Skip to content
Qualcomm Qca6438 vulnerabilities
-
qualcomm 5g fixed wireless access platform firmware, aqt1000 firmware, ar8031 firmware +374 more +376 more
Buffer Over-read in WLAN Firmware
CVE-2026-25275
7.5 High
-
qualcomm ar8035 firmware, ar9380 firmware, csr8811 firmware +183 more +185 more
Use After Free in HLOS
CVE-2025-47339
7.8 High
-
qualcomm csr8811 firmware, ipq8070 firmware, ipq8070a firmware +42 more +44 more
Untrusted Pointer Dereference in TZ Firmware
CVE-2025-47325
6.5 Medium
-
qualcomm apq8064au firmware, csr8811 firmware, immersive home 214 platform firmware +93 more +95 more
Incorrect Calculation of Buffer Size in SCE-Mink
CVE-2025-27074
8.8 High
-
qualcomm csr8811 firmware, immersive home 214 platform firmware, immersive home 216 platform firmware +63 more +65 more
Improper Input Validation in TZ Firmware
CVE-2025-27040
6.5 Medium
-
qualcomm 315 5g iot modem firmware, aqt1000 firmware, ar8031 firmware +370 more +372 more
Reachable Assertion in WLAN Firmware
CVE-2025-27066
7.5 High
-
qualcomm 205 mobile platform firmware, 315 5g iot modem firmware, 9205 lte modem firmware +327 more +329 more
Buffer Over-read in MProc
CVE-2024-33056
8.4 High
-
qualcomm ar8035 firmware, ar9380 firmware, csr8811 firmware +130 more +132 more
Improper Input Validation in WIN SON
CVE-2024-21473
9.8 Critical
-
qualcomm ar8035 firmware, ar9380 firmware, csr8811 firmware +158 more +160 more
Configuration Issue in WLAN Host and Firmware
CVE-2023-33105
Public exploit
7.5 High
-
qualcomm 315 5g iot modem firmware, aqt1000 firmware, ar8031 firmware +307 more +309 more
Buffer Over-read in WLAN Firmware
CVE-2023-43536
7.5 High
-
qualcomm 315 5g iot modem firmware, 9206 lte modem firmware, apq8017 firmware +354 more +356 more
Loop with Unreachable Exit Condition (Infinite Loop) in WLAN Firmware
CVE-2023-43511
7.5 High
-
qualcomm 315 5g iot modem firmware, aqt1000 firmware, ar8031 firmware +308 more +310 more
NULL Pointer Dereference in WLAN Firmware
CVE-2023-33109
7.5 High
-
qualcomm 315 5g iot modem firmware, 8098 firmware, 8998 firmware +364 more +366 more
Buffer over-read in WLAN Firmware
CVE-2023-33080
7.5 High
-
qualcomm aqt1000 firmware, ar9380 firmware, csr8811 firmware +206 more +208 more
Buffer Over-read in WLAN HAL
CVE-2023-28569
6.1 Medium
-
qualcomm aqt1000 firmware, ar8031 firmware, ar8035 firmware +228 more +230 more
Buffer Over-read in IOE Firmware
CVE-2023-28563
6.1 Medium
-
qualcomm 315 5g iot modem firmware, 8098 firmware, 8998 firmware +350 more +352 more
Buffer Over-read in WLAN Firmware
CVE-2023-33027
7.5 High
-
qualcomm 315 5g firmware, aqt1000 firmware, ar8035 firmware +192 more +194 more
Buffer Over-read in WLAN Firmware
CVE-2023-33015
7.5 High
-
qualcomm 315 5g iot firmware, aqt1000 firmware, ar8031 firmware +289 more +291 more
Improper Validation of Array Index in WLAN HAL
CVE-2023-28567
7.8 High
-
qualcomm 9205 lte firmware, apq8017 firmware, apq8064au firmware +292 more +294 more
Improper Validation of Array Index in WLAN HAL
CVE-2023-28565
7.8 High
-
qualcomm aqt1000 firmware, ar8031 firmware, ar9380 firmware +247 more +249 more
Use of Out-of-range Pointer Offset in WLAN HAL
CVE-2023-28564
7.8 High
-
qualcomm 8098 firmware, 8998 firmware, apq5053-aa firmware +265 more +267 more
Buffer Copy Without Checking Size of Input in WLAN HAL
CVE-2023-28560
7.8 High
-
qualcomm aqt1000 firmware, ar8031 firmware, ar9380 firmware +211 more +213 more
Buffer Copy Without Checking Size of Input in WLAN HAL
CVE-2023-28559
7.8 High
-
qualcomm 315 5g iot modem firmware, aqt1000 firmware, ar8031 firmware +198 more +200 more
Improper Validation of Array Index in WLAN HAL
CVE-2023-28558
7.8 High
-
qualcomm 315 5g iot modem firmware, aqt1000 firmware, ar8031 firmware +276 more +278 more
Improper Validation of Array Index in WLAN HAL
CVE-2023-28557
7.8 High
-
qualcomm 315 5g iot modem firmware, aqt1000 firmware, ar8035 firmware +223 more +225 more
Improper Restriction of Operations within the Bounds of a Memory Buffer in WLAN HAL
CVE-2023-28549
7.8 High
-
qualcomm aqt1000 firmware, ar9380 firmware, csr8811 firmware +204 more +206 more
Buffer Copy without Checking the Size of Input in WLAN Firmware
CVE-2023-28544
7.8 High
-
qualcomm 315 5g iot modem firmware, apq5053-aa firmware, aqt1000 firmware +257 more +259 more
Improper validation of array index in WLAN HAL
CVE-2022-33275
8.4 High
-
