Qualcomm QCN9013 Firmware vulnerabilities

43 CVEs affecting Qualcomm QCN9013 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-25268, published 2026-07-06.

More from Qualcomm.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-33105, published 2024-03-04. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. Transient DOS in WLAN Host and Firmware when large number of open authentication frames are sent with an invalid transaction sequence number.
• CVE-2023-33083, published 2023-12-05. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. Memory corruption in WLAN Host while processing RRM beacon on the AP.
• CVE-2023-33028, published 2023-10-03. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. Memory corruption in WLAN Firmware while doing a memory copy of pmk cache.
• CVE-2023-33082, published 2023-12-05. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. Memory corruption while sending an Assoc Request having BTM Query or BTM Response containing MBO IE.
• CVE-2023-33045, published 2023-11-07. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. Memory corruption in WLAN Firmware while parsing a NAN management frame carrying a S3 attribute.
• CVE-2023-33098, published 2023-12-05. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. Transient DOS while parsing WPA IES, when it is passed with length more than expected size.
• CVE-2023-33097, published 2023-12-05. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. Transient DOS in WLAN Firmware while processing a FTMR frame.
• CVE-2023-33089, published 2023-12-05. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. Transient DOS when processing a NULL buffer while parsing WLAN vdev.
• CVE-2023-33081, published 2023-12-05. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. Transient DOS while converting TWT (Target Wake Time) frame parameters in the OTA broadcast.
• CVE-2023-33041, published 2023-12-05. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. Under certain scenarios the WLAN Firmware will reach an assertion due to state confusion while looking up peer ids.

Latest

• CVE-2026-25268, published 2026-07-06. High severity, CVSS 8.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory Corruption when processing invalid HT40 channel layouts during dynamic channel switching operations.
• CVE-2025-59609, published 2026-06-01. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. Information Disclosure when processing advertisement frames with malformed MBSSID elements of insufficient length.
• CVE-2025-21465, published 2025-08-06. Medium severity, CVSS 6.5. EPSS: 0.1% chance of exploitation in the next 30 days. Information disclosure while processing the hash segment in an MBN file.
• CVE-2025-21464, published 2025-08-06. Medium severity, CVSS 6.5. EPSS: 0.1% chance of exploitation in the next 30 days. Information disclosure while reading data from an image using specified offset and size parameters.
• CVE-2024-45556, published 2025-04-07. Medium severity, CVSS 6.5. EPSS: 0.1% chance of exploitation in the next 30 days. Cryptographic issue may arise because the access control configuration permits Linux to read key registers in TCSR.
• CVE-2024-43046, published 2025-04-07. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. There may be information disclosure during memory re-allocation in TZ Secure OS.
• CVE-2024-33016, published 2024-09-02. Medium severity, CVSS 6.8. EPSS: 0.2% chance of exploitation in the next 30 days. memory corruption when an invalid firehose patch command is invoked.
• CVE-2024-21462, published 2024-07-01. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. Transient DOS while loading the TA ELF file.
• CVE-2024-23363, published 2024-06-03. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Transient DOS while processing an improperly formatted Fine Time Measurement (FTM) management frame.
• CVE-2023-43537, published 2024-06-03. High severity, CVSS 7.5. EPSS: 0.2% chance of exploitation in the next 30 days. Information disclosure while handling T2LM Action Frame in WLAN Host.