QF
Product
Qca6391 Firmware
by Qualcomm · last CVE Oct 6, 2026
On CISA KEVExploited in the wild
770
CVEs
8
On KEV
9.8
Max CVSS
4
New 30D
Severity mix
Critical 64High 436Medium 0Low 0
Watch

Add Qca6391 Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-21479
In wildKEV
8.6
1%
Jun 3
Incorrect Authorization in Graphics
Affected: All versions, or not specified
CVE-2025-21480
In wildKEV
8.6
0%
Jun 3
Incorrect Authorization in Graphics Windows
Affected: All versions, or not specified
CVE-2024-43047
In wildKEV
7.8
1%
Oct 7
Use After Free in DSP Service
Affected: 0
CVE-2023-33107
In wildKEV
7.8
1%
Dec 5
Integer Overflow or Wraparound in Graphics Linux
Affected: 0
CVE-2023-33106
In wildKEV
7.8
1%
Dec 5
Use of Out-of-range Pointer Offset in Graphics
Affected: 0
CVE-2023-33063
In wildKEV
7.8
1%
Dec 5
Use After Free in DSP Services
Affected: 0
CVE-2022-22071
In wildKEV
7.8
0%
Jun 14
Qualcomm Multiple Chipsets Use-After-Free Vulnerability
Affected: All versions, or not specified
CVE-2025-27038
In wildKEV
7.5
1%
Jun 3
Use After Free in Graphics
Affected: All versions, or not specified
CVE-2026-25277
8.8
0%
Jun 1
Buffer Copy Without Checking Size of Input in Secure Processor
Affected: All versions, or not specified
CVE-2026-25276
8.8
0%
Jun 1
Improper Validation of Array Index in Secure Processor
Affected: All versions, or not specified
CVE-2025-47392
8.8
0%
Apr 6
Integer Overflow or Wraparound in GPS
Affected: All versions, or not specified
CVE-2023-43556
8.8
0%
Jun 3
Memory corruption in Hypervisor when platform information mentioned is not aligned
Affected: All versions, or not specified
CVE-2023-28585
8.8
0%
Dec 5
Memory corruption while loading an ELF segment in TEE Kernel
Affected: All versions, or not specified
CVE-2023-28572
8.8
0%
Nov 7
Memory corruption in WLAN HOST while processing the WLAN scan descriptor list
Affected: All versions, or not specified
CVE-2022-33288
8.8
0%
Apr 13
Memory corruption due to buffer copy without checking the size of input in Core while sending SCM command to get write protection information
Affected: All versions, or not specified
CVE-2022-33213
8.8
0%
Mar 10
Memory corruption in modem due to buffer overflow while processing a PPP packet
Affected: All versions, or not specified
CVE-2022-33280
8.8
0%
Feb 12
Memory corruption due to access of uninitialized pointer in Bluetooth HOST while processing the AVRCP packet
Affected: All versions, or not specified
CVE-2022-22088
8.8
1%
Jan 9
Memory corruption in Bluetooth HOST due to buffer overflow while parsing the command response received from remote
Affected: All versions, or not specified
CVE-2021-35123
8.8
0%
Jun 14
Buffer copy in GATT multi notification due to improper length check for the data coming over-the-air in Snapdragon Connectivity, Snapdragon Industrial IOT
Affected: All versions, or not specified
CVE-2021-1942
8.8
0%
Apr 1
Improper handling of permissions of a shared memory region can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
Affected: All versions, or not specified
CVE-2021-30285
8.8
0%
Jan 13
Improper validation of memory region in Hypervisor can lead to incorrect region mapping in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
Affected: All versions, or not specified
CVE-2024-33035
8.4
0%
Sep 2
Integer Overflow or Wraparound in Display
Affected: 0
CVE-2024-21481
8.4
0%
Aug 5
Memory corruption when preparing a shared memory notification for a memparcel in Resource Manager
Affected: All versions, or not specified
CVE-2021-35134
8.4
0%
Sep 2
Due to insufficient validation of ELF headers, an Incorrect Calculation of Buffer Size can occur in Boot leading to memory corruption in Snapdragon Connectivity, Snapdragon…