qualcomm apq8017 firmware, apq8064au firmware, apq8076 firmware +281 more +283 more
Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN HAL
CVE-2023-21628
8.4 High
-
qualcomm 315 5g iot modem firmware, 8953pro firmware, 9205 lte modem firmware +346 more +348 more
Cryptographic issue in Core
CVE-2022-22076
7.1 High
-
qualcomm 315 5g iot modem firmware, 8905 firmware, 8909 firmware +351 more +353 more
Integer overflow or wraparound in WLAN
CVE-2022-40532
8.4 High
-
qualcomm apq8009 firmware, apq8017 firmware, apq8076 firmware +282 more +284 more
Incorrect type conversion in WLAN
CVE-2022-40531
8.4 High
-
qualcomm apq8009 firmware, apq8017 firmware, apq8076 firmware +236 more +238 more
Buffer copy without checking the size of input in WLAN HAL.
CVE-2022-25655
8.4 High
-
qualcomm apq8009 firmware, apq8017 firmware, apq8064au firmware +293 more +295 more
Buffer over-read in WLAN Firmware.
CVE-2022-40512
7.5 High
-
qualcomm aqt1000 firmware, ar8031 firmware, ar8035 firmware +241 more +243 more
Buffer copy without checking size of input in modem
CVE-2022-33277
8.4 High
-
qualcomm apq8009 firmware, apq8017 firmware, apq8064au firmware +279 more +281 more
Buffer over-read in WLAN
CVE-2022-33286
7.5 High
-
qualcomm apq8009 firmware, apq8017 firmware, apq8064au firmware +276 more +278 more
Buffer over-read in WLAN
CVE-2022-33285
7.5 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +282 more +284 more
Transient DOS due to loop with unreachable exit condition in WLAN while processing an incoming...
CVE-2022-33238
7.5 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8096au firmware +244 more +246 more
Information disclosure due to buffer over-read in WLAN firmware while parsing security context...
CVE-2022-33235
8.2 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8031 firmware +236 more +238 more
Transient DOS due to buffer over-read in WLAN firmware while processing PPE threshold. in...
CVE-2022-33237
7.5 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +274 more +276 more
Transient Denial-of-Service in WLAN due to buffer over-read while parsing MDNS frames. in...
CVE-2022-25749
7.5 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +271 more +273 more
Memory corruption in WLAN due to integer overflow to buffer overflow while parsing GTK frames. in...
CVE-2022-25748
9.8 Critical
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8031 firmware +241 more +243 more
Denial of service in WLAN due to out-of-bound read happens while processing VHT action frame in...
CVE-2022-25736
7.5 High
-
qualcomm, inc. snapdragon wired infrastructure and networking, qualcomm csr8811 firmware, ipq5010 firmware +58 more +60 more
Cryptographic issues in BSP due to improper hash verification in Snapdragon Wired Infrastructure...
CVE-2022-25652
9.0 Critical
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009w firmware, apq8017 firmware +174 more +176 more
Possible buffer overflow due to improper parsing of headers while playing the FLAC audio clip in...
CVE-2021-35104
9.8 Critical
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8035 firmware +169 more +171 more
Possible buffer over read due to lack of size validation while copying data from DBR buffer to RX...
CVE-2021-35071
Fix available
5.5 Medium
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8035 firmware +183 more +185 more
Possible out of bound read due to improper validation of IE length during SSID IE parse when...
CVE-2021-35088
Fix available
8.2 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8096au firmware, aqt1000 firmware +189 more +191 more
Improper validation of data length received from DMA buffer can lead to memory corruption. in...
CVE-2021-35069
Fix available
7.8 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8096au firmware, ar8031 firmware +157 more +159 more
Possible out of bound access of DCI resources due to lack of validation process and resource...
CVE-2021-30325
Fix available
6.7 Medium
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8096au firmware, ar8031 firmware +149 more +151 more
Possible out of bound write due to lack of boundary check for the maximum size of buffer when...
CVE-2021-30324
Fix available
6.7 Medium
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +194 more +196 more
An out of bound memory access can occur due to improper validation of number of frames being...
CVE-2021-30351
9.8 Critical
- Show olderLoading…