Qualcomm Qcn6224 vulnerabilities, page 4
307 vulnerabilities
Known vulnerabilities in Qualcomm Qcn6224, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2025-27065qualcomm, inc. · snapdragon +149 moreBuffer Over-read in WLAN FirmwareTransient DOS while processing a frame with malformed shared-key descriptor.EPSS0.22%HighCVE-2025-27052qualcomm, inc. · snapdragon +154 moreBuffer Copy Without Checking Size of Input in Core ServicesMemory corruption while processing data packets in diag received from Unix clients.EPSS0.10%HighCVE-2025-27043qualcomm, inc. · snapdragon +203 moreBuffer Copy Without Checking Size of Input in VideoMemory corruption while processing manipulated payload in video firmware.EPSS0.10%HighCVE-2025-27053qualcomm, inc. · snapdragon +317 moreIncorrect Calculation of Buffer Size in HLOSMemory corruption during PlayReady APP usecase while processing TA commands.EPSS0.09%HighCVE-2025-27066qualcomm, inc. · snapdragon +370 moreReachable Assertion in WLAN FirmwareTransient DOS while processing an ANQP message.EPSS0.28%HighCVE-2024-21465qualcomm, inc. · snapdragon +257 moreBuffer Over-read in Trusted Execution EnvironmentMemory corruption while processing key blob passed by the user.EPSS0.10%CriticalCVE-2024-21480qualcomm, inc. · snapdragon +112 moreBuffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in AudioMemory corruption while playing audio file having large-sized input buffer.EPSS0.29%HighCVE-2024-21458qualcomm, inc. · snapdragon +111 moreBuffer Over-read in WLAN HOSTInformation disclosure while handling SA query action frame.EPSS0.21%HighCVE-2024-21461qualcomm, inc. · snapdragon +311 moreDouble Free in HLOSMemory corruption while performing finish HMAC operation when context is freed by keymaster.EPSS0.10%CriticalCVE-2024-21473qualcomm, inc. · snapdragon +127 moreImproper Input Validation in WIN SONMemory corruption while redirecting log file to any file location with any file name.EPSS0.66%HighCVE-2024-21479qualcomm, inc. · snapdragon +94 moreBuffer Over-read in AudioTransient DOS during music playback of ALAC content.EPSS0.32%HighCVE-2024-21477qualcomm, inc. · snapdragon +182 moreBuffer Over-read in WLAN FirmwareTransient DOS while parsing a protected 802.11az Fine Time Measurement (FTM) frame.EPSS0.32%CriticalCVE-2024-21463qualcomm, inc. · snapdragon +105 moreBuffer Copy Without Checking Size of Input in AudioMemory corruption while processing Codec2 during v13k decoder pitch synthesis.EPSS0.29%HighCVE-2024-21469qualcomm, inc. · snapdragon +222 morePermissions, Privileges, and Access Control issues in TZ Secure OSMemory corruption when an invoke call and a TEE call are bound for the same trusted application.EPSS0.10%HighCVE-2024-21457qualcomm, inc. · snapdragon +111 moreBuffer Over-read in WLAN Host CommunicationINformation disclosure while handling Multi-link IE in beacon frame.EPSS0.21%HighCVE-2024-21459qualcomm, inc. · snapdragon +175 moreBuffer Over-read in WLAN HOSTInformation disclosure while handling beacon or probe response frame in STA.EPSS0.26%HighCVE-2024-21475qualcomm, inc. · snapdragon +229 moreUse of Out-of-range Pointer Offset in VideoMemory corruption when the payload received from firmware is not as per the expected protocol size.EPSS0.11%CriticalCVE-2024-21456qualcomm, inc. · snapdragon +42 moreBuffer Over-read in WLAN HOSTInformation Disclosure while parsing beacon frame in STA.EPSS0.27%HighCVE-2024-21462qualcomm, inc. · snapdragon +309 moreBuffer Over-read in TZ Secure OSTransient DOS while loading the TA ELF file.EPSS0.09%HighCVE-2024-21481qualcomm, inc. · snapdragon +165 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in HypervisorMemory corruption when preparing a shared memory notification for a memparcel in Resource Manager.EPSS0.11%