QF
Product
Qca6391 Firmware
On CISA KEVExploited in the wild
770
CVEs
8
On KEV
9.8
Max CVSS
4
New 30D
Severity mix
Critical 64High 436Medium 0Low 0
Watch
Add Qca6391 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-21479 In wildKEV | 8.6 | Jun 3 | Incorrect Authorization in Graphics Affected: All versions, or not specified |
| CVE-2025-21480 In wildKEV | 8.6 | Jun 3 | Incorrect Authorization in Graphics Windows Affected: All versions, or not specified |
| CVE-2024-43047 In wildKEV | 7.8 | Oct 7 | Use After Free in DSP Service Affected: 0 |
| CVE-2023-33107 In wildKEV | 7.8 | Dec 5 | Integer Overflow or Wraparound in Graphics Linux Affected: 0 |
| CVE-2023-33106 In wildKEV | 7.8 | Dec 5 | Use of Out-of-range Pointer Offset in Graphics Affected: 0 |
| CVE-2023-33063 In wildKEV | 7.8 | Dec 5 | Use After Free in DSP Services Affected: 0 |
| CVE-2022-22071 In wildKEV | 7.8 | Jun 14 | Qualcomm Multiple Chipsets Use-After-Free Vulnerability Affected: All versions, or not specified |
| CVE-2025-27038 In wildKEV | 7.5 | Jun 3 | Use After Free in Graphics Affected: All versions, or not specified |
| CVE-2025-27034 | 9.8 | Sep 24 | Improper Validation of Array Index in Multi-Mode Call Processor Affected: All versions, or not specified |
| CVE-2025-21483 | 9.8 | Sep 24 | Improper Restriction of Operations within the Bounds of a Memory Buffer in Data Network Stack & Connectivity Affected: All versions, or not specified |
| CVE-2025-27071 | 9.8 | Aug 6 | Memory corruption while processing specific files in Powerline Communication Firmware Affected: All versions, or not specified |
| CVE-2024-49839 | 9.8 | Feb 3 | Memory corruption during management frame processing due to mismatch in T2LM info element Affected: All versions, or not specified |
| CVE-2023-43552 | 9.8 | Mar 4 | Memory corruption while processing MBSSID beacon containing several subelement IE Affected: All versions, or not specified |
| CVE-2023-43548 | 9.8 | Mar 4 | Memory corruption while parsing qcp clip with invalid chunk data size Affected: All versions, or not specified |
| CVE-2023-43534 | 9.8 | Feb 6 | Memory corruption while validating the TID to Link Mapping action request frame, when a station connects to an access point Affected: All versions, or not specified |
| CVE-2023-43520 | 9.8 | Feb 6 | Memory corruption when AP includes TID to link mapping IE in the beacons and STA is parsing the beacon TID to link mapping IE Affected: All versions, or not specified |
| CVE-2023-43519 | 9.8 | Feb 6 | Memory corruption in video while parsing the Videoinfo, when the size of atom is greater than the videoinfo size Affected: All versions, or not specified |
| CVE-2023-43518 | 9.8 | Feb 6 | Memory corruption in video while parsing invalid mp2 clip Affected: All versions, or not specified |
| CVE-2023-33083 | 9.8 | Dec 5 | Memory corruption in WLAN Host while processing RRM beacon on the AP Affected: All versions, or not specified |
| CVE-2023-33082 | 9.8 | Dec 5 | Memory corruption while sending an Assoc Request having BTM Query or BTM Response containing MBO IE Affected: All versions, or not specified |
| CVE-2023-33045 | 9.8 | Nov 7 | Memory corruption in WLAN Firmware while parsing a NAN management frame carrying a S3 attribute Affected: All versions, or not specified |
| CVE-2023-22388 | 9.8 | Nov 7 | Memory Corruption in Multi-mode Call Processor while processing bit mask API Affected: All versions, or not specified |
| CVE-2023-33028 | 9.8 | Oct 3 | Memory corruption in WLAN Firmware while doing a memory copy of pmk cache Affected: All versions, or not specified |
| CVE-2023-24855 | 9.8 | Oct 3 | Memory corruption in Modem while processing security related configuration before AS Security Exchange Affected: All versions, or not specified |
| CVE-2023-22385 | 9.8 | Oct 3 | Memory Corruption in Data Modem while making a MO call or MT VOLTE call Affected: All versions, or not specified |
| CVE-2023-28581 | 9.8 | Sep 5 | Memory corruption in WLAN Firmware while parsing receieved GTK Keys in GTK KDE Affected: All versions, or not specified |
| CVE-2023-28562 | 9.8 | Sep 5 | Memory corruption while handling payloads from remote ESL Affected: All versions, or not specified |
