QF
Product
Qca6391 Firmware
On CISA KEVExploited in the wild
795
CVEs
8
On KEV
9.8
Max CVSS
4
New 30D
Severity mix
Critical 65High 435Medium 0Low 0
Watch
Add Qca6391 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-33268 | 8.1 | Dec 13 | Information disclosure due to buffer over-read in Bluetooth HOST while pairing and connecting A2DP Affected: All versions, or not specified |
| CVE-2021-30347 | 8.1 | Jun 14 | Improper integrity check can lead to race condition between tasks PDCP and RRC? right after a valid RRC Command packet has been received in Snapdragon Auto, Snapdragon Compute,… Affected: All versions, or not specified |
| CVE-2024-53011 | 7.9 | Mar 3 | Permissions, Privileges, and Access Controls in Video Analytics and Processing Affected: All versions, or not specified |
| CVE-2026-57545 | 7.8 | Oct 6 | Untrusted Pointer Dereference in Graphics Affected: All versions, or not specified |
| CVE-2026-25291 | 7.8 | Oct 6 | Use After Free in Graphics Affected: All versions, or not specified |
| CVE-2026-21379 | 7.8 | Jul 6 | Buffer Over-read in Windows Compute Affected: All versions, or not specified |
| CVE-2025-59605 | 7.8 | Jun 1 | Out-of-bounds Write in HLOS Affected: All versions, or not specified |
| CVE-2026-21378 | 7.8 | Apr 6 | Buffer Over-read in Camera Affected: All versions, or not specified |
| CVE-2026-21376 | 7.8 | Apr 6 | Buffer Over-read in Camera Affected: All versions, or not specified |
| CVE-2026-21374 | 7.8 | Apr 6 | Buffer Over-read in Camera Affected: All versions, or not specified |
| CVE-2026-21373 | 7.8 | Apr 6 | Buffer Over-read in Camera Affected: All versions, or not specified |
| CVE-2026-21371 | 7.8 | Apr 6 | Buffer Over-read in WinBlast Driver Affected: All versions, or not specified |
| CVE-2025-47391 | 7.8 | Apr 6 | Stack-based Buffer Overflow in Camera Driver Affected: All versions, or not specified |
| CVE-2025-59600 | 7.8 | Mar 2 | Buffer Over-read in Graphics Affected: All versions, or not specified |
| CVE-2025-47386 | 7.8 | Mar 2 | Use After Free in Automotive Audio Affected: All versions, or not specified |
| CVE-2025-47377 | 7.8 | Mar 2 | Use After Free in Automotive Audio Affected: All versions, or not specified |
| CVE-2025-47376 | 7.8 | Mar 2 | Use After Free in Automotive Audio Affected: All versions, or not specified |
| CVE-2025-47373 | 7.8 | Mar 2 | Out-of-bounds Write in Automotive Affected: All versions, or not specified |
| CVE-2025-47397 | 7.8 | Feb 2 | Improper Release of Memory Before Removing Last Reference in Graphics Affected: All versions, or not specified |
| CVE-2025-47366 | 7.8 | Feb 2 | Exposed Dangerous Method or Function in HLOS Affected: All versions, or not specified |
| CVE-2025-47359 | 7.8 | Feb 2 | Use After Free in Secure Processor Affected: All versions, or not specified |
| CVE-2025-47387 | 7.8 | Dec 18 | Untrusted Pointer Dereference in Camera Affected: All versions, or not specified |
| CVE-2025-47323 | 7.8 | Dec 18 | Integer Overflow or Wraparound in Audio Affected: All versions, or not specified |
| CVE-2025-47322 | 7.8 | Dec 18 | Use After Free in Automotive Linux OS Affected: All versions, or not specified |
| CVE-2025-47321 | 7.8 | Dec 18 | Buffer Copy Without Checking Size of Input in Core Services Affected: All versions, or not specified |
| CVE-2025-27063 | 7.8 | Dec 18 | Use After Free in Video Affected: All versions, or not specified |
| CVE-2025-27070 | 7.8 | Nov 4 | Out-of-bounds Write in Windows Compute Affected: All versions, or not specified |
| CVE-2025-27053 | 7.8 | Oct 9 | Incorrect Calculation of Buffer Size in HLOS Affected: All versions, or not specified |
| CVE-2025-47327 | 7.8 | Sep 24 | Use After Free in Camera Affected: All versions, or not specified |
| CVE-2025-47316 | 7.8 | Sep 24 | Double Free in Video Affected: All versions, or not specified |
| CVE-2025-27037 | 7.8 | Sep 24 | Use After Free in Camera Driver Affected: All versions, or not specified |
| CVE-2025-21476 | 7.8 | Sep 24 | Buffer Copy Without Checking Size of Input in Computer Vision Affected: All versions, or not specified |
| CVE-2025-27075 | 7.8 | Aug 6 | Improper Validation of Array Index in Bluetooth HOST Affected: All versions, or not specified |
| CVE-2025-21474 | 7.8 | Aug 6 | Use After Free in BTHOST Affected: All versions, or not specified |
| CVE-2025-21455 | 7.8 | Aug 6 | Time-of-check Time-of-use (TOCTOU) Race Condition in Camera_Linux Affected: All versions, or not specified |
| CVE-2025-27061 | 7.8 | Jul 8 | Out-of-bounds Write in Video Affected: All versions, or not specified |
| CVE-2025-27055 | 7.8 | Jul 8 | Buffer Over-read in Camera Affected: All versions, or not specified |
| CVE-2025-27052 | 7.8 | Jul 8 | Buffer Copy Without Checking Size of Input in Core Services Affected: All versions, or not specified |
| CVE-2025-27050 | 7.8 | Jul 8 | Use After Free in Camera Affected: All versions, or not specified |
| CVE-2025-27046 | 7.8 | Jul 8 | Double Free in Display Affected: All versions, or not specified |
| CVE-2025-21466 | 7.8 | Jul 8 | Use After Free in Display Affected: All versions, or not specified |
| CVE-2025-21432 | 7.8 | Jul 8 | Double Free in SPS-HLOS Affected: All versions, or not specified |
| CVE-2025-21422 | 7.8 | Jul 8 | Cryptographic Issues in Automotive Affected: All versions, or not specified |
| CVE-2024-53009 | 7.8 | Jul 8 | Improper Validation of Array Index in Automotive Autonomy Affected: All versions, or not specified |
| CVE-2024-53010 | 7.8 | Jun 3 | Improper Access Control in Core Affected: All versions, or not specified |
| CVE-2025-21475 | 7.8 | May 6 | Buffer Over-read in Display Affected: All versions, or not specified |
| CVE-2025-21470 | 7.8 | May 6 | Improper Access Control in Camera Driver Affected: All versions, or not specified |
| CVE-2025-21468 | 7.8 | May 6 | Out-of-bounds Write in Computer Vision Affected: All versions, or not specified |
| CVE-2025-21467 | 7.8 | May 6 | Out-of-bounds Write in Computer Vision Affected: All versions, or not specified |
| CVE-2024-49845 | 7.8 | May 6 | Improper Input Validation in HLOS Affected: All versions, or not specified |
The 500 most important CVEs for this product (exploited first, then by severity)