Qualcomm QCA6175A Firmware vulnerabilities

131 CVEs affecting Qualcomm QCA6175A Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-47318, published 2025-09-24.

More from Qualcomm.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-11264, published 2021-09-08. Critical severity, CVSS 9.8. EPSS: 13.2% chance of exploitation in the next 30 days. Improper authentication of Non-EAPOL/WAPI plaintext frames during four-way handshake can lead to arbitrary network packet injection in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
• CVE-2020-11301, published 2021-09-08. High severity, CVSS 7.5. EPSS: 11.1% chance of exploitation in the next 30 days. Improper authentication of un-encrypted plaintext Wi-Fi frames in an encrypted network can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
• CVE-2020-11272, published 2021-02-22. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. Before enqueuing a frame to the PE queue for further processing, an entry in a hash table can be deleted and using a stale version later can lead to use after free condition in Snapdragon Auto,…
• CVE-2021-35117, published 2022-04-01. Critical severity, CVSS 9.1. EPSS: 0.9% chance of exploitation in the next 30 days. An Out of Bounds read may potentially occur while processing an IBSS beacon, in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…
• CVE-2021-35088, published 2022-04-01. Critical severity, CVSS 9.1. EPSS: 0.9% chance of exploitation in the next 30 days. Possible out of bound read due to improper validation of IE length during SSID IE parse when channel is DFS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
• CVE-2020-11276, published 2021-02-22. Critical severity, CVSS 9.1. EPSS: 0.8% chance of exploitation in the next 30 days. Possible buffer over read while processing P2P IE and NOA attribute of beacon and probe response frames due to improper validation of P2P IE and NOA attribute lengths in Snapdragon Auto, Snapdragon…
• CVE-2020-11275, published 2021-02-22. Critical severity, CVSS 9.1. EPSS: 0.8% chance of exploitation in the next 30 days. Possible buffer over-read while parsing quiet IE in Rx beacon frame due to improper check of IE length in received beacon in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
• CVE-2020-11182, published 2021-06-09. Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days. Possible heap overflow while parsing NAL header due to lack of check of length of data received from user in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
• CVE-2020-11134, published 2021-06-09. Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days. Possible stack out of bound write might happen due to time bitmap length and bit duration fields of the attributes like NAN ranging setup attribute inside a NAN management frame are not Properly…
• CVE-2020-11159, published 2021-06-09. Critical severity, CVSS 9.1. EPSS: 0.8% chance of exploitation in the next 30 days. Buffer over-read can happen while processing WPA,RSN IE of beacon and response frames if IE length is less than length of frame pointer being accessed in Snapdragon Auto, Snapdragon Compute,…

Latest

• CVE-2025-47318, published 2025-09-24. High severity, CVSS 7.5. EPSS: 0.2% chance of exploitation in the next 30 days. Transient DOS while parsing the EPTM test control message to get the test pattern.
• CVE-2025-21430, published 2025-04-07. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Transient DOS while connecting STA to AP and initiating ADD TS request from AP to establish TSpec session.
• CVE-2025-21429, published 2025-04-07. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request.
• CVE-2025-21428, published 2025-04-07. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request from the AP to establish a TSpec session.
• CVE-2024-53027, published 2025-03-03. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Transient DOS may occur while processing the country IE.
• CVE-2024-38408, published 2024-11-04. Critical severity, CVSS 9.1. EPSS: 0.1% chance of exploitation in the next 30 days. Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.
• CVE-2024-33049, published 2024-10-07. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Transient DOS while parsing noninheritance IE of Extension element when length of IE is 2 of beacon frame.
• CVE-2024-33051, published 2024-09-02. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Transient DOS while processing TIM IE from beacon frame as there is no check for IE length.
• CVE-2024-33050, published 2024-09-02. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper.
• CVE-2024-33014, published 2024-08-05. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Transient DOS while parsing ESP IE from beacon/probe response frame.