Qualcomm Qca6678Aq vulnerabilities, page 4

260 vulnerabilities

Known vulnerabilities in Qualcomm Qca6678Aq, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.1MediumCVE-2025-27064qualcomm, inc. · snapdragon +77 moreBuffer Over-read in Core ServicesInformation disclosure while registering commands from clients with diag through diagHal.EPSS0.08%7.8HighCVE-2025-27070qualcomm, inc. · snapdragon +174 moreOut-of-bounds Write in Windows ComputeMemory corruption while performing encryption and decryption commands.EPSS0.06%7.8HighCVE-2025-27061qualcomm, inc. · snapdragon +337 moreOut-of-bounds Write in VideoMemory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmware.EPSS0.10%5.5MediumCVE-2025-27041qualcomm, inc. · snapdragon +63 moreBuffer Over-read in VideoTransient DOS while processing video packets received from video firmware.EPSS0.08%7.8HighCVE-2025-27042qualcomm, inc. · snapdragon +337 moreIncorrect Calculation of Buffer Size in VideoMemory corruption while processing video packets received from video firmware.EPSS0.09%7.5HighCVE-2025-27073qualcomm, inc. · snapdragon +169 moreReachable Assertion in WLAN FirmwareTransient DOS while creating NDP instance.EPSS0.22%7.8HighCVE-2025-27054qualcomm, inc. · snapdragon +297 moreOut-of-bounds Write in DisplayMemory corruption while processing a malformed license file during reboot.EPSS0.09%7.5HighCVE-2025-27057qualcomm, inc. · snapdragon +210 moreBuffer Over-read in WLAN HostTransient DOS while handling beacon frames with invalid IE header length.EPSS0.25%7.5HighCVE-2025-27065qualcomm, inc. · snapdragon +149 moreBuffer Over-read in WLAN FirmwareTransient DOS while processing a frame with malformed shared-key descriptor.EPSS0.22%7.8HighCVE-2025-27062qualcomm, inc. · snapdragon +152 moreImproper Access Control in Automotive MultimediaMemory corruption while handling client exceptions, allowing unauthorized channel access.EPSS0.08%7.8HighCVE-2025-27052qualcomm, inc. · snapdragon +154 moreBuffer Copy Without Checking Size of Input in Core ServicesMemory corruption while processing data packets in diag received from Unix clients.EPSS0.10%7.8HighCVE-2025-27043qualcomm, inc. · snapdragon +203 moreBuffer Copy Without Checking Size of Input in VideoMemory corruption while processing manipulated payload in video firmware.EPSS0.10%7.8HighCVE-2025-27053qualcomm, inc. · snapdragon +317 moreIncorrect Calculation of Buffer Size in HLOSMemory corruption during PlayReady APP usecase while processing TA commands.EPSS0.09%7.5HighCVE-2025-27066qualcomm, inc. · snapdragon +370 moreReachable Assertion in WLAN FirmwareTransient DOS while processing an ANQP message.EPSS0.28%7.5HighCVE-2022-40512qualcomm, inc. · snapdragon +295 moreBuffer over-read in WLAN Firmware.Transient DOS in WLAN Firmware due to buffer over-read while processing probe response or beacon.EPSS0.42%9.8CriticalCVE-2022-40514qualcomm, inc. · snapdragon +228 moreBuffer copy without checking size of input in WLAN FirmwareMemory corruption due to buffer copy without checking the size of input in WLAN Firmware while processing CCKM IE in reassoc response frame.EPSS0.47%8.4HighCVE-2022-40532qualcomm, inc. · snapdragon +353 moreInteger overflow or wraparound in WLANMemory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target.EPSS0.12%8.4HighCVE-2022-40530qualcomm, inc. · snapdragon +189 moreInteger overflow to buffer overflow in WLANMemory corruption in WLAN due to integer overflow to buffer overflow in WLAN during initialization phase.EPSS0.13%8.4HighCVE-2022-40531qualcomm, inc. · snapdragon +284 moreIncorrect type conversion in WLANMemory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message.EPSS0.12%7.5HighCVE-2022-34145qualcomm, inc. · snapdragon +94 moreBuffer over-read in WLAN HostTransient DOS due to buffer over-read in WLAN Host while parsing frame information.EPSS0.42%