[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fBm47xC902csr2yEPxd4Rkst82di--_4G09uxpd8BLC8":3,"g5a-family:qualcomm\u002Fqca6391":161,"g5a-ex:qualcomm\u002Fqca6391@*":165},{"success":4,"data":5},true,{"product":6,"versions":15,"topVulnerabilitiesByEpss":16,"kevVulnerabilities":73,"seoMetadata":139,"meta":158},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":14},"qualcomm","qca6391",0,890,11,"2026-04-06",[],"Qca6391 by Qualcomm is a technology product and 890 known security vulnerabilities including 11 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[],[17,26,32,37,42,48,54,59,64,69],{"cveId":18,"description":19,"publishedDate":20,"cvssScore":21,"cvssVersion":22,"severity":23,"isKev":24,"epssScore":25},"CVE-2020-11264","Improper authentication of Non-EAPOL\u002FWAPI plaintext frames during four-way handshake can lead to arbitrary network packet injection in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music","2021-09-08",9.8,"v3.1","Critical",false,0.13186,{"cveId":27,"description":28,"publishedDate":20,"cvssScore":29,"cvssVersion":22,"severity":30,"isKev":24,"epssScore":31},"CVE-2020-11301","Improper authentication of un-encrypted plaintext Wi-Fi frames in an encrypted network can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking",7.5,"High",0.11108,{"cveId":33,"description":34,"publishedDate":35,"cvssScore":21,"cvssVersion":22,"severity":23,"isKev":24,"epssScore":36},"CVE-2021-30351","An out of bound memory access can occur due to improper validation of number of frames being passed during music playback in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking","2022-01-03",0.04018,{"cveId":38,"description":39,"publishedDate":40,"cvssScore":21,"cvssVersion":22,"severity":23,"isKev":24,"epssScore":41},"CVE-2021-1965","Possible buffer overflow due to lack of parameter length check during MBSSID scan IE parse in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking","2021-07-13",0.03016,{"cveId":43,"description":44,"publishedDate":45,"cvssScore":46,"cvssVersion":22,"severity":30,"isKev":4,"epssScore":47},"CVE-2020-11261","Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables","2021-06-09",7.8,0.01604,{"cveId":49,"description":50,"publishedDate":51,"cvssScore":52,"cvssVersion":22,"severity":30,"isKev":4,"epssScore":53},"CVE-2021-1905","Possible use after free due to improper handling of memory mapping of multiple processes simultaneously. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables","2021-05-07",8.4,0.01543,{"cveId":55,"description":56,"publishedDate":57,"cvssScore":46,"cvssVersion":22,"severity":30,"isKev":24,"epssScore":58},"CVE-2021-30317","Improper validation of program headers containing ELF metadata can lead to image verification bypass in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking","2022-02-11",0.01389,{"cveId":60,"description":61,"publishedDate":62,"cvssScore":46,"cvssVersion":22,"severity":30,"isKev":24,"epssScore":63},"CVE-2022-40507","Memory corruption due to double free in Core while mapping HLOS address to the list.","2023-06-06",0.01305,{"cveId":65,"description":66,"publishedDate":67,"cvssScore":21,"cvssVersion":22,"severity":23,"isKev":24,"epssScore":68},"CVE-2020-11167","Memory corruption while calculating L2CAP packet length in reassembly logic when remote sends more data than expected in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables","2021-01-21",0.01235,{"cveId":70,"description":71,"publishedDate":67,"cvssScore":21,"cvssVersion":22,"severity":23,"isKev":24,"epssScore":72},"CVE-2020-3686","Possible memory out of bound issue during music playback when an incorrect bit stream content is copied into array without checking the length of array in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking",0.01208,[74,83,86,92,100,107,113,118,124,128,137],{"cveId":75,"description":76,"publishedDate":77,"cvssScore":78,"severity":30,"isKev":4,"epssScore":79,"cisaVulnName":80,"cisaDateAdded":77,"cisaShortDescription":81,"cisaRequiredAction":82},"CVE-2025-21480","Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.","2025-06-03",8.6,0.0046,"Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability","Multiple