QF
Product
Qca6391 Firmware
On CISA KEVExploited in the wild
770
CVEs
8
On KEV
9.8
Max CVSS
4
New 30D
Severity mix
Critical 64High 436Medium 0Low 0
Watch
Add Qca6391 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-21479 In wildKEV | 8.6 | Jun 3 | Incorrect Authorization in Graphics Affected: All versions, or not specified |
| CVE-2025-21480 In wildKEV | 8.6 | Jun 3 | Incorrect Authorization in Graphics Windows Affected: All versions, or not specified |
| CVE-2024-43047 In wildKEV | 7.8 | Oct 7 | Use After Free in DSP Service Affected: 0 |
| CVE-2023-33107 In wildKEV | 7.8 | Dec 5 | Integer Overflow or Wraparound in Graphics Linux Affected: 0 |
| CVE-2023-33106 In wildKEV | 7.8 | Dec 5 | Use of Out-of-range Pointer Offset in Graphics Affected: 0 |
| CVE-2023-33063 In wildKEV | 7.8 | Dec 5 | Use After Free in DSP Services Affected: 0 |
| CVE-2022-22071 In wildKEV | 7.8 | Jun 14 | Qualcomm Multiple Chipsets Use-After-Free Vulnerability Affected: All versions, or not specified |
| CVE-2025-27038 In wildKEV | 7.5 | Jun 3 | Use After Free in Graphics Affected: All versions, or not specified |
| CVE-2026-25277 | 8.8 | Jun 1 | Buffer Copy Without Checking Size of Input in Secure Processor Affected: All versions, or not specified |
| CVE-2026-25276 | 8.8 | Jun 1 | Improper Validation of Array Index in Secure Processor Affected: All versions, or not specified |
| CVE-2025-47392 | 8.8 | Apr 6 | Integer Overflow or Wraparound in GPS Affected: All versions, or not specified |
| CVE-2023-43556 | 8.8 | Jun 3 | Memory corruption in Hypervisor when platform information mentioned is not aligned Affected: All versions, or not specified |
| CVE-2023-28585 | 8.8 | Dec 5 | Memory corruption while loading an ELF segment in TEE Kernel Affected: All versions, or not specified |
| CVE-2023-28572 | 8.8 | Nov 7 | Memory corruption in WLAN HOST while processing the WLAN scan descriptor list Affected: All versions, or not specified |
| CVE-2022-33288 | 8.8 | Apr 13 | Memory corruption due to buffer copy without checking the size of input in Core while sending SCM command to get write protection information Affected: All versions, or not specified |
| CVE-2022-33213 | 8.8 | Mar 10 | Memory corruption in modem due to buffer overflow while processing a PPP packet Affected: All versions, or not specified |
| CVE-2022-33280 | 8.8 | Feb 12 | Memory corruption due to access of uninitialized pointer in Bluetooth HOST while processing the AVRCP packet Affected: All versions, or not specified |
| CVE-2022-22088 | 8.8 | Jan 9 | Memory corruption in Bluetooth HOST due to buffer overflow while parsing the command response received from remote Affected: All versions, or not specified |
| CVE-2021-35123 | 8.8 | Jun 14 | Buffer copy in GATT multi notification due to improper length check for the data coming over-the-air in Snapdragon Connectivity, Snapdragon Industrial IOT Affected: All versions, or not specified |
| CVE-2021-1942 | 8.8 | Apr 1 | Improper handling of permissions of a shared memory region can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2021-30285 | 8.8 | Jan 13 | Improper validation of memory region in Hypervisor can lead to incorrect region mapping in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2024-33035 | 8.4 | Sep 2 | Integer Overflow or Wraparound in Display Affected: 0 |
| CVE-2024-21481 | 8.4 | Aug 5 | Memory corruption when preparing a shared memory notification for a memparcel in Resource Manager Affected: All versions, or not specified |
