U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Search Results (Refine Search)

Search Parameters:
  • Keyword (text search): cpe:2.3:h:qualcomm:qca4004:-:*:*:*:*:*:*:*
  • CPE Name Search: true
There are 146 matching records.
Displaying matches 61 through 80.
Vuln ID Summary CVSS Severity
CVE-2022-25735

Denial of service in modem due to missing null check while processing TCP or UDP packets from server

Published: February 11, 2023; 11:15:13 PM -0500
V3.1: 7.5 HIGH
V2.0:(not available)
CVE-2022-25734

Denial of service in modem due to missing null check while processing IP packets with padding

Published: February 11, 2023; 11:15:13 PM -0500
V3.1: 7.5 HIGH
V2.0:(not available)
CVE-2022-25733

Denial of service in modem due to null pointer dereference while processing DNS packets

Published: February 11, 2023; 11:15:13 PM -0500
V3.1: 7.5 HIGH
V2.0:(not available)
CVE-2022-25732

Information disclosure in modem due to buffer over read in dns client due to missing length check

Published: February 11, 2023; 11:15:13 PM -0500
V3.1: 7.5 HIGH
V2.0:(not available)
CVE-2022-25729

Memory corruption in modem due to improper length check while copying into memory

Published: February 11, 2023; 11:15:13 PM -0500
V3.1: 9.8 CRITICAL
V2.0:(not available)
CVE-2022-25728

Information disclosure in modem due to buffer over-read while processing response from DNS server

Published: February 11, 2023; 11:15:12 PM -0500
V3.1: 7.5 HIGH
V2.0:(not available)
CVE-2022-40520

Memory corruption due to stack-based buffer overflow in Core

Published: January 09, 2023; 3:15:13 AM -0500
V3.1: 7.8 HIGH
V2.0:(not available)
CVE-2022-40519

Information disclosure due to buffer overread in Core

Published: January 09, 2023; 3:15:13 AM -0500
V3.1: 5.5 MEDIUM
V2.0:(not available)
CVE-2022-40518

Information disclosure due to buffer overread in Core

Published: January 09, 2023; 3:15:13 AM -0500
V3.1: 5.5 MEDIUM
V2.0:(not available)
CVE-2022-40517

Memory corruption in core due to stack-based buffer overflow

Published: January 09, 2023; 3:15:13 AM -0500
V3.1: 7.8 HIGH
V2.0:(not available)
CVE-2022-40516

Memory corruption in Core due to stack-based buffer overflow.

Published: January 09, 2023; 3:15:12 AM -0500
V3.1: 7.8 HIGH
V2.0:(not available)
CVE-2022-25695

Memory corruption in MODEM due to Improper Validation of Array Index while processing GSTK Proactive commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Published: December 13, 2022; 11:15:18 AM -0500
V3.1: 7.8 HIGH
V2.0:(not available)
CVE-2022-25682

Memory corruption in MODEM UIM due to usage of out of range pointer offset while decoding command from card in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Published: December 13, 2022; 11:15:18 AM -0500
V3.1: 7.8 HIGH
V2.0:(not available)
CVE-2022-25742

Denial of service in modem due to infinite loop while parsing IGMPv2 packet from server in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music

Published: November 15, 2022; 5:15:15 AM -0500
V3.1: 7.5 HIGH
V2.0:(not available)
CVE-2022-25727

Memory Corruption in modem due to improper length check while copying into memory in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music

Published: November 15, 2022; 5:15:14 AM -0500
V3.1: 9.8 CRITICAL
V2.0:(not available)
CVE-2022-25674

Cryptographic issues in WLAN during the group key handshake of the WPA/WPA2 protocol in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music

Published: November 15, 2022; 5:15:14 AM -0500
V3.1: 9.8 CRITICAL
V2.0:(not available)
CVE-2022-25719

Information disclosure in WLAN due to improper length check while processing authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Published: October 19, 2022; 7:15:10 AM -0400
V3.1: 9.1 CRITICAL
V2.0:(not available)
CVE-2022-25718

Cryptographic issue in WLAN due to improper check on return value while authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Published: October 19, 2022; 7:15:10 AM -0400
V3.1: 9.8 CRITICAL
V2.0:(not available)
CVE-2021-30349

Improper access control sequence for AC database after memory allocation can lead to possible memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Published: June 14, 2022; 6:15:15 AM -0400
V3.1: 6.7 MEDIUM
V2.0: 7.2 HIGH
CVE-2021-30344

Improper authorization of a replayed LTE security mode command can lead to a denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Published: June 14, 2022; 6:15:15 AM -0400
V3.1: 7.5 HIGH
V2.0: 7.8 HIGH