Qualcomm chipsets contain an incorrect authorization vulnerability. This vulnerability allows for memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"cveId":84,"description":76,"publishedDate":77,"cvssScore":78,"severity":30,"isKev":4,"epssScore":85,"cisaVulnName":80,"cisaDateAdded":77,"cisaShortDescription":81,"cisaRequiredAction":82},"CVE-2025-21479",0.00843,{"cveId":87,"description":88,"publishedDate":77,"cvssScore":29,"severity":30,"isKev":4,"epssScore":89,"cisaVulnName":90,"cisaDateAdded":77,"cisaShortDescription":91,"cisaRequiredAction":82},"CVE-2025-27038","Memory corruption while rendering graphics using Adreno GPU drivers in Chrome.",0.01016,"Qualcomm Multiple Chipsets Use-After-Free Vulnerability","Multiple Qualcomm chipsets contain a use-after-free vulnerability. This vulnerability allows for memory corruption while rendering graphics using Adreno GPU drivers in Chrome.",{"cveId":93,"description":94,"publishedDate":95,"cvssScore":46,"severity":30,"isKev":4,"epssScore":96,"cisaVulnName":90,"cisaDateAdded":97,"cisaShortDescription":98,"cisaRequiredAction":99},"CVE-2024-43047","Memory corruption while maintaining memory maps of HLOS memory.","2024-10-07",0.00668,"2024-10-08","Multiple Qualcomm chipsets contain a use-after-free vulnerability due to memory corruption in DSP Services while maintaining memory maps of HLOS memory. ","Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.",{"cveId":101,"description":102,"publishedDate":103,"cvssScore":52,"severity":30,"isKev":4,"epssScore":104,"cisaVulnName":105,"cisaDateAdded":103,"cisaShortDescription":106,"cisaRequiredAction":99},"CVE-2023-33106","Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.","2023-12-05",0.00788,"Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability","Multiple Qualcomm chipsets contain a use of out-of-range pointer offset vulnerability due to memory corruption in Graphics while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.",{"cveId":108,"description":109,"publishedDate":110,"cvssScore":52,"severity":30,"isKev":4,"epssScore":111,"cisaVulnName":90,"cisaDateAdded":103,"cisaShortDescription":112,"cisaRequiredAction":99},"CVE-2022-22071","Possible use after free when process shell memory is freed using IOCTL munmap call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music","2022-06-14",0.00411,"Multiple Qualcomm chipsets contain a use-after-free vulnerability when process shell memory is freed using IOCTL munmap call and process initialization is in progress.",{"cveId":114,"description":115,"publishedDate":103,"cvssScore":46,"severity":30,"isKev":4,"epssScore":116,"cisaVulnName":90,"cisaDateAdded":103,"cisaShortDescription":117,"cisaRequiredAction":99},"CVE-2023-33063","Memory corruption in DSP Services during a remote call from HLOS to DSP.",0.00672,"Multiple Qualcomm chipsets contain a use-after-free vulnerability due to memory corruption in DSP Services during a remote call from HLOS to DSP.",{"cveId":119,"description":120,"publishedDate":103,"cvssScore":52,"severity":30,"isKev":4,"epssScore":121,"cisaVulnName":122,"cisaDateAdded":103,"cisaShortDescription":123,"cisaRequiredAction":99},"CVE-2023-33107","Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.",0.00739,"Qualcomm Multiple Chipsets Integer Overflow Vulnerability","Multiple Qualcomm chipsets contain an integer overflow vulnerability due to memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.",{"cveId":43,"description":44,"publishedDate":45,"cvssScore":46,"severity":30,"isKev":4,"epssScore":47,"cisaVulnName":125,"cisaDateAdded":126,"cisaShortDescription":44,"cisaRequiredAction":127},"Qualcomm Multiple Chipsets Improper Input Validation Vulnerability","2021-12-01","Apply updates per vendor instructions.",{"cveId":129,"description":130,"publishedDate":51,"cvssScore":131,"severity":132,"isKev":4,"epssScore":133,"cisaVulnName":134,"cisaDateAdded":135,"cisaShortDescription":136,"cisaRequiredAction":127},"CVE-2021-1906","Improper handling of address deregistration on failure can lead to new GPU address allocation failure. