Qrb5165n Firmware (Qualcomm) - vulnerabilities (CVEs)

330 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-08-04. Vendor: Qualcomm.

CVEs of Qrb5165n Firmware

• CVE-2026-25292 - CVSS 7.6 (high), 2026-08-04: Memory Corruption when processing untrusted user input in the fastboot command handler for audio framework configuration.
• CVE-2026-24077 - CVSS 6.5 (medium), 2026-08-04: Information Disclosure when processing wireless network channel switch information with improperly formatted length fields.
• CVE-2026-24092 - CVSS 7.2 (high), 2026-06-01: Memory Corruption when processing fastboot commands to set display mode.
• CVE-2026-24085 - CVSS 7.2 (high), 2026-06-01: Memory Corruption when processing display command line information due to improper initialization of a variable.
• CVE-2026-24090 - CVSS 7.1 (high), 2026-06-01: Cryptographic issue while processing partition table entries allows unauthorized modification of boot flow.
• CVE-2026-24089 - CVSS 7.2 (high), 2026-06-01: Memory corruption while processing fastboot commands with invalid input.
• CVE-2026-24087 - CVSS 7.2 (high), 2026-06-01: Memory corruption while processing fastboot OEM commands.
• CVE-2026-24091 - CVSS 7.2 (high), 2026-06-01: Memory corruption while processing fastboot commands with improperly formatted input.
• CVE-2025-59610 - CVSS 6.4 (medium), 2026-06-01: Memory Corruption when processing IOCTL requests with mismatched API versions due to concurrent modification of user-space buffer.
• CVE-2025-59609 - CVSS 5.5 (medium), 2026-06-01: Information Disclosure when processing advertisement frames with malformed MBSSID elements of insufficient length.
• CVE-2026-24082 - CVSS 7.8 (high), 2026-05-04: Memory Corruption when copying data from a freed source while executing performance counter deselect operation.
• CVE-2025-47404 - CVSS 7.8 (high), 2026-05-04: Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified.
• CVE-2025-47401 - CVSS 7.5 (high), 2026-05-04: Transient DOS when processing target power rate tables during channel configuration.
• CVE-2026-21385 - CVSS 7.8 (high), 2026-03-02: Memory corruption while using alignments for memory allocation.
• CVE-2025-47386 - CVSS 7.8 (high), 2026-03-02: Memory Corruption while invoking IOCTL calls when concurrent access to shared buffer occurs.
• CVE-2025-47379 - CVSS 7.8 (high), 2026-03-02: Memory Corruption when concurrent access to shared buffer occurs due to improper synchronization between assignment and deallocation of buffer resources.
• CVE-2025-47377 - CVSS 7.8 (high), 2026-03-02: Memory Corruption when accessing a buffer after it has been freed while processing IOCTL calls.
• CVE-2025-47376 - CVSS 7.8 (high), 2026-03-02: Memory Corruption when concurrent access to shared buffer occurs during IOCTL calls.
• CVE-2025-47375 - CVSS 7.8 (high), 2026-03-02: Memory corruption while handling different IOCTL calls from the user-space simultaneously.
• CVE-2025-47397 - CVSS 7.8 (high), 2026-02-02: Memory Corruption when initiating GPU memory mapping using scatter-gather lists due to unchecked IOMMU mapping errors.
• CVE-2025-47366 - CVSS 7.8 (high), 2026-02-02: Cryptographic issue when a Trusted Zone with outdated code is triggered by a HLOS providing incorrect input.
• CVE-2025-47398 - CVSS 7.8 (high), 2026-02-02: Memory Corruption while deallocating graphics processing unit memory buffers due to improper handling of memory pointers.
• CVE-2025-47369 - CVSS 5.5 (medium), 2026-01-07: Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID.
• CVE-2025-47334 - CVSS 6.7 (medium), 2026-01-07: Memory corruption while processing shared command buffer packet between camera userspace and kernel.
• CVE-2025-47330 - CVSS 5.5 (medium), 2026-01-07: Transient DOS while parsing video packets received from the video firmware.
• CVE-2025-47333 - CVSS 6.6 (medium), 2026-01-07: Memory corruption while handling buffer mapping operations in the cryptographic driver.
• CVE-2025-47331 - CVSS 6.1 (medium), 2026-01-07: Information disclosure while processing a firmware event.
• CVE-2025-47322 - CVSS 7.8 (high), 2025-12-18: Memory corruption while handling IOCTL calls to set mode.
• CVE-2025-47320 - CVSS 7.8 (high), 2025-12-18: Memory corruption while processing MFC channel configuration during music playback.
• CVE-2025-27063 - CVSS 7.8 (high), 2025-12-18: Memory corruption during video playback when video session open fails with time out error.
• CVE-2025-27054 - CVSS 7.8 (high), 2025-10-09: Memory corruption while processing a malformed license file during reboot.
• CVE-2025-27053 - CVSS 7.8 (high), 2025-10-09: Memory corruption during PlayReady APP usecase while processing TA commands.
