Qca6564au Firmware (Qualcomm) - vulnerabilities (CVEs)

673 CVEs, 4 in the last 30 days, 1 known versions, newest CVE from 2026-10-06. Vendor: Qualcomm.

CVEs of Qca6564au Firmware

• CVE-2026-57554 - CVSS 7.8 (high), 2026-10-06: Memory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC invocations.
• CVE-2026-25302 - CVSS 7.1 (high), 2026-10-06: Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted…
• CVE-2026-25267 - CVSS 7.8 (high), 2026-10-06: Memory corruption when non-secure loader rewrites page tables before secure memory initialization.
• CVE-2026-25263 - CVSS 6.6 (medium), 2026-10-06: Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters.
• CVE-2026-25275 - CVSS 7.5 (high), 2026-09-17: Transient DOS when processing authentication frames with invalid FILS information element header lengths.
• CVE-2026-25292 - CVSS 7.6 (high), 2026-08-04: Memory Corruption when processing untrusted user input in the fastboot command handler for audio framework configuration.
• CVE-2026-25289 - CVSS 9.6 (critical), 2026-08-04: Memory Corruption when processing Device Capability Extended attributes in certain NAN Service Discovery Frames with invalid length values.
• CVE-2026-24092 - CVSS 7.2 (high), 2026-06-01: Memory Corruption when processing fastboot commands to set display mode.
• CVE-2026-24087 - CVSS 7.2 (high), 2026-06-01: Memory corruption while processing fastboot OEM commands.
• CVE-2026-24090 - CVSS 7.1 (high), 2026-06-01: Cryptographic issue while processing partition table entries allows unauthorized modification of boot flow.
• CVE-2026-24085 - CVSS 7.2 (high), 2026-06-01: Memory Corruption when processing display command line information due to improper initialization of a variable.
• CVE-2026-24089 - CVSS 7.2 (high), 2026-06-01: Memory corruption while processing fastboot commands with invalid input.
• CVE-2026-24088 - CVSS 8.2 (high), 2026-06-01: Cryptographic Issue while processing a specific partition which allows unauthorized write access to load a customized bootloader.
• CVE-2026-24091 - CVSS 7.2 (high), 2026-06-01: Memory corruption while processing fastboot commands with improperly formatted input.
• CVE-2025-59609 - CVSS 5.5 (medium), 2026-06-01: Information Disclosure when processing advertisement frames with malformed MBSSID elements of insufficient length.
• CVE-2025-59610 - CVSS 6.4 (medium), 2026-06-01: Memory Corruption when processing IOCTL requests with mismatched API versions due to concurrent modification of user-space buffer.
• CVE-2025-59604 - CVSS 7.8 (high), 2026-06-01: Memory Corruption when running a memory copy operation due to invalid writes caused by a null pointer.
• CVE-2026-24082 - CVSS 7.8 (high), 2026-05-04: Memory Corruption when copying data from a freed source while executing performance counter deselect operation.
• CVE-2025-47403 - CVSS 7.5 (high), 2026-05-04: Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming.
• CVE-2025-47401 - CVSS 7.5 (high), 2026-05-04: Transient DOS when processing target power rate tables during channel configuration.
• CVE-2025-47404 - CVSS 7.8 (high), 2026-05-04: Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified.
• CVE-2026-21385 - CVSS 7.8 (high), 2026-03-02: Memory corruption while using alignments for memory allocation.
• CVE-2025-59600 - CVSS 7.8 (high), 2026-03-02: Memory Corruption when adding user-supplied data without checking available buffer space.
• CVE-2025-47386 - CVSS 7.8 (high), 2026-03-02: Memory Corruption while invoking IOCTL calls when concurrent access to shared buffer occurs.
• CVE-2025-47383 - CVSS 7.2 (high), 2026-03-02: Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE.
• CVE-2025-47379 - CVSS 7.8 (high), 2026-03-02: Memory Corruption when concurrent access to shared buffer occurs due to improper synchronization between assignment and deallocation of buffer resources.
• CVE-2025-47376 - CVSS 7.8 (high), 2026-03-02: Memory Corruption when concurrent access to shared buffer occurs during IOCTL calls.
• CVE-2025-47375 - CVSS 7.8 (high), 2026-03-02: Memory corruption while handling different IOCTL calls from the user-space simultaneously.
• CVE-2025-47402 - CVSS 6.5 (medium), 2026-02-02: Transient DOS when processing a received frame with an excessively large authentication information element.
• CVE-2025-47369 - CVSS 5.5 (medium), 2026-01-07: Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID.
• CVE-2025-47331 - CVSS 6.1 (medium), 2026-01-07: Information disclosure while processing a firmware event.
• CVE-2025-47330 - CVSS 5.5 (medium), 2026-01-07: Transient DOS while parsing video packets received from the video firmware.
• CVE-2025-47333 - CVSS 6.6 (medium), 2026-01-07: Memory corruption while handling buffer mapping operations in the cryptographic driver.
