Qualcomm Qca6438 vulnerabilities, page 5
112 vulnerabilities
Known vulnerabilities in Qualcomm Qca6438, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2022-25736qualcomm · aqt1000_firmware +242 morequalcomm aqt1000_firmwareDenial of service in WLAN due to out-of-bound read happens while processing VHT action frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingEPSS0.81%CriticalCVE-2022-25652qualcomm, inc. · snapdragon wired infrastructure and networking +60 morequalcomm, inc. snapdragon wired infrastructure and networkingCryptographic issues in BSP due to improper hash verification in Snapdragon Wired Infrastructure and NetworkingEPSS0.11%HighCVE-2022-22076qualcomm, inc. · snapdragon +348 moreCryptographic issue in Coreinformation disclosure due to cryptographic issue in Core during RPMB read request.EPSS0.11%HighCVE-2022-33285qualcomm, inc. · snapdragon +278 moreBuffer over-read in WLANTransient DOS due to buffer over-read in WLAN while parsing WLAN CSA action frames.EPSS0.39%HighCVE-2022-33237qualcomm · aqt1000_firmware +237 morequalcomm aqt1000_firmwareTransient DOS due to buffer over-read in WLAN firmware while processing PPE threshold. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingEPSS0.42%HighCVE-2022-33275qualcomm, inc. · snapdragon +259 moreImproper validation of array index in WLAN HALMemory corruption due to improper validation of array index in WLAN HAL when received lm_itemNum is out of range.EPSS0.12%HighCVE-2022-33277qualcomm, inc. · snapdragon +243 moreBuffer copy without checking size of input in modemMemory corruption in modem due to buffer copy without checking size of input while receiving WMI command.EPSS0.12%HighCVE-2022-33238qualcomm · apq8009_firmware +283 morequalcomm apq8009_firmwareTransient DOS due to loop with unreachable exit condition in WLAN while processing an incoming FTM frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingEPSS0.44%HighCVE-2022-33286qualcomm, inc. · snapdragon +281 moreBuffer over-read in WLANTransient DOS due to buffer over-read in WLAN while processing 802.11 management frames.EPSS0.39%HighCVE-2022-33235qualcomm · apq8009_firmware +245 morequalcomm apq8009_firmwareInformation disclosure due to buffer over-read in WLAN firmware while parsing security context info attributes. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingEPSS0.40%CriticalCVE-2024-21473qualcomm, inc. · snapdragon +127 moreImproper Input Validation in WIN SONMemory corruption while redirecting log file to any file location with any file name.EPSS0.66%HighCVE-2024-33056qualcomm, inc. · snapdragon +323 moreBuffer Over-read in MProcMemory corruption when allocating and accessing an entry in an SMEM partition continuously.EPSS0.10%HighCVE-2026-25275qualcomm, inc. · snapdragon +369 moreBuffer Over-read in WLAN FirmwareTransient DOS when processing authentication frames with invalid FILS information element header lengths.EPSS0.19%HighCVE-2023-21628qualcomm, inc. · snapdragon +283 moreBuffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN HALMemory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command.EPSS0.12%HighCVE-2023-43511qualcomm, inc. · snapdragon +350 moreLoop with Unreachable Exit Condition (Infinite Loop) in WLAN FirmwareTransient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header.EPSS0.32%HighCVE-2023-43536qualcomm, inc. · snapdragon +303 moreBuffer Over-read in WLAN FirmwareTransient DOS while parse fils IE with length equal to 1.EPSS0.32%HighCVE-2023-28565qualcomm, inc. · snapdragon +292 moreImproper Validation of Array Index in WLAN HALMemory corruption in WLAN HAL while handling command streams through WMI interfaces.EPSS0.12%HighCVE-2023-28544qualcomm, inc. · snapdragon +205 moreBuffer Copy without Checking the Size of Input in WLAN FirmwareMemory corruption in WLAN while sending transmit command from HLOS to UTF handlers.EPSS0.12%HighCVE-2023-28564qualcomm, inc. · snapdragon +247 moreUse of Out-of-range Pointer Offset in WLAN HALMemory corruption in WLAN HAL while passing command parameters through WMI interfaces.EPSS0.12%HighCVE-2023-28549qualcomm, inc. · snapdragon +220 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in WLAN HALMemory corruption in WLAN HAL while parsing Rx buffer in processing TLV payload.EPSS0.12%