VulnSea

qca6696_firmware vulnerabilities

CVEs whose affected-version data names the qca6696_firmware package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

24 CVEsRSS

CVE-2026-57554High· 7.8
3w ago

Memory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC invocations.

Memory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC invocations.

▾ Twilightqualcomm · snapdragon_g1_gen_2_gaming_platform_firmwareEPSS 0.07%via NVD
CVE-2026-57545High· 7.8
3w ago

Memory corruption when processing draw objects of incorrect type during graphics command list execution.

Memory corruption when processing draw objects of incorrect type during graphics command list execution.

▾ Twilightqualcomm · snapdragon_g1_gen_2_gaming_platform_firmwareEPSS 0.08%via NVD
CVE-2026-25267High· 7.8
3w ago

Memory corruption when non-secure loader rewrites page tables before secure memory initialization.

Memory corruption when non-secure loader rewrites page tables before secure memory initialization.

▾ Twilightqualcomm · qca6698au_firmwareEPSS 0.06%via NVD
CVE-2026-25263Medium· 6.6
3w ago

Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters.

Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters.

▾ Sunlitqualcomm · snapdragon_g1_gen_2_gaming_platform_firmwareEPSS 0.06%via NVD
CVE-2026-25275High· 7.5
1mo ago

Transient DOS when processing authentication frames with invalid FILS information element header lengths.

Transient DOS when processing authentication frames with invalid FILS information element header lengths.

▾ Twilightqualcomm · q-7790_firmwareEPSS 0.34%via NVD
CVE-2026-25278High· 7.8
1mo ago

Memory Corruption when processing I2C transfer requests due to a race condition between memory allocation and data copying.

Memory Corruption when processing I2C transfer requests due to a race condition between memory allocation and data copying.

▾ Twilightqualcomm · lemans_au_lgit_firmwareEPSS 0.07%via NVD
CVE-2025-47404Medium· 6.5
5mo ago

Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified.

Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified.

▾ Sunlitqualcomm · qca8695au_firmwareEPSS 0.07%via NVD
CVE-2025-47392High· 8.8
6mo ago

Memory corruption when decoding corrupted satellite data files with invalid signature offsets.

Memory corruption when decoding corrupted satellite data files with invalid signature offsets.

▾ Twilightqualcomm · 5g_fixed_wireless_access_platform_firmwareEPSS 0.17%via NVD
CVE-2025-47389High· 7.8
6mo ago

Memory corruption when buffer copy operation fails due to integer overflow during attestation report generation.

Memory corruption when buffer copy operation fails due to integer overflow during attestation report generation.

▾ Twilightqualcomm · ar8035_firmwareEPSS 0.10%via NVD
CVE-2025-47339High· 7.8
9mo ago

Memory corruption while deinitializing a HDCP session.

Memory corruption while deinitializing a HDCP session.

▾ Twilightqualcomm · fastconnect_6900_firmwareEPSS 0.08%via NVD
CVE-2025-47369Medium· 5.5
9mo ago

Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID.

Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID.

▾ Sunlitqualcomm · ar8035_firmwareEPSS 0.08%via NVD
CVE-2025-47346High· 7.8
9mo ago

Memory corruption while processing a secure logging command in the trusted application.

Memory corruption while processing a secure logging command in the trusted application.

▾ Twilightqualcomm · sa8145p_firmwareEPSS 0.08%via NVD
CVE-2025-47345High· 8.4
9mo ago

Cryptographic issue may occur while encrypting license data.

Cryptographic issue may occur while encrypting license data.

▾ Twilightqualcomm · wcd9385_firmwareEPSS 0.08%via NVD
CVE-2025-47344Medium· 6.7
9mo ago

Memory corruption while handling sensor utility operations.

Memory corruption while handling sensor utility operations.

▾ Sunlitqualcomm · sa6155p_firmwareEPSS 0.06%via NVD
CVE-2025-47333Medium· 6.6
9mo ago

Memory corruption while handling buffer mapping operations in the cryptographic driver.

Memory corruption while handling buffer mapping operations in the cryptographic driver.

▾ Sunlitqualcomm · sa6150p_firmwareEPSS 0.08%via NVD
CVE-2025-47330Medium· 5.5
9mo ago

Transient DOS while parsing video packets received from the video firmware.

Transient DOS while parsing video packets received from the video firmware.

▾ Sunlitqualcomm · qca6678aq_firmwareEPSS 0.07%via NVD
CVE-2025-47323High· 7.8
10mo ago

Memory corruption while routing GPR packets between user and root when handling large data packet.

Memory corruption while routing GPR packets between user and root when handling large data packet.

▾ Twilightqualcomm · fastconnect_6900_firmwareEPSS 0.09%via NVD
CVE-2025-47347High· 7.8
1y ago

Memory corruption while processing control commands in the virtual memory management interface.

Memory corruption while processing control commands in the virtual memory management interface.

▾ Twilightqualcomm · qam8255p_firmwareEPSS 0.09%via NVD
CVE-2025-27054High· 7.8
1y ago

Memory corruption while processing a malformed license file during reboot.

Memory corruption while processing a malformed license file during reboot.

▾ Twilightqualcomm · 315_5g_iot_modem_firmwareEPSS 0.09%via NVD
CVE-2025-27041Medium· 5.5
1y ago

Transient DOS while processing video packets received from video firmware.

Transient DOS while processing video packets received from video firmware.

▾ Sunlitqualcomm · ar8035_firmwareEPSS 0.08%via NVD
CVE-2025-27030Medium· 6.1
1y ago

information disclosure while invoking calibration data from user space to update firmware size.

information disclosure while invoking calibration data from user space to update firmware size.

▾ Sunlitqualcomm · c-v2x_9150_firmwareEPSS 0.09%via NVD
CVE-2025-21488High· 8.2
1y ago

Information disclosure while decoding this RTP packet headers received by UE from the network when the padding bit is set.

Information disclosure while decoding this RTP packet headers received by UE from the network when the padding bit is set.

▾ Twilightqualcomm · fastconnect_6200_firmwareEPSS 0.27%via NVD
CVE-2025-21487High· 8.2
1y ago

Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.

Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.

▾ Twilightqualcomm · apq8017_firmwareEPSS 0.26%via NVD
CVE-2025-21484High· 8.2
1y ago

Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet.

Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet.

▾ Twilightqualcomm · sm8750_firmwareEPSS 0.26%via NVD
qca6696_firmware vulnerabilities (CVEs) · VulnSea