Qualcomm Qca6335 vulnerabilities, page 4
350 vulnerabilities
Known vulnerabilities in Qualcomm Qca6335, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-35097qualcomm, inc.snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables+129
EPSS score0.18%
Possible authentication bypass due to improper order of signature verification and hashing in the signature verification call in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesCVE-2021-35113qualcomm, inc.snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables+48EPSS score0.15%
Possible authentication bypass due to improper order of signature verification and hashing in the signature verification call in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon WearablesCVE-2025-21487qualcomm, inc.snapdragon+225EPSS score0.26%
Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.CVE-2025-21484qualcomm, inc.snapdragon+173EPSS score0.26%
Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet.CVE-2025-21427qualcomm, inc.snapdragon+172EPSS score0.24%
Information disclosure while decoding this RTP packet Payload when UE receives the RTP packet from the network.CVE-2025-21464qualcomm, inc.snapdragon+340EPSS score0.09%
Information disclosure while reading data from an image using specified offset and size parameters.CVE-2025-21430qualcomm, inc.snapdragon+223EPSS score0.26%
Transient DOS while connecting STA to AP and initiating ADD TS request from AP to establish TSpec session.CVE-2025-21483qualcomm, inc.snapdragon+225EPSS score0.42%
Memory corruption when the UE receives an RTP packet from the network, during the reassembly of NALUs.CVE-2025-21465qualcomm, inc.snapdragon+347EPSS score0.09%
Information disclosure while processing the hash segment in an MBN file.CVE-2025-21422qualcomm, inc.snapdragon+215EPSS score0.10%
Cryptographic issue while processing crypto API calls, missing checks may lead to corrupted key usage or IV reuses.CVE-2025-21453qualcomm, inc.snapdragon+259EPSS score0.11%
Memory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential failures occur.CVE-2025-27032qualcomm, inc.snapdragon+191EPSS score0.08%
memory corruption while loading a PIL authenticated VM, when authenticated VM image is loaded without maintaining cache coherency.CVE-2025-27053qualcomm, inc.snapdragon+317EPSS score0.09%
Memory corruption during PlayReady APP usecase while processing TA commands.CVE-2025-27066qualcomm, inc.snapdragon+370EPSS score0.28%
Transient DOS while processing an ANQP message.CVE-2020-11200qualcomm, inc.snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile+330EPSS score0.79%
Buffer over-read while parsing RPS due to lack of check of input validation on values received from user side. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon MobileCVE-2020-11278qualcommaqt1000_firmware+376EPSS score0.63%
Possible denial of service while handling host WMI command due to improper validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and NetworkingCVE-2020-11304qualcommapq8009_firmware+158EPSS score0.18%
Possible out of bound read in DRM due to improper buffer length check. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and NetworkingCVE-2020-11239qualcomm, inc.snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables+406EPSS score0.22%
Use after free issue when importing a DMA buffer by using the CPU address of the buffer due to attachment is not cleaned up properly in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesCVE-2020-11293qualcommapq8017_firmware+338EPSS score0.15%
Out of bound read can happen in Widevine TA while copying data to buffer from user data due to lack of check of buffer length received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingCVE-2020-11235qualcommapq8009_firmware+537EPSS score0.17%
Buffer overflow might occur while parsing unified command due to lack of check of input data received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking