📦 Qca9984 Firmware

by Qualcomm

🔍 What is Qca9984 Firmware?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2024-21473

CRITICAL CVSS 9.8 Apr 1, 2024

This vulnerability allows memory corruption when redirecting log files to arbitrary locations with arbitrary filenames in Qualcomm components. It affects devices using Qualcomm chipsets and software. ...

CVE-2023-28578

CRITICAL CVSS 9.3 Mar 4, 2024

CVE-2023-28578 is a memory corruption vulnerability in Qualcomm Core Services that occurs when removing a single event listener. This allows attackers to potentially execute arbitrary code or cause de...

CVE-2023-33072

CRITICAL CVSS 9.3 Feb 6, 2024

This CVE describes a memory corruption vulnerability in Qualcomm Core components that could allow attackers to execute arbitrary code or cause denial of service. It affects devices using vulnerable Qu...

CVE-2023-33082

CRITICAL CVSS 9.8 Dec 5, 2023

This vulnerability allows remote attackers to execute arbitrary code or cause denial of service via memory corruption in Qualcomm Wi-Fi chipsets. It affects devices using vulnerable Qualcomm wireless ...

CVE-2023-33028

CRITICAL CVSS 9.8 Oct 3, 2023

This vulnerability allows memory corruption in Qualcomm WLAN firmware during PMK cache operations, potentially enabling remote code execution. It affects devices with vulnerable Qualcomm WLAN chipsets...

CVE-2023-21651

CRITICAL CVSS 9.3 Aug 8, 2023

CVE-2023-21651 is a memory corruption vulnerability in Qualcomm's Trusted Execution Environment (TEE) due to incorrect type conversion in secure_io_read/write functions. This allows attackers to poten...

CVE-2022-40510

CRITICAL CVSS 9.8 Aug 8, 2023

CVE-2022-40510 is a critical memory corruption vulnerability in Qualcomm audio components that allows attackers to execute arbitrary code or cause denial of service. The vulnerability affects devices ...

CVE-2022-33231

CRITICAL CVSS 9.3 Apr 13, 2023

CVE-2022-33231 is a double-free memory corruption vulnerability in Qualcomm chipsets that occurs during encryption key initialization. Successful exploitation could allow attackers to execute arbitrar...

CVE-2022-40514

CRITICAL CVSS 9.8 Feb 12, 2023

This vulnerability allows remote attackers to execute arbitrary code or cause denial of service on affected devices by exploiting a buffer overflow in WLAN firmware. It affects Qualcomm chipsets used ...

CVE-2022-33279

CRITICAL CVSS 9.8 Feb 12, 2023

CVE-2022-33279 is a critical stack-based buffer overflow vulnerability in Qualcomm WLAN firmware that allows remote code execution when processing malicious WNM (Wireless Network Management) frames. A...

CVE-2021-30339

CRITICAL CVSS 9.0 Jun 14, 2022

This vulnerability in Qualcomm Snapdragon chipsets allows improper cryptographic key generation due to insufficient buffer validation when reading PRNG output. Attackers could potentially generate wea...

CVE-2021-30317

CRITICAL CVSS 9.3 Feb 11, 2022

This vulnerability allows attackers to bypass image verification in Qualcomm Snapdragon chipsets by exploiting improper validation of ELF metadata in program headers. This affects numerous Snapdragon ...

CVE-2021-30285

CRITICAL CVSS 9.3 Jan 13, 2022

This vulnerability in Qualcomm Snapdragon hypervisors allows improper memory region validation, potentially enabling attackers to map incorrect memory regions. It affects numerous Snapdragon platforms...

CVE-2021-30351

CRITICAL CVSS 9.8 Jan 3, 2022

CVE-2021-30351 is a critical buffer overflow vulnerability in Qualcomm Snapdragon chipsets, allowing attackers to execute arbitrary code or cause denial of service by exploiting improper validation du...

CVE-2021-30275

CRITICAL CVSS 9.3 Jan 3, 2022

This vulnerability is an integer overflow in Qualcomm Snapdragon chipsets that could allow attackers to execute arbitrary code or cause denial of service. It affects multiple Snapdragon product lines ...

