qca6436_firmware vulnerabilities
CVEs whose affected-version data names the qca6436_firmware package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
4 CVEsRSS
CVE-2025-27054High· 7.8Memory corruption while processing a malformed license file during reboot.
Memory corruption while processing a malformed license file during reboot.
▾ Twilightqualcomm · 315_5g_iot_modem_firmwareEPSS 0.09%via NVD
CVE-2025-27053High· 7.8Memory corruption during PlayReady APP usecase while processing TA commands.
Memory corruption during PlayReady APP usecase while processing TA commands.
▾ Twilightqualcomm · 315_5g_iot_modem_firmwareEPSS 0.09%via NVD
CVE-2025-21487High· 8.2Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.
Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.
▾ Twilightqualcomm · apq8017_firmwareEPSS 0.26%via NVD
CVE-2025-21484High· 8.2Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet.
Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet.
▾ Twilightqualcomm · sm8750_firmwareEPSS 0.26%via NVD