Qualcomm Flight Rb5 5G Platform vulnerabilities, page 5
148 vulnerabilities
Known vulnerabilities in Qualcomm Flight Rb5 5G Platform, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
MediumCVE-2026-24077qualcomm, inc. · snapdragon +139 moreInteger Underflow (Wrap or Wraparound) in WLAN HostInformation Disclosure when processing wireless network channel switch information with improperly formatted length fields.EPSS0.17%HighCVE-2026-24085qualcomm, inc. · snapdragon +266 moreStack-based Buffer Overflow in DisplayMemory Corruption when processing display command line information due to improper initialization of a variable.EPSS0.10%HighCVE-2026-24091qualcomm, inc. · snapdragon +266 moreImproper Validation of Syntactic Correctness of Input in DisplayMemory corruption while processing fastboot commands with improperly formatted input.EPSS0.10%HighCVE-2026-24092qualcomm, inc. · snapdragon +215 moreImproper Validation of Syntactic Correctness of Input in DisplayMemory Corruption when processing fastboot commands to set display mode.EPSS0.10%HighCVE-2026-24090qualcomm, inc. · snapdragon +214 moreMissing Authentication for Critical Function in HLOSCryptographic issue while processing partition table entries allows unauthorized modification of boot flow.EPSS0.06%HighCVE-2026-24087qualcomm, inc. · snapdragon +212 moreImproper Validation of Syntactic Correctness of Input in KernelMemory corruption while processing fastboot OEM commands.EPSS0.10%HighCVE-2026-24089qualcomm, inc. · snapdragon +216 moreImproper Validation of Syntactic Correctness of Input in KernelMemory corruption while processing fastboot commands with invalid input.EPSS0.10%HighCVE-2023-21673qualcomm, inc. · snapdragon +161 moreImproper Access Control in KernelImproper Access to the VM resource manager can lead to Memory Corruption.EPSS0.10%HighCVE-2023-21657qualcomm, inc. · snapdragon +126 moreImproper Input Validation in AudioMemoru corruption in Audio when ADSP sends input during record use case.EPSS0.12%HighCVE-2023-21659qualcomm, inc. · snapdragon +270 moreBuffer Over-read in WLAN FirmwareTransient DOS in WLAN Firmware while processing frames with missing header fields.EPSS0.38%HighCVE-2023-21665qualcomm, inc. · snapdragon +220 moreIncorrect Type Conversion or Cast in GraphicsMemory corruption in Graphics while importing a file.EPSS0.18%HighCVE-2023-21670qualcomm, inc. · snapdragon +182 moreImproper Access control in GPU SubsystemMemory Corruption in GPU Subsystem due to arbitrary command execution from GPU in privileged mode.EPSS0.12%HighCVE-2023-21666qualcomm, inc. · snapdragon +165 moreImproper Release of Memory Before Removing Last Reference (`Memory Leak`) in GraphicsMemory Corruption in Graphics while accessing a buffer allocated through the graphics pool.EPSS0.18%HighCVE-2023-21669qualcomm, inc. · snapdragon +61 moreBuffer Over-read in WLAN HOSTInformation Disclosure in WLAN HOST while sending DPP action frame to peer with an invalid source address.EPSS0.35%CriticalCVE-2023-43534qualcomm, inc. · snapdragon +65 moreUse of Out-of-range Pointer Offset in WLAN HOSTMemory corruption while validating the TID to Link Mapping action request frame, when a station connects to an access point.EPSS0.29%HighCVE-2023-43511qualcomm, inc. · snapdragon +350 moreLoop with Unreachable Exit Condition (Infinite Loop) in WLAN FirmwareTransient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header.EPSS0.32%HighCVE-2023-43522qualcomm, inc. · snapdragon +280 moreNULL Pointer Dereference in WLAN FirmwareTransient DOS while key unwrapping process, when the given encrypted key is empty or NULL.EPSS0.32%HighCVE-2023-43514qualcomm, inc. · snapdragon +81 moreUse After Free in DSP ServicesMemory corruption while invoking IOCTLs calls from user space for internal mem MAP and internal mem UNMAP.EPSS0.11%CriticalCVE-2023-43520qualcomm, inc. · snapdragon +69 moreStack-based Buffer Overflow in WLAN HOSTMemory corruption when AP includes TID to link mapping IE in the beacons and STA is parsing the beacon TID to link mapping IE.EPSS0.26%HighCVE-2023-43513qualcomm, inc. · snapdragon +261 moreUse of Out-of-range Pointer Offset in PCIeMemory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element.EPSS0.11%