CVE-2021-1924

CRITICAL CVSS 9.0 Nov 12, 2021

This vulnerability allows attackers to extract RSA private keys through timing and power side-channel attacks during modular exponentiation in RSA-CRT implementations. It affects Qualcomm Snapdragon c...

CVE-2021-1976

CRITICAL CVSS 9.8 Sep 17, 2021

This critical vulnerability in Qualcomm Snapdragon chipsets allows remote code execution due to a use-after-free memory corruption flaw in Wi-Fi P2P (peer-to-peer) device address validation. Attackers...

CVE-2021-1972

CRITICAL CVSS 9.8 Sep 8, 2021

This vulnerability allows remote attackers to execute arbitrary code on affected Qualcomm Snapdragon devices due to a buffer overflow in the P2P search functionality. Attackers can exploit improper va...

CVE-2021-1965

CRITICAL CVSS 9.8 Jul 13, 2021

CVE-2021-1965 is a critical buffer overflow vulnerability in Qualcomm Snapdragon chipsets affecting multiple product lines. Attackers can exploit this by sending specially crafted MBSSID scan informat...

CVE-2020-11159

CRITICAL CVSS 9.1 Jun 9, 2021

This CVE describes a buffer over-read vulnerability in Qualcomm Snapdragon chipsets when processing WPA/RSN information elements in Wi-Fi beacon and response frames. Attackers can exploit this to read...

CVE-2025-47339

HIGH CVSS 7.8 Jan 7, 2026

This vulnerability involves memory corruption during HDCP session deinitialization, potentially allowing attackers to execute arbitrary code or cause denial of service. It affects systems using Qualco...

CVE-2025-27074

HIGH CVSS 8.8 Nov 4, 2025

This vulnerability involves memory corruption while processing a GP command response in Qualcomm components, potentially allowing attackers to execute arbitrary code or cause denial of service. It aff...

CVE-2025-21446

HIGH CVSS 7.5 Jul 8, 2025

This vulnerability allows a denial-of-service (DoS) condition in Qualcomm wireless LAN (WLAN) chipsets when processing vendor-specific information elements in BTM (BSS Transition Management) request f...

CVE-2024-33051

HIGH CVSS 7.5 Sep 2, 2024

This vulnerability allows an attacker to cause a denial-of-service (DoS) condition in affected Wi-Fi systems by sending specially crafted beacon frames with malformed TIM (Traffic Indication Map) Info...

CVE-2024-23362

HIGH CVSS 7.1 Sep 2, 2024

This vulnerability involves a cryptographic issue in RSA key parsing in COBR format, potentially allowing attackers to bypass cryptographic protections or cause denial of service. It affects systems u...

CVE-2024-33012

HIGH CVSS 7.5 Aug 5, 2024

This vulnerability allows attackers to cause a denial-of-service (DoS) condition in Wi-Fi systems by sending specially crafted beacon frames with malformed MBSSID information elements. It affects devi...

CVE-2024-33014

HIGH CVSS 7.5 Aug 5, 2024

This vulnerability allows an attacker to cause a Denial of Service (DoS) by sending specially crafted beacon or probe response frames containing malformed ESP IE (Extended Service Period Information E...

CVE-2024-33010

HIGH CVSS 7.5 Aug 5, 2024

This vulnerability allows attackers to cause a denial-of-service (DoS) condition by sending specially crafted MBSSID Information Element fragments in Wi-Fi beacon frames. It affects systems using Qual...

CVE-2024-21469

HIGH CVSS 7.3 Jul 1, 2024

This vulnerability involves memory corruption when an invoke call and a TEE (Trusted Execution Environment) call target the same trusted application simultaneously. It affects devices with Qualcomm ch...

CVE-2024-23368

HIGH CVSS 7.8 Jul 1, 2024

This CVE describes a memory corruption vulnerability in Qualcomm's Shared Memory (SMEM) subsystem that could allow attackers to execute arbitrary code or cause denial of service. The vulnerability aff...

CVE-2024-21462

HIGH CVSS 7.1 Jul 1, 2024

This vulnerability allows a denial-of-service attack when loading Trusted Application (TA) ELF files on Qualcomm chipsets. It affects devices using Qualcomm processors with vulnerable firmware. Attack...