| CVE-2022-40510 | 9.8 | Aug 8 | Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder Affected: All versions, or not specified |
| CVE-2023-21631 | 9.8 | Jul 4 | Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network Affected: All versions, or not specified |
| CVE-2022-40537 | 9.8 | Mar 10 | Memory corruption in Bluetooth HOST while processing the AVRC_PDU_GET_PLAYER_APP_VALUE_TEXT AVRCP response Affected: All versions, or not specified |
| CVE-2022-40515 | 9.8 | Mar 10 | Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms Affected: All versions, or not specified |
| CVE-2022-33256 | 9.8 | Mar 10 | Memory corruption due to improper validation of array index in Multi-mode call processor Affected: All versions, or not specified |
| CVE-2022-40514 | 9.8 | Feb 12 | Memory corruption due to buffer copy without checking the size of input in WLAN Firmware while processing CCKM IE in reassoc response frame Affected: All versions, or not specified |
| CVE-2022-33279 | 9.8 | Feb 12 | Memory corruption due to stack based buffer overflow in WLAN having invalid WNM frame length Affected: All versions, or not specified |
| CVE-2022-33234 | 9.8 | Nov 15 | Memory corruption in video due to configuration weakness Affected: All versions, or not specified |
| CVE-2022-25687 | 9.8 | Oct 19 | memory corruption in video due to buffer overflow while parsing asf clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2022-25720 | 9.8 | Oct 19 | Memory corruption in WLAN due to out of bound array access during connect/roaming in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics… Affected: All versions, or not specified |
| CVE-2022-25688 | 9.8 | Sep 16 | Memory corruption in video due to buffer overflow while parsing ps video clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2022-25686 | 9.8 | Sep 16 | Memory corruption in video module due to buffer overflow while processing WAV file in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT,… Affected: All versions, or not specified |
| CVE-2022-25668 | 9.8 | Sep 2 | Memory corruption in video driver due to double free while parsing ASF clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2022-25659 | 9.8 | Sep 2 | Memory corruption due to buffer overflow while parsing MKV clips with invalid bitmap size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2022-25658 | 9.8 | Sep 2 | Memory corruption due to incorrect pointer arithmetic when attempting to change the endianness in video parser function in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2022-25657 | 9.8 | Sep 2 | Memory corruption due to buffer overflow occurs while processing invalid MKV clip which has invalid seek header in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2022-22096 | 9.8 | Sep 2 | Memory corruption in Bluetooth HOST due to stack-based buffer overflow when when extracting data using command length parameter in Snapdragon Connectivity, Snapdragon Mobile Affected: All versions, or not specified |
| CVE-2022-22087 | 9.8 | Jun 14 | memory corruption in video due to buffer overflow while parsing mkv clip with no codechecker in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2022-22086 | 9.8 | Jun 14 | Memory corruption in video due to double free while parsing 3gp clip with invalid meta data atoms in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-35104 | 9.8 | Jun 14 | Possible buffer overflow due to improper parsing of headers while playing the FLAC audio clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2021-35081 | 9.8 | Jun 14 | Possible buffer overflow due to improper validation of SSID length received from beacon or probe response during an IBSS session in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30341 | 9.8 | Jun 14 | Improper buffer size validation of DSM packet received can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2021-35068 | 9.8 | Feb 11 | Lack of null check while freeing the device information buffer in the Bluetooth HFP protocol can lead to a NULL pointer dereference in Snapdragon Auto, Snapdragon Compute,… Affected: All versions, or not specified |
The 500 most important CVEs for this product (exploited first, then by severity)
