VulnSea

qcn9012_firmware vulnerabilities

CVEs whose affected-version data names the qcn9012_firmware package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

17 CVEsRSS

CVE-2026-25272Medium· 6.7
3w ago

Memory Corruption when processing camera CRE driver operations with improper handling of buffer limits during hardware update preparation.

Memory Corruption when processing camera CRE driver operations with improper handling of buffer limits during hardware update preparation.

▾ Sunlitqualcomm · snapdragon_g1_gen_2_gaming_platform_firmwareEPSS 0.07%via NVD
CVE-2026-25269Medium· 6.7
3w ago

Memory corruption when processing camera requests with excessive batch and IO buffer configurations exceeds allocated memory size.

Memory corruption when processing camera requests with excessive batch and IO buffer configurations exceeds allocated memory size.

▾ Sunlitqualcomm · snapdragon_g1_gen_2_gaming_platform_firmwareEPSS 0.07%via NVD
CVE-2026-25267High· 7.8
3w ago

Memory corruption when non-secure loader rewrites page tables before secure memory initialization.

Memory corruption when non-secure loader rewrites page tables before secure memory initialization.

▾ Twilightqualcomm · qca6698au_firmwareEPSS 0.06%via NVD
CVE-2026-25263Medium· 6.6
3w ago

Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters.

Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters.

▾ Sunlitqualcomm · snapdragon_g1_gen_2_gaming_platform_firmwareEPSS 0.06%via NVD
CVE-2026-24081High· 7.4
1mo ago

Transient DOS when processing a channel map with insufficient used channels and adaptive frequency hopping is fully enabled.

Transient DOS when processing a channel map with insufficient used channels and adaptive frequency hopping is fully enabled.

▾ Twilightqualcomm · ar8035_firmwareEPSS 0.16%via NVD
CVE-2025-47404Medium· 6.5
5mo ago

Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified.

Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified.

▾ Sunlitqualcomm · qca8695au_firmwareEPSS 0.07%via NVD
CVE-2025-47392High· 8.8
6mo ago

Memory corruption when decoding corrupted satellite data files with invalid signature offsets.

Memory corruption when decoding corrupted satellite data files with invalid signature offsets.

▾ Twilightqualcomm · 5g_fixed_wireless_access_platform_firmwareEPSS 0.17%via NVD
CVE-2025-47391High· 7.8
6mo ago

Memory corruption while processing a frame request from user.

Memory corruption while processing a frame request from user.

▾ Twilightqualcomm · wcn3988_firmwareEPSS 0.10%via NVD
CVE-2025-47369Medium· 5.5
9mo ago

Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID.

Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID.

▾ Sunlitqualcomm · ar8035_firmwareEPSS 0.08%via NVD
CVE-2025-47337Medium· 6.7
9mo ago

Memory corruption while accessing a synchronization object during concurrent operations.

Memory corruption while accessing a synchronization object during concurrent operations.

▾ Sunlitqualcomm · fastconnect_6700_firmwareEPSS 0.08%via NVD
CVE-2025-47334Medium· 6.7
9mo ago

Memory corruption while processing shared command buffer packet between camera userspace and kernel.

Memory corruption while processing shared command buffer packet between camera userspace and kernel.

▾ Sunlitqualcomm · csra6620_firmwareEPSS 0.08%via NVD
CVE-2025-47331Medium· 6.1
9mo ago

Information disclosure while processing a firmware event.

Information disclosure while processing a firmware event.

▾ Sunlitqualcomm · ar8031_firmwareEPSS 0.08%via NVD
CVE-2025-47330Medium· 5.5
9mo ago

Transient DOS while parsing video packets received from the video firmware.

Transient DOS while parsing video packets received from the video firmware.

▾ Sunlitqualcomm · qca6678aq_firmwareEPSS 0.07%via NVD
CVE-2025-47323High· 7.8
10mo ago

Memory corruption while routing GPR packets between user and root when handling large data packet.

Memory corruption while routing GPR packets between user and root when handling large data packet.

▾ Twilightqualcomm · fastconnect_6900_firmwareEPSS 0.09%via NVD
CVE-2025-27060High· 8.8
1y ago

Memory corruption while performing SCM call with malformed inputs.

Memory corruption while performing SCM call with malformed inputs.

▾ Twilightqualcomm · immersive_home_214_platform_firmwareEPSS 0.09%via NVD
CVE-2025-27040Medium· 6.5
1y ago

Information disclosure may occur while processing the hypervisor log.

Information disclosure may occur while processing the hypervisor log.

▾ Sunlitqualcomm · csr8811_firmwareEPSS 0.08%via NVD
CVE-2025-27059High· 8.8
1y ago

Memory corruption while performing SCM call.

Memory corruption while performing SCM call.

▾ Twilightqualcomm · immersive_home_214_platform_firmwareEPSS 0.09%via NVD
qcn9012_firmware vulnerabilities (CVEs) · VulnSea