• CVE-2025-47323 - CVSS 7.8 (high), 2025-12-18: Memory corruption while routing GPR packets between user and root when handling large data packet.
• CVE-2025-47320 - CVSS 7.8 (high), 2025-12-18: Memory corruption while processing MFC channel configuration during music playback.
• CVE-2025-47370 - CVSS 6.5 (medium), 2025-11-04: Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan.
• CVE-2025-27074 - CVSS 8.8 (high), 2025-11-04: Memory corruption while processing a GP command response.
• CVE-2025-27064 - CVSS 6.1 (medium), 2025-11-04: Information disclosure while registering commands from clients with diag through diagHal.
• CVE-2025-27053 - CVSS 7.8 (high), 2025-10-09: Memory corruption during PlayReady APP usecase while processing TA commands.
• CVE-2025-47318 - CVSS 7.5 (high), 2025-09-24: Transient DOS while parsing the EPTM test control message to get the test pattern.
• CVE-2025-27032 - CVSS 7.8 (high), 2025-09-24: memory corruption while loading a PIL authenticated VM, when authenticated VM image is loaded without maintaining cache coherency.
• CVE-2025-21488 - CVSS 8.2 (high), 2025-09-24: Information disclosure while decoding this RTP packet headers received by UE from the network when the padding bit is set.
• CVE-2025-21487 - CVSS 8.2 (high), 2025-09-24: Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.
• CVE-2025-21484 - CVSS 8.2 (high), 2025-09-24: Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet.
• CVE-2025-21483 - CVSS 9.8 (critical), 2025-09-24: Memory corruption when the UE receives an RTP packet from the network, during the reassembly of NALUs.
• CVE-2025-27073 - CVSS 7.5 (high), 2025-08-06: Transient DOS while creating NDP instance.
• CVE-2025-27066 - CVSS 7.5 (high), 2025-08-06: Transient DOS while processing an ANQP message.
• CVE-2025-27065 - CVSS 7.5 (high), 2025-08-06: Transient DOS while processing a frame with malformed shared-key descriptor.
• CVE-2025-27062 - CVSS 7.8 (high), 2025-08-06: Memory corruption while handling client exceptions, allowing unauthorized channel access.
• CVE-2025-21465 - CVSS 6.5 (medium), 2025-08-06: Information disclosure while processing the hash segment in an MBN file.
• CVE-2025-21464 - CVSS 6.5 (medium), 2025-08-06: Information disclosure while reading data from an image using specified offset and size parameters.
• CVE-2025-27061 - CVSS 7.8 (high), 2025-07-08: Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmware.
• CVE-2025-27057 - CVSS 7.5 (high), 2025-07-08: Transient DOS while handling beacon frames with invalid IE header length.
• CVE-2025-27052 - CVSS 7.8 (high), 2025-07-08: Memory corruption while processing data packets in diag received from Unix clients.
• CVE-2025-27042 - CVSS 7.8 (high), 2025-07-08: Memory corruption while processing video packets received from video firmware.
• CVE-2025-21446 - CVSS 7.5 (high), 2025-07-08: Transient DOS may occur when processing vendor-specific information elements while parsing a WLAN frame for BTM requests.
• CVE-2025-21422 - CVSS 7.8 (high), 2025-07-08: Cryptographic issue while processing crypto API calls, missing checks may lead to corrupted key usage or IV reuses.
• CVE-2025-21427 - CVSS 8.2 (high), 2025-07-08: Information disclosure while decoding this RTP packet Payload when UE receives the RTP packet from the network.
• CVE-2024-53009 - CVSS 7.8 (high), 2025-07-08: Memory corruption while operating the mailbox in Automotive.
• CVE-2024-53026 - CVSS 8.2 (high), 2025-06-03: Information disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call.
• CVE-2024-53020 - CVSS 8.2 (high), 2025-06-03: Information disclosure may occur while decoding the RTP packet with invalid header extension from network.
• CVE-2025-21463 - CVSS 7.5 (high), 2025-06-03: Transient DOS while processing the EHT operation IE in the received beacon frame.
• CVE-2024-53013 - CVSS 6.6 (medium), 2025-06-03: Memory corruption may occur while processing voice call registration with user.
• CVE-2024-53010 - CVSS 7.8 (high), 2025-06-03: Memory corruption may occur while attaching VM when the HLOS retains access to VM.
• CVE-2025-21468 - CVSS 7.8 (high), 2025-05-06: Memory corruption while reading response from FW, when buffer size is changed by FW while driver is using this size to write null character at the end of…
• CVE-2025-21467 - CVSS 7.8 (high), 2025-05-06: Memory corruption while reading the FW response from the shared queue.
• CVE-2025-21459 - CVSS 7.5 (high), 2025-05-06: Transient DOS while parsing per STA profile in ML IE.
