Qualcomm Immersive Home 214 Platform vulnerabilities, page 3
89 vulnerabilities
Known vulnerabilities in Qualcomm Immersive Home 214 Platform, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2026-21367qualcomm, inc. · snapdragon +149 moreBuffer Over-read in WLAN FirmwareTransient DOS when processing nonstandard FILS Discovery Frames with out-of-range action sizes during initial scans.EPSS0.20%HighCVE-2026-25275qualcomm, inc. · snapdragon +369 moreBuffer Over-read in WLAN FirmwareTransient DOS when processing authentication frames with invalid FILS information element header lengths.EPSS0.19%HighCVE-2026-25268qualcomm, inc. · snapdragon +128 moreStack-based Buffer Overflow in WLAN HostMemory Corruption when processing invalid HT40 channel layouts during dynamic channel switching operations.EPSS0.11%HighCVE-2026-24088qualcomm, inc. · snapdragon +243 moreMissing Authentication for Critical Function in BootCryptographic Issue while processing a specific partition which allows unauthorized write access to load a customized bootloader.EPSS0.07%HighCVE-2023-21658qualcomm, inc. · snapdragon +151 moreBuffer Over-Read in WLAN FirmwareTransient DOS in WLAN Firmware while processing the received beacon or probe response frame.EPSS0.38%HighCVE-2023-21628qualcomm, inc. · snapdragon +283 moreBuffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN HALMemory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command.EPSS0.12%HighCVE-2023-21661qualcomm, inc. · snapdragon +115 moreBuffer Over-read in WLAN FirmwareTransient DOS while parsing WLAN beacon or probe-response frame.EPSS0.38%HighCVE-2023-21660qualcomm, inc. · snapdragon +79 moreBuffer Over-read in WLAN FirmwareTransient DOS in WLAN Firmware while parsing FT Information Elements.EPSS0.38%HighCVE-2023-21659qualcomm, inc. · snapdragon +270 moreBuffer Over-read in WLAN FirmwareTransient DOS in WLAN Firmware while processing frames with missing header fields.EPSS0.38%HighCVE-2023-43511qualcomm, inc. · snapdragon +350 moreLoop with Unreachable Exit Condition (Infinite Loop) in WLAN FirmwareTransient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header.EPSS0.32%HighCVE-2023-43522qualcomm, inc. · snapdragon +280 moreNULL Pointer Dereference in WLAN FirmwareTransient DOS while key unwrapping process, when the given encrypted key is empty or NULL.EPSS0.32%HighCVE-2023-43523qualcomm, inc. · snapdragon +140 moreReachable Assertion in WLAN FirmwareTransient DOS while processing 11AZ RTT management action frame received through OTA.EPSS0.32%HighCVE-2023-43513qualcomm, inc. · snapdragon +261 moreUse of Out-of-range Pointer Offset in PCIeMemory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element.EPSS0.11%HighCVE-2023-43536qualcomm, inc. · snapdragon +303 moreBuffer Over-read in WLAN FirmwareTransient DOS while parse fils IE with length equal to 1.EPSS0.32%HighCVE-2023-24847qualcomm, inc. · snapdragon +255 moreNULL pointer Dereference in ModemTransient DOS in Modem while allocating DSM items.EPSS0.39%HighCVE-2023-28544qualcomm, inc. · snapdragon +205 moreBuffer Copy without Checking the Size of Input in WLAN FirmwareMemory corruption in WLAN while sending transmit command from HLOS to UTF handlers.EPSS0.12%HighCVE-2023-28539qualcomm, inc. · snapdragon +157 moreBuffer Copy Without Checking Size of Input in WLAN HostMemory corruption in WLAN Host when the firmware invokes multiple WMI Service Available command.EPSS0.12%MediumCVE-2023-28554qualcomm, inc. · snapdragon +146 moreBuffer Over-read in Qualcomm IPCInformation Disclosure in Qualcomm IPC while reading values from shared memory in VM.EPSS0.14%HighCVE-2023-28549qualcomm, inc. · snapdragon +220 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in WLAN HALMemory corruption in WLAN HAL while parsing Rx buffer in processing TLV payload.EPSS0.12%MediumCVE-2023-28553qualcomm, inc. · snapdragon +142 moreBuffer Over-read in WLAN HostInformation Disclosure in WLAN Host when processing WMI event command.EPSS0.14%