CVE-2023-33105

HIGH CVSS 7.5 Mar 4, 2024

This vulnerability allows attackers to cause a denial-of-service (DoS) condition in Qualcomm WLAN systems by sending a large number of malformed authentication frames with invalid transaction sequence...

CVE-2023-33066

HIGH CVSS 8.4 Mar 4, 2024

This vulnerability allows memory corruption in Qualcomm audio drivers when processing RT proxy port register operations. Attackers could potentially execute arbitrary code or cause denial of service o...

CVE-2023-43536

HIGH CVSS 7.5 Feb 6, 2024

This vulnerability in Qualcomm components allows a denial-of-service (DoS) attack when parsing files with specific length characteristics. It affects devices using vulnerable Qualcomm chipsets, potent...

CVE-2023-43522

HIGH CVSS 7.5 Feb 6, 2024

This vulnerability in Qualcomm chipsets allows a denial-of-service attack when processing empty or NULL encrypted keys during key unwrapping. It affects devices using vulnerable Qualcomm components, p...

CVE-2023-43511

HIGH CVSS 7.5 Jan 2, 2024

This vulnerability allows attackers to cause a denial-of-service (DoS) condition in Qualcomm WLAN firmware by sending specially crafted IPv6 packets with IPPROTO_NONE as the next header in extension h...

CVE-2023-33116

HIGH CVSS 7.5 Jan 2, 2024

This vulnerability in Qualcomm's WIN WLAN driver allows a denial-of-service (DoS) attack when parsing specific wireless network management frames. Attackers can send specially crafted packets to crash...

CVE-2023-33089

HIGH CVSS 7.5 Dec 5, 2023

This vulnerability allows attackers to cause a denial-of-service (DoS) condition by sending specially crafted WLAN packets that trigger a NULL pointer dereference in the wireless driver. It affects de...

CVE-2023-28585

HIGH CVSS 8.2 Dec 5, 2023

This vulnerability allows memory corruption while loading ELF segments in the Trusted Execution Environment (TEE) kernel. Attackers could potentially execute arbitrary code in the TEE, compromising se...

CVE-2023-24852

HIGH CVSS 8.4 Nov 7, 2023

This vulnerability allows memory corruption in Qualcomm's Core due to improper secure memory access while loading modem images. Attackers could potentially execute arbitrary code or cause denial of se...

CVE-2023-33026

HIGH CVSS 7.5 Oct 3, 2023

This vulnerability allows attackers to cause a temporary denial-of-service (DoS) in affected Wi-Fi devices by sending specially crafted NAN (Neighborhood Aware Networking) management frames. The flaw ...

CVE-2023-28565

HIGH CVSS 7.8 Sep 5, 2023

This vulnerability allows memory corruption in Qualcomm's WLAN Hardware Abstraction Layer (HAL) when processing command streams through WMI interfaces. Attackers could potentially execute arbitrary co...

CVE-2023-28573

HIGH CVSS 7.8 Sep 5, 2023

This vulnerability allows memory corruption in Qualcomm's WLAN Hardware Abstraction Layer (HAL) when parsing WMI command parameters. Attackers could potentially execute arbitrary code or cause denial ...

CVE-2023-33015

HIGH CVSS 7.5 Sep 5, 2023

This vulnerability allows an attacker to cause a denial-of-service (DoS) condition in Qualcomm WLAN firmware by sending specially crafted beacon frames with malformed MBSSID information elements. It a...

CVE-2023-28544

HIGH CVSS 7.8 Sep 5, 2023

This vulnerability allows memory corruption in Qualcomm WLAN firmware when sending transmit commands from the host operating system to UTF handlers. Attackers could potentially execute arbitrary code ...

CVE-2023-28549

HIGH CVSS 7.8 Sep 5, 2023

This vulnerability allows memory corruption in Qualcomm's WLAN HAL (Hardware Abstraction Layer) when parsing received network buffers containing TLV (Type-Length-Value) payloads. Attackers could poten...

CVE-2023-28558

HIGH CVSS 7.8 Sep 5, 2023

This vulnerability allows memory corruption in Qualcomm WLAN handlers when processing PhyID in Tx status handlers. It affects devices with Qualcomm chipsets that handle wireless networking. Attackers ...

