Qca6574 Firmware vulnerabilities

54 known vulnerabilities in Qca6574 Firmware from Qualcomm. 54 are rated high or critical, and 3 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  Snapdragon Auto, Snapdragon Compute…: Out-of-bounds Read

  CVE-2022-22062Sep 2, 2022Qualcomm

  An out-of-bounds read can occur while parsing a server certificate due to improper length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, S

• 7.8 High severity

  Snapdragon Auto, Snapdragon Compute…: Out-of-bounds Read

  CVE-2022-22059Sep 2, 2022Qualcomm

  Memory corruption due to out of bound read while parsing a video file in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

• 9.8 Critical severity

  Snapdragon Auto, Snapdragon Consumer IOT…: Integer Overflow or Wraparound

  CVE-2022-25651Jun 14, 2022Qualcomm

  Memory corruption in bluetooth host due to integer overflow while processing BT HFP-UNIT profile in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

• 9.8 Critical severity

  Snapdragon Auto, Snapdragon Compute…: Buffer Copy without Checking Size of Input

  CVE-2022-22087Jun 14, 2022Qualcomm

  memory corruption in video due to buffer overflow while parsing mkv clip with no codechecker in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapd

• 9.8 Critical severity

  Snapdragon Auto, Snapdragon Compute…: Double Free

  CVE-2022-22086Jun 14, 2022Qualcomm

  Memory corruption in video due to double free while parsing 3gp clip with invalid meta data atoms in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,

• 7.8 High severity

  Snapdragon Auto, Snapdragon Compute…: Out-of-bounds Write

  CVE-2022-22085Jun 14, 2022Qualcomm

  Memory corruption in video due to buffer overflow while reading the dts file in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

• 7.8 High severity

  Snapdragon Auto, Snapdragon Compute…: Out-of-bounds Write

  CVE-2022-22084Jun 14, 2022Qualcomm

  Memory corruption when extracting qcp audio file due to lack of check on data length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon We

• 7.5 High severity

  Snapdragon Auto, Snapdragon Compute…: Out-of-bounds Read

  CVE-2022-22083Jun 14, 2022Qualcomm

  Denial of service due to memory corruption while extracting ape header from clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Weara

• 7.8 High severity

  Snapdragon Auto, Snapdragon Compute…: Buffer Copy without Checking Size of Input

  CVE-2022-22082Jun 14, 2022Qualcomm

  Memory corruption due to possible buffer overflow while parsing DSF header with corrupted channel count in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & M

• 7.8 High severity

  Snapdragon Auto, Snapdragon Compute…: Improper Validation of Specified Quantity in Input

  CVE-2022-22072Jun 14, 2022Qualcomm

  Buffer overflow can occur due to improper validation of NDP application information length in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon V

• 7.8 High severity

  Qualcomm Multiple Chipsets Use-After-Free Exploited

  CVE-2022-22071Jun 14, 2022Qualcomm

  Possible use after free when process shell memory is freed using IOCTL munmap call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,

• 7.8 High severity

  Snapdragon Auto, Snapdragon Compute…: Use After Free

  CVE-2022-22068Jun 14, 2022Qualcomm

  kernel event may contain unexpected content which is not generated by NPU software in asynchronous execution mode in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon

• 7.5 High severity

  Snapdragon Auto, Snapdragon Compute…: Out-of-bounds Read

  CVE-2022-22065Jun 14, 2022Qualcomm

  Out of bound read in WLAN HOST due to improper length check can lead to DOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Sn

• 7.5 High severity

  Snapdragon Auto, Snapdragon Compute…: Out-of-bounds Read

  CVE-2022-22064Jun 14, 2022Qualcomm

  Possible buffer over read due to lack of size validation while unpacking frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,