📦 Qca1990 Firmware

by Qualcomm

🔍 What is Qca1990 Firmware?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2021-1924

CRITICAL CVSS 9.0 Nov 12, 2021

This vulnerability allows attackers to extract RSA private keys through timing and power side-channel attacks during modular exponentiation in RSA-CRT implementations. It affects Qualcomm Snapdragon c...

CVE-2021-1916

CRITICAL CVSS 9.8 Sep 8, 2021

This vulnerability allows attackers to execute arbitrary code or cause denial of service by exploiting a buffer underflow in Qualcomm Snapdragon chipsets. It affects numerous Qualcomm-powered devices ...

CVE-2021-1920

CRITICAL CVSS 9.8 Sep 8, 2021

CVE-2021-1920 is an integer underflow vulnerability in Qualcomm Snapdragon chipsets' RTCP packet handling that allows remote code execution. Attackers can send specially crafted RTCP packets to trigge...

CVE-2020-11159

CRITICAL CVSS 9.1 Jun 9, 2021

This CVE describes a buffer over-read vulnerability in Qualcomm Snapdragon chipsets when processing WPA/RSN information elements in Wi-Fi beacon and response frames. Attackers can exploit this to read...

CVE-2020-11276

CRITICAL CVSS 9.1 Feb 22, 2021

This vulnerability is a buffer over-read in Qualcomm Snapdragon chipsets that occurs when processing Wi-Fi P2P (Peer-to-Peer) information elements and NOA (Notice of Absence) attributes in beacon and ...

CVE-2023-43511

HIGH CVSS 7.5 Jan 2, 2024

This vulnerability allows attackers to cause a denial-of-service (DoS) condition in Qualcomm WLAN firmware by sending specially crafted IPv6 packets with IPPROTO_NONE as the next header in extension h...

CVE-2023-28565

HIGH CVSS 7.8 Sep 5, 2023

This vulnerability allows memory corruption in Qualcomm's WLAN Hardware Abstraction Layer (HAL) when processing command streams through WMI interfaces. Attackers could potentially execute arbitrary co...

CVE-2023-28560

HIGH CVSS 7.8 Sep 5, 2023

This vulnerability allows memory corruption in the WLAN Hardware Abstraction Layer (HAL) when processing devIndex values from untrusted WMI payloads. Attackers could potentially execute arbitrary code...

CVE-2023-21628

HIGH CVSS 8.4 Jun 6, 2023

This vulnerability allows memory corruption in Qualcomm's WLAN Hardware Abstraction Layer (HAL) when processing specific wireless commands. Attackers could potentially execute arbitrary code or cause ...

CVE-2020-11303

HIGH CVSS 8.6 Oct 20, 2021

This vulnerability in Qualcomm Snapdragon chipsets allows information disclosure when devices accept AMSDU frames with mismatched destination and source addresses. Attackers can potentially intercept ...

CVE-2021-1959

HIGH CVSS 7.8 Oct 20, 2021

This vulnerability in Qualcomm Snapdragon chipsets allows memory corruption due to improper input validation when handling index values. Attackers could exploit this to execute arbitrary code or cause...

CVE-2021-30261

HIGH CVSS 8.4 Sep 17, 2021

This vulnerability allows attackers to trigger integer and heap overflows by sending specially crafted beacon template update commands to affected Qualcomm Snapdragon chipsets. Successful exploitation...

CVE-2021-1909

HIGH CVSS 7.3 Sep 9, 2021

CVE-2021-1909 is a buffer overflow vulnerability in Qualcomm Snapdragon trusted applications due to insufficient parameter length validation. This allows attackers to execute arbitrary code in trusted...

CVE-2020-11235

HIGH CVSS 7.8 Jun 9, 2021

CVE-2020-11235 is a buffer overflow vulnerability in Qualcomm Snapdragon chipsets that occurs when parsing unified commands without proper input validation. Attackers could exploit this to execute arb...