Qualcomm 5g Fixed Wireless Access Platform Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Qualcomm 5g Fixed Wireless Access Platform Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (11)

• CVE-2025-47392 — CVSS 8.8 (high): Memory corruption when decoding corrupted satellite data files with invalid signature offsets.
• CVE-2026-25268 — CVSS 8.8 (high): Memory Corruption when processing invalid HT40 channel layouts during dynamic channel switching operations.
• CVE-2025-47379 — CVSS 7.8 (high): Memory Corruption when concurrent access to shared buffer occurs due to improper synchronization between assignment and deallocation of…
• CVE-2026-21385 — CVSS 7.8 (high) — actively exploited: Memory corruption while using alignments for memory allocation.
• CVE-2025-47383 — CVSS 7.2 (high): Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE.
• CVE-2026-24085 — CVSS 7.2 (high): Memory Corruption when processing display command line information due to improper initialization of a variable.
• CVE-2026-24091 — CVSS 7.2 (high): Memory corruption while processing fastboot commands with improperly formatted input.
• CVE-2025-47371 — CVSS 6.5 (medium): Transient DOS when an LTE RLC packet with invalid TB is received by UE.
• CVE-2025-47384 — CVSS 6.5 (medium): Transient DOS when MAC configures config id greater than supported maximum value.
• CVE-2025-59610 — CVSS 6.4 (medium): Memory Corruption when processing IOCTL requests with mismatched API versions due to concurrent modification of user-space buffer.
• CVE-2025-59609 — CVSS 5.5 (medium): Information Disclosure when processing advertisement frames with malformed MBSSID elements of insufficient length.