Vulnerabilities > Qualcomm > Qca6595 Firmware > High

DATE CVE VULNERABILITY TITLE RISK
2025-02-03 CVE-2024-38420 Out-of-bounds Write vulnerability in Qualcomm products
Memory corruption while configuring a Hypervisor based input virtual device.
local
low complexity
qualcomm CWE-787
7.8
2025-02-03 CVE-2024-45571 Use After Free vulnerability in Qualcomm products
Memory corruption may occour occur when stopping the WLAN interface after processing a WMI command from the interface.
local
low complexity
qualcomm CWE-416
7.8
2025-02-03 CVE-2024-45584 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Qualcomm products
Memory corruption can occur when a compat IOCTL call is followed by a normal IOCTL call from userspace.
local
low complexity
qualcomm CWE-119
7.8
2025-02-03 CVE-2024-49833 Improper Validation of Array Index vulnerability in Qualcomm products
Memory corruption can occur in the camera when an invalid CID is used.
local
low complexity
qualcomm CWE-129
7.8
2025-02-03 CVE-2024-49834 Improper Validation of Array Index vulnerability in Qualcomm products
Memory corruption while power-up or power-down sequence of the camera sensor.
local
low complexity
qualcomm CWE-129
7.8
2025-02-03 CVE-2024-49837 Improper Validation of Array Index vulnerability in Qualcomm products
Memory corruption while reading CPU state data during guest VM suspend.
local
low complexity
qualcomm CWE-129
7.8
2025-02-03 CVE-2024-49838 Out-of-bounds Read vulnerability in Qualcomm products
Information disclosure while parsing the OCI IE with invalid length.
network
low complexity
qualcomm CWE-125
7.5
2025-01-06 CVE-2024-45553 Use After Free vulnerability in Qualcomm products
Memory corruption can occur when process-specific maps are added to the global list.
local
low complexity
qualcomm CWE-416
7.8
2025-01-06 CVE-2024-45555 Integer Overflow or Wraparound vulnerability in Qualcomm products
Memory corruption can occur if an already verified IFS2 image is overwritten, bypassing boot verification.
local
low complexity
qualcomm CWE-190
7.8
2025-01-06 CVE-2024-45558 Out-of-bounds Read vulnerability in Qualcomm products
Transient DOS can occur when the driver parses the per STA profile IE and tries to access the EXTN element ID without checking the IE length.
network
low complexity
qualcomm CWE-125
7.5