Qualcomm Qfw7114 vulnerabilities
308 vulnerabilities
Known vulnerabilities in Qualcomm Qfw7114, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
MediumCVE-2025-21433qualcomm, inc. · snapdragon +268 moreNULL Pointer Dereference in SPS-HLOSTransient DOS when importing a PKCS#8-encoded RSA private key with a zero-sized modulus.EPSS0.09%HighCVE-2025-21424qualcomm, inc. · snapdragon +233 moreUse After Free in NPUMemory corruption while calling the NPU driver APIs concurrently.EPSS0.12%MediumCVE-2025-21464qualcomm, inc. · snapdragon +340 moreOut-of-bounds Read in CoreInformation disclosure while reading data from an image using specified offset and size parameters.EPSS0.09%CriticalCVE-2025-21450qualcomm, inc. · snapdragon +104 moreImproper Authentication in GPS_GNSSCryptographic issue occurs due to use of insecure connection method while downloading.EPSS0.32%MediumCVE-2025-21457qualcomm, inc. · snapdragon +15 moreBuffer Over-read in Automotive OS Platform AndroidInformation disclosure while opening a fastrpc session when domain is not sanitized.EPSS0.09%HighCVE-2025-21430qualcomm, inc. · snapdragon +223 moreBuffer Over-read in WLAN HostTransient DOS while connecting STA to AP and initiating ADD TS request from AP to establish TSpec session.EPSS0.26%HighCVE-2025-21448qualcomm, inc. · snapdragon +267 moreBuffer Over-read in WLAN FirmwareTransient DOS may occur while parsing SSID in action frames.EPSS0.26%HighCVE-2025-21477qualcomm, inc. · snapdragon +87 moreImproper Input Validation in ModemTransient DOS while processing CCCH data when NW sends data with invalid length.EPSS0.22%HighCVE-2025-21446qualcomm, inc. · snapdragon +235 moreBuffer Over-read in WLAN FirmwareTransient DOS may occur when processing vendor-specific information elements while parsing a WLAN frame for BTM requests.EPSS0.24%HighCVE-2025-21432qualcomm, inc. · snapdragon +239 moreDouble Free in SPS-HLOSMemory corruption while retrieving the CBOR data from TA.EPSS0.09%HighCVE-2025-21481qualcomm, inc. · snapdragon +249 moreBuffer Copy Without Checking Size of Input in HLOSMemory corruption while performing private key encryption in trusted application.EPSS0.07%HighCVE-2025-21435qualcomm, inc. · snapdragon +149 moreBuffer Over-read in WLAN Host CommunicationTransient DOS may occur while parsing extended IE in beacon.EPSS0.26%HighCVE-2025-21459qualcomm, inc. · snapdragon +123 moreBuffer Over-read in WLAN Host CommunicationTransient DOS while parsing per STA profile in ML IE.EPSS0.34%HighCVE-2025-21456qualcomm, inc. · snapdragon +64 moreUse After Free in NPUMemory corruption while processing IOCTL command when multiple threads are called to map/unmap buffer concurrently.EPSS0.09%HighCVE-2025-21434qualcomm, inc. · snapdragon +121 moreBuffer Over-read in WLAN HostTransient DOS may occur while parsing EHT operation IE or EHT capability IE.EPSS0.26%MediumCVE-2025-21465qualcomm, inc. · snapdragon +347 moreOut-of-bounds Read in CoreInformation disclosure while processing the hash segment in an MBN file.EPSS0.09%HighCVE-2025-21422qualcomm, inc. · snapdragon +215 moreCryptographic Issues in AutomotiveCryptographic issue while processing crypto API calls, missing checks may lead to corrupted key usage or IV reuses.EPSS0.10%HighCVE-2025-21453qualcomm, inc. · snapdragon +259 moreUse After Free in GPS HLOS DriverMemory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential failures occur.EPSS0.11%HighCVE-2025-21463qualcomm, inc. · snapdragon +210 moreBuffer Over-read in WLAN Host CommunicationTransient DOS while processing the EHT operation IE in the received beacon frame.EPSS0.23%MediumCVE-2025-59609qualcomm, inc. · snapdragon +186 moreBuffer Over-read in WLAN Host CommunicationInformation Disclosure when processing advertisement frames with malformed MBSSID elements of insufficient length.EPSS0.09%