Qca6431 Firmware
Vendor:
First CVE: Jan 21, 2021 · Active for 5 years
432
Total CVEs
More Total CVEs than 100% of tracked products
86.4
Avg CVEs / Year
Higher CVE frequency than 100% of tracked products
7.7
Avg CVSS
Higher Avg CVSS than 65% of tracked products
0.9%
KEV Rate
Higher KEV Rate than 97% of tracked products
Trends Over Time
The number and severity of CVEs published that impact Qca6431 Firmware over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jan 21, 2021
5 years ago
Most Recent CVE
Nov 4, 2025
266 days ago
CVE Severity & Scoring
Qca6431 Firmware432 CVEs
14%
75%
11%
All CVEs353,173 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local257 (59.5%)
Network160 (37.0%)
Unknown0 (0.0%)
Physical6 (1.4%)
Adjacent Network9 (2.1%)
Attack Complexity
Low420 (97.2%)
High12 (2.8%)
Unknown0 (0.0%)
User Interaction
None429 (99.3%)
Unknown0 (0.0%)
Required3 (0.7%)
Privileges Required
Low242 (56.0%)
High10 (2.3%)
None180 (41.7%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (432 CVEs).
432 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2021-1905HIGH Possible use after free due to improper handling of memory mapping of multiple processes simultaneously. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon | May 7, 2021 | 7.8 | 67 | YES | NO |
CVE-2023-33063HIGH Memory corruption in DSP Services during a remote call from HLOS to DSP. | Dec 5, 2023 | 7.8 | 64 | YES | NO |
CVE-2023-33107HIGH Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call. | Dec 5, 2023 | 7.8 | 63 | YES | NO |
CVE-2020-11261HIGH Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectiv | Jun 9, 2021 | 7.8 | 55 | YES | NO |
CVE-2022-33234CRITICAL Memory corruption in video due to configuration weakness. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapd | Nov 15, 2022 | 9.8 | 31 | NO | NO |
CVE-2022-25748CRITICAL Memory corruption in WLAN due to integer overflow to buffer overflow while parsing GTK frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer | Oct 19, 2022 | 9.8 | 30 | NO | NO |
CVE-2022-25720CRITICAL Memory corruption in WLAN due to out of bound array access during connect/roaming in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics C | Oct 19, 2022 | 9.8 | 30 | NO | NO |
CVE-2022-25687CRITICAL memory corruption in video due to buffer overflow while parsing asf clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Indus | Oct 19, 2022 | 9.8 | 30 | NO | NO |
CVE-2021-1975CRITICAL Possible heap overflow due to improper length check of domain while parsing the DNS response in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IO | Nov 12, 2021 | 9.8 | 30 | NO | NO |
CVE-2021-1972CRITICAL Possible buffer overflow due to improper validation of device types during P2P search in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snap | Sep 8, 2021 | 9.8 | 30 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (432 CVEs).
CISA KEV
4 CVEs
0.9% of CVEs· 97th percentile
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (432 CVEs).
Media Mentions
Signals from CVEs in this product scope (432 CVEs).
Top CNAs Publishing CVEs For Qca6431 Firmware
Top CWEs
Versions
No cataloged versions.