Qualcomm Qca6678Aq vulnerabilities, page 3
260 vulnerabilities
Known vulnerabilities in Qualcomm Qca6678Aq, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2025-47397qualcomm, inc. · snapdragon +144 moreImproper Release of Memory Before Removing Last Reference in GraphicsMemory Corruption when initiating GPU memory mapping using scatter-gather lists due to unchecked IOMMU mapping errors.EPSS0.11%HighCVE-2025-47366qualcomm, inc. · snapdragon +157 moreExposed Dangerous Method or Function in HLOSCryptographic issue when a Trusted Zone with outdated code is triggered by a HLOS providing incorrect input.EPSS0.10%MediumCVE-2025-47333qualcomm, inc. · snapdragon +237 moreUse After Free in HLOSMemory corruption while handling buffer mapping operations in the cryptographic driver.EPSS0.08%MediumCVE-2025-47402qualcomm, inc. · snapdragon +94 moreBuffer Over-read in WLAN FirmwareTransient DOS when processing a received frame with an excessively large authentication information element.EPSS0.16%MediumCVE-2025-47370qualcomm, inc. · snapdragon +135 moreReachable Assertion in BT ControllerTransient DOS when a remote device sends an invalid connection request during BT connectable LE scan.EPSS0.12%HighCVE-2025-47346qualcomm, inc. · snapdragon +113 moreOut-of-bounds Write in HLOSMemory corruption while processing a secure logging command in the trusted application.EPSS0.08%HighCVE-2025-47404qualcomm, inc. · snapdragon +183 moreBuffer Copy Without Checking Size of Input in Automotive AudioMemory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified.EPSS0.07%HighCVE-2025-47373qualcomm, inc. · snapdragon +184 moreOut-of-bounds Write in AutomotiveMemory Corruption when accessing buffers with invalid length during TA invocation.EPSS0.07%HighCVE-2025-47386qualcomm, inc. · snapdragon +165 moreUse After Free in Automotive AudioMemory Corruption while invoking IOCTL calls when concurrent access to shared buffer occurs.EPSS0.07%HighCVE-2025-47403qualcomm, inc. · snapdragon +254 moreBuffer Over-read in WLAN FirmwareTransient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming.EPSS0.22%MediumCVE-2025-47331qualcomm, inc. · snapdragon +297 moreBuffer Over-read in VideoInformation disclosure while processing a firmware event.EPSS0.08%MediumCVE-2025-47319qualcomm, inc. · snapdragon +118 moreExposure of Sensitive System Information to an Unauthorized Control Sphere in HLOSInformation disclosure while exposing internal TA-to-TA communication APIs to HLOSEPSS0.09%HighCVE-2025-47383qualcomm, inc. · snapdragon +200 moreMissing Cryptographic Step in Data ModemWeak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE.EPSS0.14%HighCVE-2025-47357qualcomm, inc. · snapdragon +24 moreMissing Authentication for Critical Function in SMSSInformation Disclosure when a user-level driver performs QFPROM read or write operations on Fuse regions.EPSS0.08%CriticalCVE-2025-47372qualcomm, inc. · snapdragon +23 moreBuffer Copy Without Checking Size of Input in BootMemory Corruption when a corrupted ELF image with an oversized file size is read into a buffer without authentication.EPSS0.11%MediumCVE-2025-47330qualcomm, inc. · snapdragon +221 moreBuffer Over-read in VideoTransient DOS while parsing video packets received from the video firmware.EPSS0.07%HighCVE-2025-47398qualcomm, inc. · snapdragon +150 moreUse After Free in GraphicsMemory Corruption while deallocating graphics processing unit memory buffers due to improper handling of memory pointers.EPSS0.11%MediumCVE-2025-47371qualcomm, inc. · snapdragon +122 moreReachable Assertion in ModemTransient DOS when an LTE RLC packet with invalid TB is received by UE.EPSS0.10%HighCVE-2025-47322qualcomm, inc. · snapdragon +110 moreUse After Free in Automotive Linux OSMemory corruption while handling IOCTL calls to set mode.EPSS0.10%HighCVE-2025-27032qualcomm, inc. · snapdragon +191 moreImproper Access Control Applied to Mirrored or Aliased Memory Regions in Hypervisormemory corruption while loading a PIL authenticated VM, when authenticated VM image is loaded without maintaining cache coherency.EPSS0.08%