• CVE-2025-21453 - CVSS 7.8 (high), 2025-05-06: Memory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential failures occur.
• CVE-2024-49844 - CVSS 7.8 (high), 2025-05-06: Memory corruption while triggering commands in the PlayReady Trusted application.
• CVE-2024-49841 - CVSS 7.8 (high), 2025-05-06: Memory corruption during memory assignment to headless peripheral VM due to incorrect error code handling.
• CVE-2024-49842 - CVSS 7.8 (high), 2025-05-06: Memory corruption during memory mapping into protected VM address space due to incorrect API restrictions.
• CVE-2024-45581 - CVSS 7.8 (high), 2025-05-06: Memory corruption while sound model registration for voice activation with audio kernel driver.
• CVE-2024-45562 - CVSS 7.8 (high), 2025-05-06: Memory corruption during concurrent access to server info object due to unprotected critical field.
• CVE-2025-21448 - CVSS 7.5 (high), 2025-04-07: Transient DOS may occur while parsing SSID in action frames.
• CVE-2025-21430 - CVSS 7.5 (high), 2025-04-07: Transient DOS while connecting STA to AP and initiating ADD TS request from AP to establish TSpec session.
• CVE-2025-21429 - CVSS 7.5 (high), 2025-04-07: Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request.
• CVE-2025-21435 - CVSS 7.5 (high), 2025-04-07: Transient DOS may occur while parsing extended IE in beacon.
• CVE-2025-21434 - CVSS 7.5 (high), 2025-04-07: Transient DOS may occur while parsing EHT operation IE or EHT capability IE.
• CVE-2025-21428 - CVSS 7.5 (high), 2025-04-07: Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request from the AP to establish a TSpec session.
• CVE-2024-45552 - CVSS 8.2 (high), 2025-04-07: Information disclosure may occur during a video call if a device resets due to a non-conforming RTCP packet that doesn`t adhere to RFC standards.
• CVE-2024-45543 - CVSS 6.6 (medium), 2025-04-07: Memory corruption while accessing MSM channel map and mixer functions.
• CVE-2024-43066 - CVSS 7.8 (high), 2025-04-07: Memory corruption while handling file descriptor during listener registration/de-registration.
• CVE-2024-33058 - CVSS 7.5 (high), 2025-04-07: Memory corruption while assigning memory from the source DDR memory(HLOS) to ADSP.
• CVE-2024-43046 - CVSS 5.5 (medium), 2025-04-07: There may be information disclosure during memory re-allocation in TZ Secure OS.
• CVE-2025-21424 - CVSS 7.8 (high), 2025-03-03: Memory corruption while calling the NPU driver APIs concurrently.
• CVE-2024-53027 - CVSS 7.5 (high), 2025-03-03: Transient DOS may occur while processing the country IE.
• CVE-2024-53030 - CVSS 7.8 (high), 2025-03-03: Memory corruption while processing input message passed from FE driver.
• CVE-2024-53014 - CVSS 7.8 (high), 2025-03-03: Memory corruption may occur while validating ports and channels in Audio driver.
• CVE-2024-53011 - CVSS 7.9 (high), 2025-03-03: Information disclosure may occur due to improper permission and access controls to Video Analytics engine.
• CVE-2024-43056 - CVSS 6.5 (medium), 2025-03-03: Transient DOS during hypervisor virtual I/O operation in a virtual machine.
• CVE-2024-38426 - CVSS 5.4 (medium), 2025-03-03: While processing the authentication message in UE, improper authentication may lead to information disclosure.
• CVE-2024-49838 - CVSS 8.2 (high), 2025-02-03: Information disclosure while parsing the OCI IE with invalid length.
• CVE-2024-49839 - CVSS 9.8 (critical), 2025-02-03: Memory corruption during management frame processing due to mismatch in T2LM info element.
• CVE-2024-45571 - CVSS 7.8 (high), 2025-02-03: Memory corruption may occour occur when stopping the WLAN interface after processing a WMI command from the interface.
• CVE-2024-45569 - CVSS 9.8 (critical), 2025-02-03: Memory corruption while parsing the ML IE due to invalid frame content.
• CVE-2024-38420 - CVSS 8.8 (high), 2025-02-03: Memory corruption while configuring a Hypervisor based input virtual device.
• CVE-2024-38418 - CVSS 7.8 (high), 2025-02-03: Memory corruption while parsing the memory map info in IOCTL calls.
• CVE-2024-38416 - CVSS 6.1 (medium), 2025-02-03: Information disclosure during audio playback.
• CVE-2024-45555 - CVSS 8.4 (high), 2025-01-06: Memory corruption can occur if an already verified IFS2 image is overwritten, bypassing boot verification. This allows unauthorized programs to be injected…
• CVE-2024-45558 - CVSS 7.5 (high), 2025-01-06: Transient DOS can occur when the driver parses the per STA profile IE and tries to access the EXTN element ID without checking the IE length.