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables",6.2,"Medium",0.0052,"Qualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerability","2021-11-03","Multiple Qualcomm chipsets contain a detection of error condition without action vulnerability when improper handling of address deregistration on failure can lead to new GPU address allocation failure.",{"cveId":49,"description":50,"publishedDate":51,"cvssScore":52,"severity":30,"isKev":4,"epssScore":53,"cisaVulnName":90,"cisaDateAdded":135,"cisaShortDescription":138,"cisaRequiredAction":127},"Multiple Qualcomm Chipsets contain a use after free vulnerability due to improper handling of memory mapping of multiple processes simultaneously.",{"title":140,"metaDescription":141,"keywords":142,"structuredData":143},"Qca6391 by Qualcomm - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Qca6391 by Qualcomm with 890 tracked vulnerabilities including 0 critical and 10 high-severity issues and 11 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Qca6391 vulnerabilities, Qca6391 security, Qca6391 CVE, Qualcomm Qca6391, Qca6391 threat intelligence, Qualcomm security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Qca6391 KEV, Qca6391 exploited vulnerabilities",{"@context":144,"@type":145,"name":146,"description":141,"url":147,"manufacturer":148,"applicationCategory":152,"softwareVersion":153,"mainEntity":154},"https:\u002F\u002Fschema.org","SoftwareApplication","Qca6391","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fqualcomm\u002Fqca6391",{"@type":149,"name":150,"url":151},"Organization","Qualcomm","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fqualcomm","Security Software","Multiple versions",{"@type":155,"name":156,"description":157,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Qca6391 Security Vulnerabilities","Security vulnerabilities affecting Qca6391 by Qualcomm",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":159,"apiVersion":160},"2026-10-17T18:46:17.737Z","3.0",[162],{"product":163,"cves":164},"qca6391_firmware",858,{"rows":166,"total":11,"capped":24,"failed":9},[167,171,175,179,183,187,191,195,199,203,207],{"cveId":75,"name":80,"severity":30,"cvss":78,"added":77,"epss":79,"published":168,"ranges":169,"checked":4,"hits":170,"covers":24},"2025-06-03T06:15:26.19",[],[],{"cveId":84,"name":80,"severity":30,"cvss":78,"added":77,"epss":85,"published":172,"ranges":173,"checked":4,"hits":174,"covers":24},"2025-06-03T07:15:20.933",[],[],{"cveId":87,"name":90,"severity":30,"cvss":29,"added":77,"epss":89,"published":176,"ranges":177,"checked":4,"hits":178,"covers":24},"2025-06-03T06:15:27.133",[],[],{"cveId":93,"name":90,"severity":30,"cvss":46,"added":97,"epss":96,"published":180,"ranges":181,"checked":4,"hits":182,"covers":24},"2024-10-07T13:15:15.257",[],[],{"cveId":101,"name":105,"severity":30,"cvss":52,"added":103,"epss":104,"published":184,"ranges":185,"checked":4,"hits":186,"covers":24},"2023-12-05T03:15:14.673",[],[],{"cveId":108,"name":90,"severity":30,"cvss":52,"added":103,"epss":111,"published":188,"ranges":189,"checked":4,"hits":190,"covers":24},"2022-06-14T10:15:19.003",[],[],{"cveId":114,"name":90,"severity":30,"cvss":46,"added":103,"epss":116,"published":192,"ranges":193,"checked":4,"hits":194,"covers":24},"2023-12-05T03:15:12.067",[],[],{"cveId":119,"name":122,"severity":30,"cvss":52,"added":103,"epss":121,"published":196,"ranges":197,"checked":4,"hits":198,"covers":24},"2023-12-05T03:15:14.86",[],[],{"cveId":43,"name":125,"severity":30,"cvss":46,"added":126,"epss":47,"published":200,"ranges":201,"checked":4,"hits":202,"covers":24},"2021-06-09T05:15:07.643",[],[],{"cveId":129,"name":134,"severity":132,"cvss":131,"added":135,"epss":133,"published":204,"ranges":205,"checked":4,"hits":206,"covers":24},"2021-05-07T09:15:08.28",[],[],{"cveId":49,"name":90,"severity":30,"cvss":52,"added":135,"epss":53,"published":208,"ranges":209,"checked":4,"hits":210,"covers":24},"2021-05-07T09:15:08.243",[],[]]