CVE-2023-21667: Qualcomm QCA6390 Firmware

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Transient DOS in Bluetooth HOST while passing descriptor to validate the blacklisted BT keyboard.

Affected products

• Qualcomm QCA6390 Firmware: affected versions not specified
• Qualcomm QCA6391 Firmware: affected versions not specified
• Qualcomm QCA6426 Firmware: affected versions not specified
• Qualcomm QCA6436 Firmware: affected versions not specified
• Qualcomm QCA6574AU Firmware: affected versions not specified
• Qualcomm QCA6595AU Firmware: affected versions not specified
• Qualcomm QCA6696 Firmware: affected versions not specified
• Qualcomm QCC5100 Firmware: affected versions not specified
• Qualcomm QCN9074 Firmware: affected versions not specified
• Qualcomm QCS410 Firmware: affected versions not specified
• Qualcomm QCS610 Firmware: affected versions not specified
• Qualcomm SA6145P Firmware: affected versions not specified
• Qualcomm SA6150P Firmware: affected versions not specified
• Qualcomm SA6155P Firmware: affected versions not specified
• Qualcomm SA8145P Firmware: affected versions not specified
• Qualcomm SA8150P Firmware: affected versions not specified
• Qualcomm SA8155P Firmware: affected versions not specified
• Qualcomm SA8195P Firmware: affected versions not specified
• Qualcomm SD865 5g Firmware: affected versions not specified
• Qualcomm SD870 Firmware: affected versions not specified
• Qualcomm Sd 8 GEN1 5g Firmware: affected versions not specified
• Qualcomm SDX55M Firmware: affected versions not specified
• Qualcomm SDXR2 5g Firmware: affected versions not specified
• Qualcomm SW5100 Firmware: affected versions not specified
• Qualcomm SW5100P Firmware: affected versions not specified
• and 18 more

Published 2023-09-05. Last modified 2026-06-17.