qca6436_firmware vulnerabilities
CVEs whose affected-version data names the qca6436_firmware package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2025-21487High· 8.2Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.
Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.
▾ Twilightqualcomm · apq8017_firmwareEPSS 0.26%via NVD
CVE-2025-21484High· 8.2Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet.
Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet.
▾ Twilightqualcomm · sm8750_firmwareEPSS 0.26%via NVD