Qualcomm 5G Fixed Wireless Access Platform Firmware vulnerabilities

16 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 16 published in the last 12 months.

Exploited Qualcomm 5G Fixed Wireless Access Platform Firmware vulnerabilities

CVE-2026-25267 — Missing Authorization in Core (CVSS 7.8)
CVE-2026-25263 — Out of Bounds write in Linux Camera (CVSS 6.6)
CVE-2026-25275 — Buffer Over-read in WLAN Firmware (CVSS 7.5)
CVE-2026-24084 — Insecure Security Identifier Mechanism in Multi-Mode Call Processor (CVSS 7.5)
CVE-2026-24078 — Exposure of Private Personal Information to an Unauthorized Actor in Data Modem (CVSS 6.5)
CVE-2026-25268 — Stack-based Buffer Overflow in WLAN Host (CVSS 8.8)
CVE-2026-24091 — Improper Validation of Syntactic Correctness of Input in Display (CVSS 7.2)
CVE-2026-24085 — Stack-based Buffer Overflow in Display (CVSS 7.2)
CVE-2025-59610 — Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver (CVSS 6.4)
CVE-2025-59609 — Buffer Over-read in WLAN Host Communication (CVSS 5.5)
CVE-2025-47392 — Integer Overflow or Wraparound in GPS (CVSS 8.8)
CVE-2026-21385 — Qualcomm Multiple Chipsets Memory Corruption Vulnerability (CVSS 7.8) — exploited
CVE-2025-47384 — Reachable Assertion in FW (CVSS 6.5)
CVE-2025-47383 — Missing Cryptographic Step in Data Modem (CVSS 7.2)
CVE-2025-47379 — Use After Free in Automotive Audio (CVSS 7.8)
CVE-2025-47371 — Reachable Assertion in Modem (CVSS 6.5)