Qualcomm Qca6554A vulnerabilities, page 2
168 vulnerabilities
Known vulnerabilities in Qualcomm Qca6554A, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2025-47403qualcomm, inc. · snapdragon +254 moreBuffer Over-read in WLAN FirmwareTransient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming.EPSS0.22%HighCVE-2025-27073qualcomm, inc. · snapdragon +169 moreReachable Assertion in WLAN FirmwareTransient DOS while creating NDP instance.EPSS0.22%HighCVE-2025-27057qualcomm, inc. · snapdragon +210 moreBuffer Over-read in WLAN HostTransient DOS while handling beacon frames with invalid IE header length.EPSS0.25%HighCVE-2025-27065qualcomm, inc. · snapdragon +149 moreBuffer Over-read in WLAN FirmwareTransient DOS while processing a frame with malformed shared-key descriptor.EPSS0.22%HighCVE-2025-27066qualcomm, inc. · snapdragon +370 moreReachable Assertion in WLAN FirmwareTransient DOS while processing an ANQP message.EPSS0.28%HighCVE-2022-40512qualcomm, inc. · snapdragon +295 moreBuffer over-read in WLAN Firmware.Transient DOS in WLAN Firmware due to buffer over-read while processing probe response or beacon.EPSS0.42%CriticalCVE-2022-40514qualcomm, inc. · snapdragon +228 moreBuffer copy without checking size of input in WLAN FirmwareMemory corruption due to buffer copy without checking the size of input in WLAN Firmware while processing CCKM IE in reassoc response frame.EPSS0.47%HighCVE-2022-40532qualcomm, inc. · snapdragon +353 moreInteger overflow or wraparound in WLANMemory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target.EPSS0.12%HighCVE-2022-40503qualcomm, inc. · snapdragon +185 moreBuffer over-read in Bluetooth Host.Information disclosure due to buffer over-read in Bluetooth Host while A2DP streaming.EPSS0.41%HighCVE-2022-40530qualcomm, inc. · snapdragon +189 moreInteger overflow to buffer overflow in WLANMemory corruption in WLAN due to integer overflow to buffer overflow in WLAN during initialization phase.EPSS0.13%HighCVE-2022-40531qualcomm, inc. · snapdragon +284 moreIncorrect type conversion in WLANMemory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message.EPSS0.12%HighCVE-2022-40502qualcomm, inc. · snapdragon +96 moreImproper input validation in WLAN HostTransient DOS due to improper input validation in WLAN Host.EPSS0.42%CriticalCVE-2022-25748qualcomm · apq8009_firmware +272 morequalcomm apq8009_firmwareMemory corruption in WLAN due to integer overflow to buffer overflow while parsing GTK frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingEPSS0.52%HighCVE-2022-25655qualcomm, inc. · snapdragon +238 moreBuffer copy without checking the size of input in WLAN HAL.Memory corruption in WLAN HAL while arbitrary value is passed in WMI UTF command payload.EPSS0.12%HighCVE-2022-25749qualcomm · apq8009_firmware +275 morequalcomm apq8009_firmwareTransient Denial-of-Service in WLAN due to buffer over-read while parsing MDNS frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingEPSS0.46%CriticalCVE-2022-25720qualcomm · apq8009_firmware +184 morequalcomm apq8009_firmwareMemory corruption in WLAN due to out of bound array access during connect/roaming in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesEPSS0.50%HighCVE-2022-25736qualcomm · aqt1000_firmware +242 morequalcomm aqt1000_firmwareDenial of service in WLAN due to out-of-bound read happens while processing VHT action frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingEPSS0.81%HighCVE-2022-25741qualcomm, inc. · snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables +125 morequalcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearablesDenial of service in WLAN due to potential null pointer dereference while accessing the memory location in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon WearablesEPSS0.42%CriticalCVE-2022-25718qualcomm · apq8009_firmware +141 morequalcomm apq8009_firmwareCryptographic issue in WLAN due to improper check on return value while authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingEPSS0.49%HighCVE-2022-34146qualcomm, inc. · snapdragon +97 moreImproper input validation in WLAN HostTransient DOS due to improper input validation in WLAN Host while parsing frame during defragmentation.EPSS0.42%