Affected: All versions, or not specified
CVE-2021-1949
8.4
0%
Oct 20
Possible integer overflow due to improper check of batch count value while sanitizer is enabled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
Affected: All versions, or not specified
CVE-2021-1917
8.4
0%
Oct 20
Null pointer dereference can occur due to memory allocation failure in DIAG in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon…
Affected: All versions, or not specified
CVE-2021-1913
8.4
0%
Oct 20
Possible integer overflow due to improper length check while updating grace period and count record in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
Affected: All versions, or not specified
CVE-2025-21487
8.2
0%
Sep 24
Buffer Over-read in Data Network Stack & Connectivity
Affected: All versions, or not specified
CVE-2025-21484
8.2
0%
Sep 24
Buffer Over-read in Data Network Stack & Connectivity
Affected: All versions, or not specified
CVE-2024-53021
8.2
0%
Jun 3
Buffer Over-read in Data Network Stack & Connectivity
Affected: All versions, or not specified
CVE-2024-23359
8.2
0%
Sep 2
Buffer Over-read in Multi Mode Call Processor
Affected: 0
CVE-2020-11263
8.2
0%
Jan 3
An integer overflow due to improper check performed after the address and size passed are aligned in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
Affected: All versions, or not specified
CVE-2026-24079
8.1
0%
Aug 4
Missing Authentication for Critical Function in Data Modem
Affected: All versions, or not specified
CVE-2022-33268
8.1
0%
Dec 13
Information disclosure due to buffer over-read in Bluetooth HOST while pairing and connecting A2DP
Affected: All versions, or not specified
CVE-2021-30347
8.1
1%
Jun 14
Improper integrity check can lead to race condition between tasks PDCP and RRC? right after a valid RRC Command packet has been received in Snapdragon Auto, Snapdragon Compute,…
Affected: All versions, or not specified
CVE-2024-53011
7.9
0%
Mar 3
Information disclosure may occur due to improper permission and access controls to Video Analytics engine
Affected: All versions, or not specified
CVE-2026-57545
7.8
0%
Oct 6
Untrusted Pointer Dereference in Graphics
Affected: All versions, or not specified
CVE-2026-25291
7.8
0%
Oct 6
Use After Free in Graphics
Affected: All versions, or not specified
CVE-2026-21379
7.8
0%
Jul 6
Buffer Over-read in Windows Compute
Affected: All versions, or not specified
CVE-2025-59605
7.8
0%
Jun 1
Out-of-bounds Write in HLOS
Affected: All versions, or not specified
CVE-2026-21378
7.8
0%
Apr 6
Buffer Over-read in Camera
Affected: All versions, or not specified
CVE-2026-21376
7.8
0%
Apr 6
Buffer Over-read in Camera
Affected: All versions, or not specified
CVE-2026-21374
7.8
0%
Apr 6
Buffer Over-read in Camera
Affected: All versions, or not specified
CVE-2026-21373
7.8
0%
Apr 6
Buffer Over-read in Camera
Affected: All versions, or not specified
CVE-2026-21371
7.8
0%
Apr 6
Buffer Over-read in WinBlast Driver
Affected: All versions, or not specified
CVE-2025-47391
7.8
0%
Apr 6
Stack-based Buffer Overflow in Camera Driver
Affected: All versions, or not specified
CVE-2025-59600
7.8
0%
Mar 2
Buffer Over-read in Graphics
Affected: All versions, or not specified
CVE-2025-47386
7.8
0%
Mar 2
Use After Free in Automotive Audio
Affected: All versions, or not specified
CVE-2025-47377
7.8
0%
Mar 2
Use After Free in Automotive Audio
Affected: All versions, or not specified
CVE-2025-47376
7.8
0%
Mar 2
Use After Free in Automotive Audio
Affected: All versions, or not specified
Page 1 of 9 · 436 total
12…9
The 500 most important CVEs for this product (exploited first, then by severity)