Qualcomm Qca4010 vulnerabilities

27 vulnerabilities

Known vulnerabilities in Qualcomm Qca4010, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.4CVE-2021-30288qualcommapq8009_firmware+195
EPSS score
0.16%
Possible stack overflow due to improper length check of TLV while copying the TLV to a local stack variable in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
9.8CVE-2020-11213qualcommapq8009_firmware+554
EPSS score
0.88%
Out of bound reads might occur in while processing Service descriptor due to improper validation of length of fields in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
9.8CVE-2020-11212qualcommapq8009_firmware+540
EPSS score
0.88%
Out of bounds reads while parsing NAN beacons attributes and OUIs due to improper length of field check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
8.8CVE-2020-11269qualcommapq8009_firmware+536
EPSS score
0.29%
Possible memory corruption while processing EAPOL frames due to lack of validation of key length before using it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
8.2CVE-2022-40505qualcomm, inc.snapdragon+13
EPSS score
0.35%
Information disclosure due to buffer over-read in Modem while parsing DNS hostname.
7.5CVE-2022-25742qualcomm, inc.snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music+21
EPSS score
0.41%
Denial of service in modem due to infinite loop while parsing IGMPv2 packet from server in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music
7.5CVE-2022-25733qualcomm, inc.snapdragon+35
EPSS score
0.41%
Denial of service in modem due to null pointer dereference while processing DNS packets
8.4CVE-2022-25655qualcomm, inc.snapdragon+238
EPSS score
0.12%
Memory corruption in WLAN HAL while arbitrary value is passed in WMI UTF command payload.
7.5CVE-2022-25731qualcomm, inc.snapdragon+13
EPSS score
0.35%
Information disclosure in modem due to buffer over-read while processing packets from DNS server
7.5CVE-2022-25734qualcomm, inc.snapdragon+35
EPSS score
0.41%
Denial of service in modem due to missing null check while processing IP packets with padding
8.2CVE-2022-25738qualcomm, inc.snapdragon+35
EPSS score
0.38%
Information disclosure in modem due to buffer over-red while performing checksum of packet received
8.2CVE-2022-25730qualcomm, inc.snapdragon+27
EPSS score
0.35%
Information disclosure in modem due to improper check of IP type while processing DNS server query
9.8CVE-2022-25674qualcomm, inc.snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music+16
EPSS score
0.30%
Cryptographic issues in WLAN during the group key handshake of the WPA/WPA2 protocol in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music
9.1CVE-2022-25719qualcommapq8009_firmware+117
EPSS score
0.56%
Information disclosure in WLAN due to improper length check while processing authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
9.8CVE-2022-25718qualcommapq8009_firmware+141
EPSS score
0.49%
Cryptographic issue in WLAN due to improper check on return value while authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
9.8CVE-2022-25727qualcomm, inc.snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music+21
EPSS score
0.45%
Memory Corruption in modem due to improper length check while copying into memory in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music
8.2CVE-2022-33229qualcomm, inc.snapdragon+21
EPSS score
0.38%
Information disclosure due to buffer over-read in Modem while using static array to process IPv4 packets.
8.2CVE-2022-33222qualcomm, inc.snapdragon+13
EPSS score
0.35%
Information disclosure due to buffer over-read while parsing DNS response packets in Modem.
8.2CVE-2022-33287qualcomm, inc.snapdragon+39
EPSS score
0.35%
Information disclosure in Modem due to buffer over-read while getting length of Unfragmented headers in an IPv6 packet.
8.2CVE-2022-33291qualcomm, inc.snapdragon+39
EPSS score
0.35%
Information disclosure in Modem due to buffer over-read while receiving a IP header with malformed length.