Qualcomm Qca6584au Firmware vulnerabilities

CVE-2025-47379 High · 7.8 CWE-416 Mar 2, 2026

Use After Free in Automotive Audio

Memory Corruption when concurrent access to shared buffer occurs due to improper synchronization between assignment and deallocation of buffer resources.

CVE-2025-47377 High · 7.8 CWE-416 Mar 2, 2026

Use After Free in Automotive Audio

Memory Corruption when accessing a buffer after it has been freed while processing IOCTL calls.

CVE-2025-47376 High · 7.8 CWE-416 Mar 2, 2026

Use After Free in Automotive Audio

Memory Corruption when concurrent access to shared buffer occurs during IOCTL calls.

CVE-2025-47375 High · 7.8 CWE-416 Mar 2, 2026

Use After Free in Automotive Audio

Memory corruption while handling different IOCTL calls from the user-space simultaneously.

CVE-2025-47373 High · 7.8 CWE-787 Mar 2, 2026

Out-of-bounds Write in Automotive

Memory Corruption when accessing buffers with invalid length during TA invocation.

CVE-2025-47371 Medium · 6.5 CWE-617 Mar 2, 2026

Reachable Assertion in Modem

Transient DOS when an LTE RLC packet with invalid TB is received by UE.

CVE-2025-47402 Medium · 6.5 CWE-125 Feb 2, 2026

Buffer Over-read in WLAN Firmware

Transient DOS when processing a received frame with an excessively large authentication information element.

CVE-2025-47366 High · 7.8 CWE-749 Feb 2, 2026

Exposed Dangerous Method or Function in HLOS

Cryptographic issue when a Trusted Zone with outdated code is triggered by a HLOS providing incorrect input.

CVE-2025-47348 High · 7.8 CWE-457 Jan 7, 2026

Use of Uninitialized Variable in HLOS

Memory corruption while processing identity credential operations in the trusted application.

CVE-2025-47346 High · 7.8 CWE-787 Jan 7, 2026

Out-of-bounds Write in HLOS

Memory corruption while processing a secure logging command in the trusted application.

CVE-2025-47345 High · 8.4 CWE-323 Jan 7, 2026

Reusing a Nonce, Key Pair in Encryption in Automotive Platform

Cryptographic issue may occur while encrypting license data.

CVE-2025-47339 High · 7.8 CWE-416 Jan 7, 2026

Use After Free in HLOS

Memory corruption while deinitializing a HDCP session.

CVE-2025-47333 Medium · 6.6 CWE-416 Jan 7, 2026

Use After Free in HLOS

Memory corruption while handling buffer mapping operations in the cryptographic driver.

CVE-2025-47331 Medium · 6.1 CWE-126 Jan 7, 2026

Buffer Over-read in Video

Information disclosure while processing a firmware event.

CVE-2025-47330 Medium · 5.5 CWE-126 Jan 7, 2026

Buffer Over-read in Video

Transient DOS while parsing video packets received from the video firmware.

CVE-2025-47323 High · 7.8 CWE-190 Dec 18, 2025

Integer Overflow or Wraparound in Audio

Memory corruption while routing GPR packets between user and root when handling large data packet.

CVE-2025-47322 High · 7.8 CWE-416 Dec 18, 2025

Use After Free in Automotive Linux OS

Memory corruption while handling IOCTL calls to set mode.

CVE-2025-47320 High · 7.8 CWE-787 Dec 18, 2025

Out-of-bounds Write in Audio

Memory corruption while processing MFC channel configuration during music playback.

CVE-2025-47319 Medium · 6.7 CWE-497 Dec 18, 2025

Exposure of Sensitive System Information to an Unauthorized Control Sphere in HLOS

Information disclosure while exposing internal TA-to-TA communication APIs to HLOS

CVE-2025-47370 Medium · 6.5 CWE-617 Nov 4, 2025

Reachable Assertion in BT Controller

Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan.

CVE-2025-47362 Medium · 6.1 CWE-126 Nov 4, 2025

Buffer Over-read in Automotive Software platform based on QNX

Information disclosure while processing message from client with invalid payload.

CVE-2025-27074 High · 7.8 CWE-131 Nov 4, 2025

Incorrect Calculation of Buffer Size in SCE-Mink

Memory corruption while processing a GP command response.

CVE-2025-27070 High · 7.8 CWE-787 Nov 4, 2025

Out-of-bounds Write in Windows Compute

Memory corruption while performing encryption and decryption commands.

CVE-2025-27064 Medium · 6.1 CWE-126 Nov 4, 2025

Buffer Over-read in Core Services

Information disclosure while registering commands from clients with diag through diagHal.

CVE-2025-27054 High · 7.8 CWE-787 Oct 9, 2025

Out-of-bounds Write in Display

Memory corruption while processing a malformed license file during reboot.