Qualcomm Qcn9074 Firmware vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Qualcomm Qcn9074 Firmware: 12 record(s), with affected versions and fixes.cpe:2.3:o:qualcomm:qcn9074_firmware
CVE-2025-47339
High · 7.8
CWE-416 Jan 7, 2026
Use After Free in HLOS
Memory corruption while deinitializing a HDCP session.
CVE-2025-47331
Medium · 6.1
CWE-126 Jan 7, 2026
Buffer Over-read in Video
Information disclosure while processing a firmware event.
CVE-2025-47325
Medium · 5.5
CWE-822 Dec 18, 2025
Untrusted Pointer Dereference in TZ Firmware
Information disclosure while processing system calls with invalid parameters.
CVE-2025-27074
High · 7.8
CWE-131 Nov 4, 2025
Incorrect Calculation of Buffer Size in SCE-Mink
Memory corruption while processing a GP command response.
CVE-2025-27064
Medium · 6.1
CWE-126 Nov 4, 2025
Buffer Over-read in Core Services
Information disclosure while registering commands from clients with diag through diagHal.
CVE-2025-27060
High · 8.8
CWE-822 Oct 9, 2025
Untrusted Pointer Dereference in TZ Firmware
Memory corruption while performing SCM call with malformed inputs.
CVE-2025-27059
High · 8.8
CWE-823 Oct 9, 2025
Use of Out-of-range Pointer Offset in TZ Firmware
Memory corruption while performing SCM call.
CVE-2025-27054
High · 7.8
CWE-787 Oct 9, 2025
Out-of-bounds Write in Display
Memory corruption while processing a malformed license file during reboot.
CVE-2025-27053
High · 7.8
CWE-131 Oct 9, 2025
Incorrect Calculation of Buffer Size in HLOS
Memory corruption during PlayReady APP usecase while processing TA commands.
CVE-2025-27040
Medium · 6.5
CWE-20 Oct 9, 2025
Improper Input Validation in TZ Firmware
Information disclosure may occur while processing the hypervisor log.
CVE-2023-33107
High · 7.8
KEV High · 55 Public exploit CWE-190 Dec 5, 2023
Qualcomm Multiple Chipsets Integer Overflow Vulnerability
Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.
CVE-2023-33063
High · 7.8
KEV High · 49 CWE-416 Dec 5, 2023
Qualcomm Multiple Chipsets Use-After-Free Vulnerability
Memory corruption in DSP Services during a remote call from HLOS to DSP.