Vulnerabilities > Qualcomm > Qca6420 Firmware
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-02-06 | CVE-2023-33065 | Out-of-bounds Read vulnerability in Qualcomm products Information disclosure in Audio while accessing AVCS services from ADSP payload. | 7.1 |
| 2024-01-02 | CVE-2023-28583 | Double Free vulnerability in Qualcomm products Memory corruption when IPv6 prefix timer object`s lifetime expires which are created while Netmgr daemon gets an IPv6 address. | 7.8 |
| 2024-01-02 | CVE-2023-33030 | Out-of-bounds Write vulnerability in Qualcomm products Memory corruption in HLOS while running playready use-case. | 7.8 |
| 2024-01-02 | CVE-2023-33032 | Out-of-bounds Write vulnerability in Qualcomm products Memory corruption in TZ Secure OS while requesting a memory allocation from TA region. | 7.8 |
| 2024-01-02 | CVE-2023-33033 | Out-of-bounds Write vulnerability in Qualcomm products Memory corruption in Audio during playback with speaker protection. | 7.8 |
| 2024-01-02 | CVE-2023-33036 | NULL Pointer Dereference vulnerability in Qualcomm products Permanent DOS in Hypervisor while untrusted VM without PSCI support makes a PSCI call. | 5.5 |
| 2024-01-02 | CVE-2023-33038 | Out-of-bounds Write vulnerability in Qualcomm products Memory corruption while receiving a message in Bus Socket Transport Server. | 7.8 |
| 2024-01-02 | CVE-2023-33114 | Use After Free vulnerability in Qualcomm products Memory corruption while running NPU, when NETWORK_UNLOAD and (NETWORK_UNLOAD or NETWORK_EXECUTE_V2) commands are submitted at the same time. | 7.8 |
| 2024-01-02 | CVE-2023-43511 | Infinite Loop vulnerability in Qualcomm products Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header. | 7.5 |
| 2023-12-05 | CVE-2023-21634 | Out-of-bounds Write vulnerability in Qualcomm products Memory Corruption in Radio Interface Layer while sending an SMS or writing an SMS to SIM. | 7.8 |