Qualcomm Home Hub 100 Platform Firmware vulnerabilities

23 CVEs affecting Qualcomm Home Hub 100 Platform Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-27053, published 2025-10-09.

More from Qualcomm.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-40507, published 2023-06-06. High severity, CVSS 7.8. EPSS: 1.3% chance of exploitation in the next 30 days. Memory corruption due to double free in Core while mapping HLOS address to the list.
• CVE-2022-33291, published 2023-04-13. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. Information disclosure in Modem due to buffer over-read while receiving a IP header with malformed length.
• CVE-2022-33287, published 2023-04-13. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. Information disclosure in Modem due to buffer over-read while getting length of Unfragmented headers in an IPv6 packet.
• CVE-2023-43511, published 2024-01-02. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header.
• CVE-2025-47318, published 2025-09-24. High severity, CVSS 7.5. EPSS: 0.2% chance of exploitation in the next 30 days. Transient DOS while parsing the EPTM test control message to get the test pattern.
• CVE-2023-21666, published 2023-05-02. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Memory Corruption in Graphics while accessing a buffer allocated through the graphics pool.
• CVE-2023-28563, published 2023-11-07. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. Information disclosure in IOE Firmware while handling WMI command.
• CVE-2023-28586, published 2023-12-05. Medium severity, CVSS 6.5. EPSS: 0.1% chance of exploitation in the next 30 days. Information disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE.
• CVE-2023-33030, published 2024-01-02. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption in HLOS while running playready use-case.
• CVE-2023-33033, published 2024-01-02. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption in Audio during playback with speaker protection.

Latest

• CVE-2025-27053, published 2025-10-09. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption during PlayReady APP usecase while processing TA commands.
• CVE-2025-21482, published 2025-09-24. High severity, CVSS 7.1. EPSS: 0.1% chance of exploitation in the next 30 days. Cryptographic issue while performing RSA PKCS padding decoding.
• CVE-2024-43052, published 2024-12-02. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption while processing API calls to NPU with invalid input.
• CVE-2024-33056, published 2024-12-02. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption when allocating and accessing an entry in an SMEM partition continuously.
• CVE-2024-23357, published 2024-08-05. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. Transient DOS while importing a PKCS#8-encoded RSA key with zero bytes modulus.
• CVE-2024-21461, published 2024-07-01. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption while performing finish HMAC operation when context is freed by keymaster.