Qualcomm Qca2066 vulnerabilities, page 4
118 vulnerabilities
Known vulnerabilities in Qualcomm Qca2066, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2022-33237qualcomm · aqt1000_firmware +237 morequalcomm aqt1000_firmwareTransient DOS due to buffer over-read in WLAN firmware while processing PPE threshold. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingEPSS0.42%HighCVE-2022-33275qualcomm, inc. · snapdragon +259 moreImproper validation of array index in WLAN HALMemory corruption due to improper validation of array index in WLAN HAL when received lm_itemNum is out of range.EPSS0.12%HighCVE-2022-33277qualcomm, inc. · snapdragon +243 moreBuffer copy without checking size of input in modemMemory corruption in modem due to buffer copy without checking size of input while receiving WMI command.EPSS0.12%HighCVE-2022-33276qualcomm, inc. · snapdragon +134 moreBuffer copy without checking size of input in ModemMemory corruption due to buffer copy without checking size of input in modem while receiving WMI_REQUEST_STATS_CMDID command.EPSS0.12%HighCVE-2022-33306qualcomm, inc. · snapdragon +131 moreBuffer over-read in WLANTransient DOS due to buffer over-read in WLAN while processing an incoming management frame with incorrectly filled IEs.EPSS0.42%HighCVE-2022-33238qualcomm · apq8009_firmware +283 morequalcomm apq8009_firmwareTransient DOS due to loop with unreachable exit condition in WLAN while processing an incoming FTM frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingEPSS0.44%HighCVE-2022-33286qualcomm, inc. · snapdragon +281 moreBuffer over-read in WLANTransient DOS due to buffer over-read in WLAN while processing 802.11 management frames.EPSS0.39%HighCVE-2022-33271qualcomm, inc. · snapdragon +245 moreBuffer over-read in WLANInformation disclosure due to buffer over-read in WLAN while parsing NMF frame.EPSS0.38%HighCVE-2022-33235qualcomm · apq8009_firmware +245 morequalcomm apq8009_firmwareInformation disclosure due to buffer over-read in WLAN firmware while parsing security context info attributes. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingEPSS0.40%HighCVE-2022-33252qualcomm, inc. · snapdragon +161 moreBuffer over-read in WLANInformation disclosure due to buffer over-read in WLAN while handling IBSS beacons frame.EPSS0.25%HighCVE-2024-43050qualcomm, inc. · snapdragon +54 moreStack-based Buffer Overflow in WLAN Windows HostMemory corruption while invoking IOCTL calls from user space to issue factory test command inside WLAN driver.EPSS0.10%HighCVE-2024-43053qualcomm, inc. · snapdragon +20 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in WLAN Windows HostMemory corruption while invoking IOCTL calls from user space to read WLAN target diagnostic information.EPSS0.10%CriticalCVE-2024-38408qualcomm, inc. · snapdragon +229 moreCryptographic Issues in BT ControllerCryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.EPSS0.14%HighCVE-2024-45542qualcomm, inc. · snapdragon +51 moreStack-based Buffer Overflow in WLAN Windows HostMemory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver.EPSS0.13%HighCVE-2024-45541qualcomm, inc. · snapdragon +51 moreBuffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Windows HostMemory corruption when IOCTL call is invoked from user-space to read board data.EPSS0.11%HighCVE-2024-33051qualcomm, inc. · snapdragon +282 moreBuffer Over-read in WLAN FirmwareTransient DOS while processing TIM IE from beacon frame as there is no check for IE length.EPSS0.30%HighCVE-2024-23364qualcomm, inc. · snapdragon +177 moreBuffer Over-read in WLAN FirmwareTransient DOS when processing the non-transmitted BSSID profile sub-elements present within the MBSSID Information Element (IE) of a beacon frame that is received from over-the-air (OTA).EPSS0.30%HighCVE-2026-21385qualcomm, inc. · snapdragon +230 moreInteger Overflow or Wraparound in GraphicsMemory corruption while using alignments for memory allocation.KEVEPSS1.29%HighCVE-2026-25275qualcomm, inc. · snapdragon +369 moreBuffer Over-read in WLAN FirmwareTransient DOS when processing authentication frames with invalid FILS information element header lengths.EPSS0.19%HighCVE-2026-25267qualcomm, inc. · snapdragon +160 moreMissing Authorization in CoreMemory corruption when non-secure loader rewrites page tables before secure memory initialization.EPSS0.06%