Vulnerabilities > Qualcomm > Qca4010 Firmware

DATE CVE VULNERABILITY TITLE RISK
2023-04-13 CVE-2022-33287 Out-of-bounds Read vulnerability in Qualcomm products
Information disclosure in Modem due to buffer over-read while getting length of Unfragmented headers in an IPv6 packet.
network
low complexity
qualcomm CWE-125
7.5
2023-04-13 CVE-2022-33291 Out-of-bounds Read vulnerability in Qualcomm products
Information disclosure in Modem due to buffer over-read while receiving a IP header with malformed length.
network
low complexity
qualcomm CWE-125
7.5
2023-03-10 CVE-2022-25655 Classic Buffer Overflow vulnerability in Qualcomm products
Memory corruption in WLAN HAL while arbitrary value is passed in WMI UTF command payload.
local
low complexity
qualcomm CWE-120
7.8
2023-02-12 CVE-2022-25733 NULL Pointer Dereference vulnerability in Qualcomm products
Denial of service in modem due to null pointer dereference while processing DNS packets
network
low complexity
qualcomm CWE-476
7.5
2023-02-12 CVE-2022-25734 Infinite Loop vulnerability in Qualcomm products
Denial of service in modem due to missing null check while processing IP packets with padding
network
low complexity
qualcomm CWE-835
7.5
2023-02-12 CVE-2022-25738 Out-of-bounds Read vulnerability in Qualcomm products
Information disclosure in modem due to buffer over-red while performing checksum of packet received
network
low complexity
qualcomm CWE-125
7.5
2023-02-12 CVE-2022-33229 Out-of-bounds Read vulnerability in Qualcomm products
Information disclosure due to buffer over-read in Modem while using static array to process IPv4 packets.
network
low complexity
qualcomm CWE-125
7.5
2022-11-15 CVE-2022-25674 Unspecified vulnerability in Qualcomm products
Cryptographic issues in WLAN during the group key handshake of the WPA/WPA2 protocol in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music
network
low complexity
qualcomm
critical
9.8
2022-11-15 CVE-2022-25727 Improper Validation of Specified Quantity in Input vulnerability in Qualcomm products
Memory Corruption in modem due to improper length check while copying into memory in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music
network
low complexity
qualcomm CWE-1284
critical
9.8
2022-11-15 CVE-2022-25742 Infinite Loop vulnerability in Qualcomm products
Denial of service in modem due to infinite loop while parsing IGMPv2 packet from server in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music
network
low complexity
qualcomm CWE-835
7.5