Qualcomm Qcn9024 vulnerabilities, page 3

454 vulnerabilities

Known vulnerabilities in Qualcomm Qcn9024, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.4HighCVE-2021-30281qualcomm · aqt1000_firmware +146 morequalcomm aqt1000_firmwarePossible unauthorized access to secure space due to improper check of data allowed while flashing the no access control device configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingEPSS0.16%8.4HighCVE-2021-30337qualcomm · apq8009_firmware +209 morequalcomm apq8009_firmwarePossible use after free when process shell memory is freed using IOCTL call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingEPSS0.15%8.2HighCVE-2021-30349qualcomm · aqt1000_firmware +140 morequalcomm aqt1000_firmwareImproper access control sequence for AC database after memory allocation can lead to possible memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingEPSS0.16%7.8HighCVE-2021-30271qualcomm · apq8009w_firmware +165 morequalcomm apq8009w_firmwarePossible null pointer dereference in trap handler due to lack of thread ID validation before dereferencing it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingEPSS0.15%7.8HighCVE-2021-35129qualcomm, inc. · snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking +45 morequalcomm, inc. snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networkingMemory corruption in BT controller due to improper length check while processing vendor specific commands in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and NetworkingEPSS0.16%9.1CriticalCVE-2021-35088qualcomm · aqt1000_firmware +184 morequalcomm aqt1000_firmwarePossible out of bound read due to improper validation of IE length during SSID IE parse when channel is DFS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingEPSS0.85%7.8HighCVE-2021-35069qualcomm · apq8096au_firmware +190 morequalcomm apq8096au_firmwareImproper validation of data length received from DMA buffer can lead to memory corruption. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and NetworkingEPSS0.18%7.8HighCVE-2021-35103qualcomm, inc. · snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, snapdragon wired infrastructure and networking +149 morequalcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, snapdragon wired infrastructure and networkingPossible out of bound write due to improper validation of number of timer values received from firmware while syncing timers in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingEPSS0.20%5.5MediumCVE-2021-35071qualcomm, inc. · snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, snapdragon wired infrastructure and networking +171 morequalcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, snapdragon wired infrastructure and networkingPossible buffer over read due to lack of size validation while copying data from DBR buffer to RX buffer and can lead to Denial of Service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingEPSS0.14%7.5HighCVE-2025-21429qualcomm, inc. · snapdragon +182 moreBuffer Over-read in WLAN HostMemory corruption occurs while connecting a STA to an AP and initiating an ADD TS request.EPSS0.26%6.2MediumCVE-2025-21433qualcomm, inc. · snapdragon +268 moreNULL Pointer Dereference in SPS-HLOSTransient DOS when importing a PKCS#8-encoded RSA private key with a zero-sized modulus.EPSS0.09%7.8HighCVE-2025-21424qualcomm, inc. · snapdragon +233 moreUse After Free in NPUMemory corruption while calling the NPU driver APIs concurrently.EPSS0.12%6.5MediumCVE-2025-21464qualcomm, inc. · snapdragon +340 moreOut-of-bounds Read in CoreInformation disclosure while reading data from an image using specified offset and size parameters.EPSS0.09%9.1CriticalCVE-2025-21450qualcomm, inc. · snapdragon +104 moreImproper Authentication in GPS_GNSSCryptographic issue occurs due to use of insecure connection method while downloading.EPSS0.32%7.5HighCVE-2025-21430qualcomm, inc. · snapdragon +223 moreBuffer Over-read in WLAN HostTransient DOS while connecting STA to AP and initiating ADD TS request from AP to establish TSpec session.EPSS0.26%7.5HighCVE-2025-21448qualcomm, inc. · snapdragon +267 moreBuffer Over-read in WLAN FirmwareTransient DOS may occur while parsing SSID in action frames.EPSS0.26%7.8HighCVE-2025-21468qualcomm, inc. · snapdragon +146 moreOut-of-bounds Write in Computer VisionMemory corruption while reading response from FW, when buffer size is changed by FW while driver is using this size to write null character at the end of buffer.EPSS0.11%7.5HighCVE-2025-21477qualcomm, inc. · snapdragon +87 moreImproper Input Validation in ModemTransient DOS while processing CCCH data when NW sends data with invalid length.EPSS0.22%7.5HighCVE-2025-21446qualcomm, inc. · snapdragon +235 moreBuffer Over-read in WLAN FirmwareTransient DOS may occur when processing vendor-specific information elements while parsing a WLAN frame for BTM requests.EPSS0.24%7.8HighCVE-2025-21432qualcomm, inc. · snapdragon +239 moreDouble Free in SPS-HLOSMemory corruption while retrieving the CBOR data from TA.EPSS0.09%