Qualcomm QCN5224 Firmware vulnerabilities

14 CVEs affecting Qualcomm QCN5224 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-25302, published 2026-10-06.

More from Qualcomm.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-27057, published 2025-07-08. High severity, CVSS 7.5. EPSS: 0.2% chance of exploitation in the next 30 days. Transient DOS while handling beacon frames with invalid IE header length.
• CVE-2025-27029, published 2025-06-03. High severity, CVSS 7.5. EPSS: 0.2% chance of exploitation in the next 30 days. Transient DOS while processing the tone measurement response buffer when the response buffer is out of range.
• CVE-2025-47326, published 2025-09-24. High severity, CVSS 7.5. EPSS: 0.2% chance of exploitation in the next 30 days. Transient DOS while handling command data during power control processing.
• CVE-2025-21463, published 2025-06-03. High severity, CVSS 7.5. EPSS: 0.2% chance of exploitation in the next 30 days. Transient DOS while processing the EHT operation IE in the received beacon frame.
• CVE-2025-47328, published 2025-09-24. High severity, CVSS 7.5. EPSS: 0.2% chance of exploitation in the next 30 days. Transient DOS while processing power control requests with invalid antenna or stream values.
• CVE-2025-27065, published 2025-08-06. High severity, CVSS 7.5. EPSS: 0.2% chance of exploitation in the next 30 days. Transient DOS while processing a frame with malformed shared-key descriptor.
• CVE-2025-47401, published 2026-05-04. High severity, CVSS 7.5. EPSS: 0.2% chance of exploitation in the next 30 days. Transient DOS when processing target power rate tables during channel configuration.
• CVE-2026-25268, published 2026-07-06. High severity, CVSS 8.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory Corruption when processing invalid HT40 channel layouts during dynamic channel switching operations.
• CVE-2025-27061, published 2025-07-08. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmware.
• CVE-2025-27043, published 2025-07-08. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption while processing manipulated payload in video firmware.

Latest

• CVE-2026-25302, published 2026-10-06. High severity, CVSS 7.1. EPSS: 0.1% chance of exploitation in the next 30 days. Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed.
• CVE-2025-59609, published 2026-06-01. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. Information Disclosure when processing advertisement frames with malformed MBSSID elements of insufficient length.
• CVE-2025-27064, published 2025-11-04. Medium severity, CVSS 6.1. EPSS: 0.1% chance of exploitation in the next 30 days. Information disclosure while registering commands from clients with diag through diagHal.