| CVE-2021-35134 | 8.4 | Sep 2 | Due to insufficient validation of ELF headers, an Incorrect Calculation of Buffer Size can occur in Boot leading to memory corruption in Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1949 | 8.4 | Oct 20 | Possible integer overflow due to improper check of batch count value while sanitizer is enabled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1917 | 8.4 | Oct 20 | Null pointer dereference can occur due to memory allocation failure in DIAG in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1913 | 8.4 | Oct 20 | Possible integer overflow due to improper length check while updating grace period and count record in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2025-21487 | 8.2 | Sep 24 | Buffer Over-read in Data Network Stack & Connectivity Affected: All versions, or not specified |
| CVE-2025-21484 | 8.2 | Sep 24 | Buffer Over-read in Data Network Stack & Connectivity Affected: All versions, or not specified |
| CVE-2024-53021 | 8.2 | Jun 3 | Buffer Over-read in Data Network Stack & Connectivity Affected: All versions, or not specified |
| CVE-2024-23359 | 8.2 | Sep 2 | Buffer Over-read in Multi Mode Call Processor Affected: 0 |
| CVE-2020-11263 | 8.2 | Jan 3 | An integer overflow due to improper check performed after the address and size passed are aligned in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2026-24079 | 8.1 | Aug 4 | Missing Authentication for Critical Function in Data Modem Affected: All versions, or not specified |
| CVE-2022-33268 | 8.1 | Dec 13 | Information disclosure due to buffer over-read in Bluetooth HOST while pairing and connecting A2DP Affected: All versions, or not specified |
| CVE-2021-30347 | 8.1 | Jun 14 | Improper integrity check can lead to race condition between tasks PDCP and RRC? right after a valid RRC Command packet has been received in Snapdragon Auto, Snapdragon Compute,… Affected: All versions, or not specified |
| CVE-2024-53011 | 7.9 | Mar 3 | Permissions, Privileges, and Access Controls in Video Analytics and Processing Affected: All versions, or not specified |
| CVE-2026-57545 | 7.8 | Oct 6 | Untrusted Pointer Dereference in Graphics Affected: All versions, or not specified |
| CVE-2026-25291 | 7.8 | Oct 6 | Use After Free in Graphics Affected: All versions, or not specified |
| CVE-2026-21379 | 7.8 | Jul 6 | Buffer Over-read in Windows Compute Affected: All versions, or not specified |
| CVE-2025-59605 | 7.8 | Jun 1 | Out-of-bounds Write in HLOS Affected: All versions, or not specified |
| CVE-2026-21378 | 7.8 | Apr 6 | Buffer Over-read in Camera Affected: All versions, or not specified |
| CVE-2026-21376 | 7.8 | Apr 6 | Buffer Over-read in Camera Affected: All versions, or not specified |
| CVE-2026-21374 | 7.8 | Apr 6 | Buffer Over-read in Camera Affected: All versions, or not specified |
| CVE-2026-21373 | 7.8 | Apr 6 | Buffer Over-read in Camera Affected: All versions, or not specified |
| CVE-2026-21371 | 7.8 | Apr 6 | Buffer Over-read in WinBlast Driver Affected: All versions, or not specified |
| CVE-2025-47391 | 7.8 | Apr 6 | Stack-based Buffer Overflow in Camera Driver Affected: All versions, or not specified |
| CVE-2025-59600 | 7.8 | Mar 2 | Buffer Over-read in Graphics Affected: All versions, or not specified |
| CVE-2025-47386 | 7.8 | Mar 2 | Use After Free in Automotive Audio Affected: All versions, or not specified |
| CVE-2025-47377 | 7.8 | Mar 2 | Use After Free in Automotive Audio Affected: All versions, or not specified |
| CVE-2025-47376 | 7.8 | Mar 2 | Use After Free in Automotive Audio Affected: All versions, or not specified |
The 500 most important CVEs for this product (exploited first, then by severity)