• CVE-2025-47318 - CVSS 7.5 (high), 2025-09-24: Transient DOS while parsing the EPTM test control message to get the test pattern.
• CVE-2025-21481 - CVSS 7.8 (high), 2025-09-24: Memory corruption while performing private key encryption in trusted application.
• CVE-2025-27066 - CVSS 7.5 (high), 2025-08-06: Transient DOS while processing an ANQP message.
• CVE-2025-21464 - CVSS 6.5 (medium), 2025-08-06: Information disclosure while reading data from an image using specified offset and size parameters.
• CVE-2025-21465 - CVSS 6.5 (medium), 2025-08-06: Information disclosure while processing the hash segment in an MBN file.
• CVE-2025-27061 - CVSS 7.8 (high), 2025-07-08: Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmware.
• CVE-2025-27052 - CVSS 7.8 (high), 2025-07-08: Memory corruption while processing data packets in diag received from Unix clients.
• CVE-2025-27043 - CVSS 7.8 (high), 2025-07-08: Memory corruption while processing manipulated payload in video firmware.
• CVE-2025-27042 - CVSS 7.8 (high), 2025-07-08: Memory corruption while processing video packets received from video firmware.
• CVE-2025-21432 - CVSS 7.8 (high), 2025-07-08: Memory corruption while retrieving the CBOR data from TA.
• CVE-2025-21433 - CVSS 6.2 (medium), 2025-07-08: Transient DOS when importing a PKCS#8-encoded RSA private key with a zero-sized modulus.
• CVE-2025-21463 - CVSS 7.5 (high), 2025-06-03: Transient DOS while processing the EHT operation IE in the received beacon frame.
• CVE-2025-21468 - CVSS 7.8 (high), 2025-05-06: Memory corruption while reading response from FW, when buffer size is changed by FW while driver is using this size to write null character at the end of…
• CVE-2025-21459 - CVSS 7.5 (high), 2025-05-06: Transient DOS while parsing per STA profile in ML IE.
• CVE-2025-21467 - CVSS 7.8 (high), 2025-05-06: Memory corruption while reading the FW response from the shared queue.
• CVE-2024-49844 - CVSS 7.8 (high), 2025-05-06: Memory corruption while triggering commands in the PlayReady Trusted application.
• CVE-2025-21448 - CVSS 7.5 (high), 2025-04-07: Transient DOS may occur while parsing SSID in action frames.
• CVE-2025-21430 - CVSS 7.5 (high), 2025-04-07: Transient DOS while connecting STA to AP and initiating ADD TS request from AP to establish TSpec session.
• CVE-2024-45551 - CVSS 6.2 (medium), 2025-04-07: Cryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can be dropped on verification failure, potentially leading to…
• CVE-2025-21424 - CVSS 7.8 (high), 2025-03-03: Memory corruption while calling the NPU driver APIs concurrently.
• CVE-2024-53011 - CVSS 7.9 (high), 2025-03-03: Information disclosure may occur due to improper permission and access controls to Video Analytics engine.
• CVE-2024-53024 - CVSS 7.8 (high), 2025-03-03: Memory corruption in display driver while detaching a device.
• CVE-2024-53014 - CVSS 7.8 (high), 2025-03-03: Memory corruption may occur while validating ports and channels in Audio driver.
• CVE-2024-43051 - CVSS 5.5 (medium), 2025-03-03: Information disclosure while deriving keys for a session for any Widevine use case.
• CVE-2024-49834 - CVSS 7.8 (high), 2025-02-03: Memory corruption while power-up or power-down sequence of the camera sensor.
• CVE-2024-45553 - CVSS 7.8 (high), 2025-01-06: Memory corruption can occur when process-specific maps are added to the global list. If a map is removed from the global list while another thread is using it…
• CVE-2024-33056 - CVSS 8.4 (high), 2024-12-02: Memory corruption when allocating and accessing an entry in an SMEM partition continuously.
• CVE-2024-33044 - CVSS 8.4 (high), 2024-12-02: Memory corruption while Configuring the SMR/S2CR register in Bypass mode.
• CVE-2021-30299 - CVSS 6.7 (medium), 2024-11-22: Possible out of bound access in audio module due to lack of validation of user provided input.
• CVE-2024-38423 - CVSS 7.8 (high), 2024-11-04: Memory corruption while processing GPU page table switch.
• CVE-2024-38415 - CVSS 7.8 (high), 2024-11-04: Memory corruption while handling session errors from firmware.
• CVE-2024-38422 - CVSS 7.8 (high), 2024-11-04: Memory corruption while processing voice packet with arbitrary data received from ADSP.
• CVE-2024-38419 - CVSS 7.8 (high), 2024-11-04: Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node.
• CVE-2024-38408 - CVSS 9.1 (critical), 2024-11-04: Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.
• CVE-2024-38397 - CVSS 7.5 (high), 2024-10-07: Transient DOS while parsing probe response and assoc response frame.
• CVE-2024-33073 - CVSS 8.2 (high), 2024-10-07: Information disclosure while parsing the BSS parameter change count or MLD capabilities fields of the ML IE.
