Qualcomm Qca6797aq Firmware vulnerabilities

CVE-2025-47330 Medium · 5.5 CWE-126 Jan 7, 2026

Buffer Over-read in Video

Transient DOS while parsing video packets received from the video firmware.

CVE-2025-47382 High · 7.8 CWE-863 Dec 18, 2025

Incorrect Authorization in Boot

Memory corruption while loading an invalid firmware in boot loader.

CVE-2025-47372 High · 8.4 CWE-787 Dec 18, 2025

Buffer Copy Without Checking Size of Input in Boot

Memory Corruption when a corrupted ELF image with an oversized file size is read into a buffer without authentication.

CVE-2025-47323 High · 7.8 CWE-190 Dec 18, 2025

Integer Overflow or Wraparound in Audio

Memory corruption while routing GPR packets between user and root when handling large data packet.

CVE-2025-47322 High · 7.8 CWE-416 Dec 18, 2025

Use After Free in Automotive Linux OS

Memory corruption while handling IOCTL calls to set mode.

CVE-2025-47320 High · 7.8 CWE-787 Dec 18, 2025

Out-of-bounds Write in Audio

Memory corruption while processing MFC channel configuration during music playback.

CVE-2025-47319 Medium · 6.7 CWE-497 Dec 18, 2025

Exposure of Sensitive System Information to an Unauthorized Control Sphere in HLOS

Information disclosure while exposing internal TA-to-TA communication APIs to HLOS

CVE-2025-47370 Medium · 6.5 CWE-617 Nov 4, 2025

Reachable Assertion in BT Controller

Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan.

CVE-2025-47365 High · 7.8 CWE-190 Nov 4, 2025

Integer Overflow or Wraparound in Automotive Platform

Memory corruption while processing large input data from a remote source via a communication interface.

CVE-2025-47362 Medium · 6.1 CWE-126 Nov 4, 2025

Buffer Over-read in Automotive Software platform based on QNX

Information disclosure while processing message from client with invalid payload.

CVE-2025-47361 High · 7.8 CWE-129 Nov 4, 2025

Improper Validation of Array Index in Automotive Software platform based on QNX

Memory corruption when triggering a subsystem crash with an out-of-range identifier.

CVE-2025-47360 High · 7.8 CWE-121 Nov 4, 2025

Stack-based Buffer Overflow in Automotive Software platform based on QNX

Memory corruption while processing client message during device management.

CVE-2025-47357 High · 7.8 CWE-306 Nov 4, 2025

Missing Authentication for Critical Function in SMSS

Information Disclosure when a user-level driver performs QFPROM read or write operations on Fuse regions.

CVE-2025-47353 High · 7.8 CWE-749 Nov 4, 2025

Exposed Dangerous Method or Function in Automotive Software platform based on QNX

Memory corruption while processing request sent from GVM.

CVE-2025-27070 High · 7.8 CWE-787 Nov 4, 2025

Out-of-bounds Write in Windows Compute

Memory corruption while performing encryption and decryption commands.

CVE-2025-47347 High · 7.8 CWE-121 Oct 9, 2025

Stack-based Buffer Overflow in Automotive Software platform based on QNX

Memory corruption while processing control commands in the virtual memory management interface.

CVE-2025-27054 High · 7.8 CWE-787 Oct 9, 2025

Out-of-bounds Write in Display

Memory corruption while processing a malformed license file during reboot.

CVE-2025-27053 High · 7.8 CWE-131 Oct 9, 2025

Incorrect Calculation of Buffer Size in HLOS

Memory corruption during PlayReady APP usecase while processing TA commands.

CVE-2023-33106 High · 7.8 KEV High · 49 CWE-119 Dec 5, 2023

Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability

Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.

CVE-2023-33107 High · 7.8 KEV High · 55 Public exploit CWE-190 Dec 5, 2023

Qualcomm Multiple Chipsets Integer Overflow Vulnerability

Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.

CVE-2023-33063 High · 7.8 KEV High · 49 CWE-416 Dec 5, 2023

Qualcomm Multiple Chipsets Use-After-Free Vulnerability

Memory corruption in DSP Services during a remote call from HLOS to DSP.