CVE-2023-28560

HIGH CVSS 7.8 Sep 5, 2023

This vulnerability allows memory corruption in the WLAN Hardware Abstraction Layer (HAL) when processing devIndex values from untrusted WMI payloads. Attackers could potentially execute arbitrary code...

CVE-2022-33275

HIGH CVSS 8.4 Sep 5, 2023

This vulnerability allows memory corruption in Qualcomm WLAN hardware abstraction layer due to improper array index validation. Attackers could potentially execute arbitrary code or cause denial of se...

CVE-2023-22387

HIGH CVSS 7.8 Jul 4, 2023

This vulnerability allows arbitrary memory overwrite when a virtual machine gets compromised during TX write operations, leading to memory corruption. It affects Qualcomm chipsets used in mobile devic...

CVE-2023-28541

HIGH CVSS 7.8 Jul 4, 2023

This vulnerability allows memory corruption in Qualcomm data modem firmware when processing DMA buffer release events for CFR data. Attackers could potentially execute arbitrary code or cause denial o...

CVE-2023-21658

HIGH CVSS 7.5 Jun 6, 2023

This vulnerability allows an attacker to cause a denial-of-service (DoS) condition in affected Qualcomm WLAN firmware by sending specially crafted beacon or probe response frames. The vulnerability af...

CVE-2022-40523

HIGH CVSS 7.1 Jun 6, 2023

This vulnerability allows attackers to exploit indirect branch misprediction in Qualcomm chipsets to leak sensitive information from the kernel memory. It affects devices using vulnerable Qualcomm Sna...

CVE-2022-40529

HIGH CVSS 7.1 Jun 6, 2023

This vulnerability allows memory corruption in the Qualcomm kernel due to improper access control when processing mapping requests from root processes. It affects devices with Qualcomm chipsets, poten...

CVE-2023-21628

HIGH CVSS 8.4 Jun 6, 2023

This vulnerability allows memory corruption in Qualcomm's WLAN Hardware Abstraction Layer (HAL) when processing specific wireless commands. Attackers could potentially execute arbitrary code or cause ...

CVE-2022-40530

HIGH CVSS 8.4 Mar 10, 2023

This vulnerability allows attackers to execute arbitrary code or cause denial of service on affected Qualcomm WLAN chipsets due to memory corruption during initialization. It affects devices using vul...

CVE-2022-33243

HIGH CVSS 8.4 Feb 12, 2023

CVE-2022-33243 is a memory corruption vulnerability in Qualcomm's Inter-Processor Communication (IPC) subsystem due to improper access control. This allows attackers to execute arbitrary code or cause...

CVE-2022-33277

HIGH CVSS 8.4 Feb 12, 2023

This CVE describes a buffer overflow vulnerability in Qualcomm modem firmware that allows memory corruption when processing WMI commands. Attackers could potentially execute arbitrary code on affected...

CVE-2022-33306

HIGH CVSS 7.5 Feb 12, 2023

This vulnerability allows attackers to cause a denial-of-service (DoS) condition in affected wireless devices by sending specially crafted management frames with malformed information elements (IEs). ...

CVE-2021-30281

HIGH CVSS 8.4 Jun 14, 2022

This vulnerability allows unauthorized access to secure memory space in Qualcomm Snapdragon chipsets due to improper access control checks during device configuration flashing. It affects multiple Sna...

CVE-2025-27040

MEDIUM CVSS 6.5 Oct 9, 2025

This CVE describes an information disclosure vulnerability in Qualcomm hypervisor logs that could expose sensitive system information. The vulnerability affects devices using Qualcomm chipsets with vu...

CVE-2025-21464

MEDIUM CVSS 6.5 Aug 6, 2025

This vulnerability allows attackers to read sensitive information from image processing operations by manipulating offset and size parameters. It affects systems using Qualcomm components with vulnera...

CVE-2025-21465

MEDIUM CVSS 6.5 Aug 6, 2025

This vulnerability allows attackers to read sensitive information from memory when processing specially crafted MBN files. It affects systems using Qualcomm chipsets that process MBN files, potentiall...