Qualcomm 315 5g Iot Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Qualcomm 315 5g Iot Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (12)

• CVE-2023-22667 — CVSS 8.4 (high): Memory Corruption in Audio while allocating the ion buffer during the music playback.
• CVE-2023-28547 — CVSS 8.4 (high): Memory corruption in SPS Application while requesting for public key in sorter TA.
• CVE-2023-33023 — CVSS 8.4 (high): Memory corruption while processing finish_sign command to pass a rsp buffer.
• CVE-2024-33060 — CVSS 8.4 (high): Memory corruption when two threads try to map and unmap a single node simultaneously.
• CVE-2025-27061 — CVSS 7.8 (high): Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmware.
• CVE-2023-28542 — CVSS 7.8 (high): Memory Corruption in WLAN HOST while fetching TX status information.
• CVE-2023-28567 — CVSS 7.8 (high): Memory corruption in WLAN HAL while handling command through WMI interfaces.
• CVE-2023-28573 — CVSS 7.8 (high): Memory corruption in WLAN HAL while parsing WMI command parameters.
• CVE-2023-22387 — CVSS 7.8 (high): Arbitrary memory overwrite when VM gets compromised in TX write leading to Memory Corruption.
• CVE-2025-21449 — CVSS 7.5 (high): Transient DOS may occur while processing malformed length field in SSID IEs.
• CVE-2024-33051 — CVSS 7.5 (high): Transient DOS while processing TIM IE from beacon frame as there is no check for IE length.
• CVE-2024-38426 — CVSS 5.4 (medium): While processing the authentication message in UE, improper authentication may lead to information disclosure.