• CVE-2024-38402 - CVSS 7.8 (high), 2024-09-02: Memory corruption while processing IOCTL call for getting group info.
• CVE-2024-33057 - CVSS 7.5 (high), 2024-09-02: Transient DOS while parsing the multi-link element Control field when common information length check is missing before updating the location.
• CVE-2024-33060 - CVSS 8.4 (high), 2024-09-02: Memory corruption when two threads try to map and unmap a single node simultaneously.
• CVE-2024-33051 - CVSS 7.5 (high), 2024-09-02: Transient DOS while processing TIM IE from beacon frame as there is no check for IE length.
• CVE-2024-33050 - CVSS 7.5 (high), 2024-09-02: Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper.
• CVE-2024-33048 - CVSS 7.5 (high), 2024-09-02: Transient DOS while parsing the received TID-to-link mapping element of beacon/probe response frame.
• CVE-2024-33045 - CVSS 8.4 (high), 2024-09-02: Memory corruption when BTFM client sends new messages over Slimbus to ADSP.
• CVE-2024-33016 - CVSS 6.8 (medium), 2024-09-02: memory corruption when an invalid firehose patch command is invoked.
• CVE-2024-23362 - CVSS 7.1 (high), 2024-09-02: Cryptographic issue while parsing RSA keys in COBR format.
• CVE-2024-33034 - CVSS 8.4 (high), 2024-08-05: Memory corruption can occur if VBOs hold outdated or invalid GPU SMMU mappings, especially when the binding and reclaiming of memory buffers are performed at…
• CVE-2024-33028 - CVSS 8.4 (high), 2024-08-05: Memory corruption as fence object may still be accessed in timeline destruct after isync fence is released.
• CVE-2024-33025 - CVSS 7.5 (high), 2024-08-05: Transient DOS while parsing the BSS parameter change count or MLD capabilities fields of the ML IE.
• CVE-2024-33024 - CVSS 7.5 (high), 2024-08-05: Transient DOS while parsing the ML IE when a beacon with length field inside the common info of ML IE greater than the ML IE length.
• CVE-2024-33026 - CVSS 7.5 (high), 2024-08-05: Transient DOS while parsing probe response and assoc response frame when received frame length is less than max size of timestamp.
• CVE-2024-33022 - CVSS 8.4 (high), 2024-08-05: Memory corruption while allocating memory in HGSL driver.
• CVE-2024-33021 - CVSS 8.4 (high), 2024-08-05: Memory corruption while processing IOCTL call to set metainfo.
• CVE-2024-33020 - CVSS 7.5 (high), 2024-08-05: Transient DOS while processing TID-to-link mapping IE elements.
• CVE-2024-33023 - CVSS 8.4 (high), 2024-08-05: Memory corruption while creating a fence to wait on timeline events, and simultaneously signal timeline events.
• CVE-2024-33015 - CVSS 7.5 (high), 2024-08-05: Transient DOS while parsing SCAN RNR IE when bytes received from AP is such that the size of the last param of IE is less than neighbor report.
• CVE-2024-33014 - CVSS 7.5 (high), 2024-08-05: Transient DOS while parsing ESP IE from beacon/probe response frame.
• CVE-2024-33013 - CVSS 7.5 (high), 2024-08-05: Transient DOS when driver accesses the ML IE memory and offset value is incremented beyond ML IE length.
• CVE-2024-33012 - CVSS 7.5 (high), 2024-08-05: Transient DOS while parsing the multiple MBSSID IEs from the beacon, when the tag length is non-zero value but with end of beacon.
• CVE-2024-33011 - CVSS 7.5 (high), 2024-08-05: Transient DOS while parsing the MBSSID IE from the beacons, when the MBSSID IE length is zero.
• CVE-2024-33010 - CVSS 7.5 (high), 2024-08-05: Transient DOS while parsing fragments of MBSSID IE from beacon frame.
• CVE-2024-23384 - CVSS 8.4 (high), 2024-08-05: Memory corruption when the mapped pages in VBO are still mapped after reclaiming by shrinker.
• CVE-2024-23382 - CVSS 8.4 (high), 2024-08-05: Memory corruption while processing graphics kernel driver request to create DMA fence.
• CVE-2024-23357 - CVSS 6.2 (medium), 2024-08-05: Transient DOS while importing a PKCS#8-encoded RSA key with zero bytes modulus.
• CVE-2024-23355 - CVSS 7.8 (high), 2024-08-05: Memory corruption when keymaster operation imports a shared key.
• CVE-2024-23380 - CVSS 8.4 (high), 2024-07-01: Memory corruption while handling user packets during VBO bind operation.
• CVE-2024-23373 - CVSS 8.4 (high), 2024-07-01: Memory corruption when IOMMU unmap operation fails, the DMA and anon buffers are getting released.
• CVE-2024-23372 - CVSS 8.4 (high), 2024-07-01: Memory corruption while invoking IOCTL call for GPU memory allocation and size param is greater than expected size.
• CVE-2024-23368 - CVSS 7.8 (high), 2024-07-01: Memory corruption when allocating and accessing an entry in an SMEM partition.