qca6698aq_firmware vulnerabilities
CVEs whose affected-version data names the qca6698aq_firmware package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
35 CVEsRSS
CVE-2026-57554High· 7.8Memory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC invocations.
Memory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC invocations.
CVE-2026-57545High· 7.8Memory corruption when processing draw objects of incorrect type during graphics command list execution.
Memory corruption when processing draw objects of incorrect type during graphics command list execution.
CVE-2026-57537High· 7.8Memory Corruption when accessing and modifying geographic mapping data concurrently without proper synchronization.
Memory Corruption when accessing and modifying geographic mapping data concurrently without proper synchronization.
CVE-2026-25291High· 7.8Memory corruption when performing concurrent operations on shared memory page lists due to lack of proper synchronization mechanisms.
Memory corruption when performing concurrent operations on shared memory page lists due to lack of proper synchronization mechanisms.
CVE-2026-25272Medium· 6.7Memory Corruption when processing camera CRE driver operations with improper handling of buffer limits during hardware update preparation.
Memory Corruption when processing camera CRE driver operations with improper handling of buffer limits during hardware update preparation.
CVE-2026-25270Medium· 6.7Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver.
Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver.
CVE-2026-25269Medium· 6.7Memory corruption when processing camera requests with excessive batch and IO buffer configurations exceeds allocated memory size.
Memory corruption when processing camera requests with excessive batch and IO buffer configurations exceeds allocated memory size.
CVE-2026-25267High· 7.8Memory corruption when non-secure loader rewrites page tables before secure memory initialization.
Memory corruption when non-secure loader rewrites page tables before secure memory initialization.
CVE-2026-25263Medium· 6.6Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters.
Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters.
CVE-2026-24081High· 7.4Transient DOS when processing a channel map with insufficient used channels and adaptive frequency hopping is fully enabled.
Transient DOS when processing a channel map with insufficient used channels and adaptive frequency hopping is fully enabled.
CVE-2026-25275High· 7.5Transient DOS when processing authentication frames with invalid FILS information element header lengths.
Transient DOS when processing authentication frames with invalid FILS information element header lengths.
CVE-2026-25278High· 7.8Memory Corruption when processing I2C transfer requests due to a race condition between memory allocation and data copying.
Memory Corruption when processing I2C transfer requests due to a race condition between memory allocation and data copying.
CVE-2025-47404Medium· 6.5Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified.
Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified.
CVE-2025-47392High· 8.8Memory corruption when decoding corrupted satellite data files with invalid signature offsets.
Memory corruption when decoding corrupted satellite data files with invalid signature offsets.
CVE-2025-47391High· 7.8Memory corruption while processing a frame request from user.
Memory corruption while processing a frame request from user.
CVE-2025-47389High· 7.8Memory corruption when buffer copy operation fails due to integer overflow during attestation report generation.
Memory corruption when buffer copy operation fails due to integer overflow during attestation report generation.
CVE-2025-47339High· 7.8Memory corruption while deinitializing a HDCP session.
Memory corruption while deinitializing a HDCP session.
CVE-2025-47393High· 7.8Memory corruption when accessing resources in kernel driver.
Memory corruption when accessing resources in kernel driver.
CVE-2025-47369Medium· 5.5Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID.
Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID.
CVE-2025-47346High· 7.8Memory corruption while processing a secure logging command in the trusted application.
Memory corruption while processing a secure logging command in the trusted application.
CVE-2025-47345High· 8.4Cryptographic issue may occur while encrypting license data.
Cryptographic issue may occur while encrypting license data.
CVE-2025-47344Medium· 6.7Memory corruption while handling sensor utility operations.
Memory corruption while handling sensor utility operations.
CVE-2025-47337Medium· 6.7Memory corruption while accessing a synchronization object during concurrent operations.
Memory corruption while accessing a synchronization object during concurrent operations.
CVE-2025-47335Medium· 6.7Memory corruption while parsing clock configuration data for a specific hardware type.
Memory corruption while parsing clock configuration data for a specific hardware type.
CVE-2025-47334Medium· 6.7Memory corruption while processing shared command buffer packet between camera userspace and kernel.
Memory corruption while processing shared command buffer packet between camera userspace and kernel.
CVE-2025-47333Medium· 6.6Memory corruption while handling buffer mapping operations in the cryptographic driver.
Memory corruption while handling buffer mapping operations in the cryptographic driver.
CVE-2025-47330Medium· 5.5Transient DOS while parsing video packets received from the video firmware.
Transient DOS while parsing video packets received from the video firmware.
CVE-2025-47323High· 7.8Memory corruption while routing GPR packets between user and root when handling large data packet.
Memory corruption while routing GPR packets between user and root when handling large data packet.
CVE-2025-47347High· 7.8Memory corruption while processing control commands in the virtual memory management interface.
Memory corruption while processing control commands in the virtual memory management interface.
CVE-2025-27054High· 7.8Memory corruption while processing a malformed license file during reboot.
Memory corruption while processing a malformed license file during reboot.