QF
Product
Qcn9074 Firmware
by Qualcomm · last CVE Dec 18, 2025
115
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 79Medium 33Low 0
Watch

Add Qcn9074 Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-33037
6.1
0%
Dec 2
Information disclosure as NPU firmware can send invalid IPC message to NPU driver as the driver doesn`t validate the IPC message received from the firmware
Affected: All versions, or not specified
CVE-2025-47325
5.5
0%
Dec 18
Information disclosure while processing system calls with invalid parameters
Affected: All versions, or not specified
CVE-2024-43051
5.5
0%
Mar 3
Information disclosure while deriving keys for a session for any Widevine use case
Affected: All versions, or not specified
CVE-2024-38417
5.5
0%
Feb 3
Information disclosure while processing IO control commands
Affected: All versions, or not specified
CVE-2024-38416
5.5
0%
Feb 3
Information disclosure during audio playback
Affected: All versions, or not specified
CVE-2024-33067
5.5
0%
Jan 6
Buffer Over-read in Audio
Affected: All versions, or not specified
CVE-2023-43528
5.5
0%
May 6
Information disclosure when the ADSP payload size received in HLOS in response to Audio Stream Manager matrix session is less than this expected size
Affected: All versions, or not specified
CVE-2023-43527
5.5
0%
May 6
Information disclosure while parsing dts header atom in Video
Affected: All versions, or not specified
CVE-2023-33111
5.5
0%
Apr 1
Information disclosure when VI calibration state set by ADSP is greater than MAX_FBSP_STATE in the response payload to AFE calibration command
Affected: All versions, or not specified
CVE-2023-33064
5.5
0%
Feb 6
Transient DOS in Audio when invoking callback function of ASM driver
Affected: All versions, or not specified
CVE-2023-33070
5.5
0%
Dec 5
Transient DOS in Automotive OS due to improper authentication to the secure IO calls
Affected: All versions, or not specified
CVE-2023-28571
5.5
0%
Oct 3
Information disclosure in WLAN HOST while processing the WLAN scan descriptor list during roaming scan
Affected: All versions, or not specified
CVE-2022-40525
5.5
0%
Jun 6
Information disclosure in Linux Networking Firmware due to unauthorized information leak during side channel analysis
Affected: All versions, or not specified
CVE-2022-40518
5.5
0%
Jan 9
Information disclosure due to buffer overread in Core
Affected: All versions, or not specified
CVE-2021-30278
5.5
0%
Jan 3
Improper input validation in TrustZone memory transfer interface can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
Affected: All versions, or not specified
Page 3 of 3 · 115 total