qcn9024_firmware vulnerabilities
CVEs whose affected-version data names the qcn9024_firmware package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
8 CVEsRSS
CVE-2025-47392High· 8.8Memory corruption when decoding corrupted satellite data files with invalid signature offsets.
Memory corruption when decoding corrupted satellite data files with invalid signature offsets.
CVE-2025-47369Medium· 5.5Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID.
Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID.
CVE-2025-47331Medium· 6.1Information disclosure while processing a firmware event.
Information disclosure while processing a firmware event.
CVE-2025-47330Medium· 5.5Transient DOS while parsing video packets received from the video firmware.
Transient DOS while parsing video packets received from the video firmware.
CVE-2025-47323High· 7.8Memory corruption while routing GPR packets between user and root when handling large data packet.
Memory corruption while routing GPR packets between user and root when handling large data packet.
CVE-2025-27060High· 8.8Memory corruption while performing SCM call with malformed inputs.
Memory corruption while performing SCM call with malformed inputs.
CVE-2025-27040Medium· 6.5Information disclosure may occur while processing the hypervisor log.
Information disclosure may occur while processing the hypervisor log.
CVE-2025-27059High· 8.8Memory corruption while performing SCM call.
Memory corruption while performing SCM call.