96
CVEs
3
Critical
63
High
1
KEV
1
PoC
48
Unpatched C/H
35.4%
Patch Rate
0.0%
Avg EPSS
Severity Breakdown
CRITICAL
3
HIGH
63
MEDIUM
28
LOW
0
Monthly CVE Trend
Affected Products (30)
Wcd9380 Firmware
706
Wsa8830 Firmware
684
Wsa8835 Firmware
684
Qca6574au Firmware
657
Wcd9385 Firmware
635
Wcd9370 Firmware
594
Wsa8810 Firmware
582
Wsa8815 Firmware
582
Qca6696 Firmware
579
Qca6595au Firmware
560
Sa6155p Firmware
557
Qca6391 Firmware
553
Wcd9375 Firmware
547
Sa8155p Firmware
540
Qca6574a Firmware
521
Wcn3988 Firmware
516
Sdx55 Firmware
511
Wcn3950 Firmware
498
Wcn3980 Firmware
495
Sa8195p Firmware
488
Wcd9341 Firmware
482
Wcd9340 Firmware
466
Qca6574 Firmware
450
Fastconnect 7800 Firmware
439
Fastconnect 6900 Firmware
436
Sa6145p Firmware
431
Qca6595 Firmware
422
Qca8081 Firmware
420
Sd865 5g Firmware
413
Qca8337 Firmware
408
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2026-21385 | A Qualcomm chipset vulnerability (CVE-2026-21385) causes memory corruption through improper integer handling during memory allocation, enabling local privilege escalation to kernel level. KEV-listed and patched, this vulnerability affects Qualcomm-based mobile devices and embedded systems, potentially impacting billions of Android devices globally. | HIGH | 7.8 | 0.4% | 89 |
KEV
PoC
|
| CVE-2026-53046 | Denial-of-service (NULL-pointer dereference / use-after-free) in the Linux kernel's in-kernel SMB3 server (ksmbd) affects systems that offload SMB3 message encryption to asynchronous hardware crypto engines such as the Qualcomm Crypto Engine (QCE). ksmbd_crypt_message() installs a NULL completion callback and misinterprets the -EINPROGRESS return from async AEAD requests as a fatal error, freeing the request while the hardware DMA is still running so the later qce_skcipher_done() callback dereferences freed memory and crashes the kernel. There is no public exploit identified at time of analysis, it is not in CISA KEV, and EPSS is low (0.18%, 8th percentile), consistent with the narrow hardware/configuration prerequisites despite the NVD CVSS of 9.8. | CRITICAL | 9.8 | 0.2% | 49 |
|
| CVE-2025-47345 | Cryptographic issue may occur while encrypting license data. [CVSS 8.4 HIGH] | HIGH | 8.4 | 0.0% | 42 |
No patch
|
| CVE-2026-64188 | Use-after-free in the Linux kernel's Qualcomm rmnet networking driver allows a local attacker with low privileges to escalate to kernel-level code execution. The flaw occurs when the rmnet endpoint is freed while still being referenced by concurrent receive path handlers, leading to memory corruption. No active exploitation or public exploit code has been identified, but the high CVSS score reflects a significant local privilege escalation risk. | HIGH | 7.8 | 0.2% | 39 |
|
| CVE-2025-47339 | Memory corruption while deinitializing a HDCP session. [CVSS 7.8 HIGH] | HIGH | 7.8 | 0.0% | 39 |
No patch
|
| CVE-2025-47343 | Video Collaboration Vc3 Platform Firmware versions up to - contains a security vulnerability (CVSS 7.8). | HIGH | 7.8 | 0.0% | 39 |
No patch
|
| CVE-2025-47346 | Memory corruption while processing a secure logging command in the trusted application. [CVSS 7.8 HIGH] | HIGH | 7.8 | 0.0% | 39 |
No patch
|
| CVE-2025-47348 | Memory corruption while processing identity credential operations in the trusted application. [CVSS 7.8 HIGH] | HIGH | 7.8 | 0.0% | 39 |
No patch
|
| CVE-2025-47356 | Memory Corruption when multiple threads concurrently access and modify shared resources. [CVSS 7.8 HIGH] | HIGH | 7.8 | 0.0% | 39 |
No patch
|
| CVE-2025-47380 | Memory corruption while preprocessing IOCTLs in sensors. [CVSS 7.8 HIGH] | HIGH | 7.8 | 0.0% | 39 |
No patch
|
| CVE-2025-47388 | Memory corruption while passing pages to DSP with an unaligned starting address. [CVSS 7.8 HIGH] | HIGH | 7.8 | 0.0% | 39 |
|
| CVE-2025-47393 | Memory corruption when accessing resources in kernel driver. [CVSS 7.8 HIGH] | HIGH | 7.8 | 0.0% | 39 |
No patch
|
| CVE-2025-47394 | Memory corruption when copying overlapping buffers during memory operations due to incorrect offset calculations. [CVSS 7.8 HIGH] | HIGH | 7.8 | 0.0% | 39 |
|
| CVE-2025-47396 | Memory corruption occurs when a secure application is launched on a device with insufficient memory. [CVSS 7.8 HIGH] | HIGH | 7.8 | 0.0% | 39 |
|
| CVE-2025-47373 | Memory Corruption when accessing buffers with invalid length during TA invocation. [CVSS 7.8 HIGH] | HIGH | 7.8 | 0.0% | 39 |
No patch
|