QF
Product
Qca6426 Firmware
by Qualcomm · last CVE Nov 4, 2025
On CISA KEVExploited in the wild
522
CVEs
5
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 45High 389Medium 66Low 0
Watch

Add Qca6426 Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-33111
5.5
0%
Apr 1
Information disclosure when VI calibration state set by ADSP is greater than MAX_FBSP_STATE in the response payload to AFE calibration command
Affected: All versions, or not specified
CVE-2023-33090
5.5
0%
Mar 4
Transient DOS while processing channel information for speaker protection v2 module in ADSP
Affected: All versions, or not specified
CVE-2023-33064
5.5
0%
Feb 6
Transient DOS in Audio when invoking callback function of ASM driver
Affected: All versions, or not specified
CVE-2023-33037
5.5
0%
Jan 2
Cryptographic issue in Automotive while unwrapping the key secs2d and verifying with RPMB data
Affected: All versions, or not specified
CVE-2023-33036
5.5
0%
Jan 2
Permanent DOS in Hypervisor while untrusted VM without PSCI support makes a PSCI call
Affected: All versions, or not specified
CVE-2023-28554
5.5
0%
Nov 7
Information Disclosure in Qualcomm IPC while reading values from shared memory in VM
Affected: All versions, or not specified
CVE-2023-28553
5.5
0%
Nov 7
Information Disclosure in WLAN Host when processing WMI event command
Affected: All versions, or not specified
CVE-2023-28571
5.5
0%
Oct 3
Information disclosure in WLAN HOST while processing the WLAN scan descriptor list during roaming scan
Affected: All versions, or not specified
CVE-2022-33220
5.5
0%
Sep 5
Information disclosure in Automotive multimedia due to buffer over-read
Affected: All versions, or not specified
CVE-2023-21624
5.5
0%
Jul 4
Information disclosure in DSP Services while loading dynamic module
Affected: All versions, or not specified
CVE-2022-40533
5.5
0%
Jun 6
Transient DOS due to untrusted Pointer Dereference in core while sending USB QMI request
Affected: All versions, or not specified
CVE-2022-40523
5.5
0%
Jun 6
Information disclosure in Kernel due to indirect branch misprediction
Affected: All versions, or not specified
CVE-2022-33273
5.5
0%
May 2
Information disclosure due to buffer over-read in Trusted Execution Environment while QRKS report generation
Affected: All versions, or not specified
CVE-2022-22075
5.5
0%
Mar 10
Information Disclosure in Graphics during GPU context switch
Affected: All versions, or not specified
CVE-2022-40519
5.5
0%
Jan 9
Information disclosure due to buffer overread in Core
Affected: All versions, or not specified
CVE-2022-40518
5.5
0%
Jan 9
Information disclosure due to buffer overread in Core
Affected: All versions, or not specified
Page 2 of 2 · 66 total
The 500 most important CVEs for this product (exploited first, then by severity)