 - CVSS 8.4 (high), 2021-07-13: Possible buffer overflow due to lack of length check in Trusted Application in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
CVE-2020-11304 - CVSS 7.8 (high), 2021-06-09: Possible out of bound read in DRM due to improper buffer length check. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…
CVE-2021-1900 - CVSS 8.4 (high), 2021-06-09: Possible use after free in Display due to race condition while creating an external display in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
CVE-2020-11267 - CVSS 8.4 (high), 2021-06-09: Stack out-of-bounds write occurs while setting up a cipher device if the provided IV length exceeds the max limit value in Snapdragon Auto, Snapdragon…
CVE-2020-11159 - CVSS 9.1 (critical), 2021-06-09: Buffer over-read can happen while processing WPA,RSN IE of beacon and response frames if IE length is less than length of frame pointer being accessed in…
CVE-2020-11235 - CVSS 7.8 (high), 2021-06-09: Buffer overflow might occur while parsing unified command due to lack of check of input data received in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2020-11241 - CVSS 7.5 (high), 2021-06-09: Out of bound read will happen if EAPOL Key length is less than expected while processing NAN shared key descriptor attribute in Snapdragon Auto, Snapdragon…
CVE-2020-11233 - CVSS 7 (high), 2021-06-09: Time-of-check time-of-use race condition While processing partition entries due to newly created buffer was read again from mmc without validation in…
CVE-2020-11240 - CVSS 7.8 (high), 2021-06-09: Memory corruption due to ioctl command size was incorrectly set to the size of a pointer and not enough storage is allocated for the copy of the user argument…
CVE-2020-11262 - CVSS 7 (high), 2021-06-09: A race between command submission and destroying the context can cause an invalid context being added to the list leads to use after free issue. in Snapdragon…
CVE-2020-11160 - CVSS 6.7 (medium), 2021-06-09: Resource leakage issue during dci client registration due to reference count is not decremented if dci client registration fails in Snapdragon Auto,…
CVE-2020-11239 - CVSS 7.8 (high), 2021-06-09: Use after free issue when importing a DMA buffer by using the CPU address of the buffer due to attachment is not cleaned up properly in Snapdragon Auto,…
CVE-2020-11261 - CVSS 7.8 (high), 2021-06-09: Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon…
CVE-2021-1905 - CVSS 8.4 (high), 2021-05-07: Possible use after free due to improper handling of memory mapping of multiple processes simultaneously. in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2020-11293 - CVSS 6 (medium), 2021-05-07: Out of bound read can happen in Widevine TA while copying data to buffer from user data due to lack of check of buffer length received in Snapdragon Auto,…
CVE-2021-1927 - CVSS 8.4 (high), 2021-05-07: Possible use after free due to lack of null check while memory is being freed in FastRPC driver in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2020-11289 - CVSS 7.8 (high), 2021-05-07: Out of bound write can occur in TZ command handler due to lack of validation of command ID in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
CVE-2021-1910 - CVSS 9.8 (critical), 2021-05-07: Double free in video due to lack of input buffer length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
CVE-2020-11285 - CVSS 9.1 (critical), 2021-05-07: Buffer over-read while unpacking the RTCP packet we may read extra byte if wrong length is provided in RTCP packets in Snapdragon Auto, Snapdragon Compute,…
CVE-2020-11279 - CVSS 9.8 (critical), 2021-05-07: Memory corruption while processing crafted SDES packets due to improper length check in sdes packets recieved in Snapdragon Auto, Snapdragon Compute,…
CVE-2020-11251 - CVSS 9.1 (critical), 2021-04-07: Out-of-bounds read vulnerability while accessing DTMF payload due to lack of check of buffer length before copying in Snapdragon Auto, Snapdragon Compute,…
CVE-2020-11234 - CVSS 8.4 (high), 2021-04-07: When sending a socket event message to a user application, invalid information will be passed if socket is freed by other thread resulting in a Use After Free…
CVE-2020-11191 - CVSS 9.1 (critical), 2021-04-07: Out of bound read occurs while processing crafted SDP due to lack of check of null string in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
CVE-2020-11290 - CVSS 7 (high), 2021-03-17: Use after free condition in msm ioctl events due to race between the ioctl register and deregister events in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2020-11227 - CVSS 9.8 (critical), 2021-03-17: Out of bound write while parsing RTT/TTY packet parsing due to lack of check of buffer size before copying into buffer in Snapdragon Auto, Snapdragon Compute,…
CVE-2020-11309 - CVSS 7.8 (high), 2021-03-17: Use after free in GPU driver while mapping the user memory to GPU memory due to improper check of referenced memory in Snapdragon Auto, Snapdragon Compute,…