qca6426 firmware vulnerabilities and fixes

Recent CVEs affecting qca6426 firmware, with upgrade or downgrade steps. 11 tracked.

Also searched as: qca6426firmware.

qca6426 firmware has 11 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-09-24. Highest priority: CVE-2025-27071 (score 33/100).

• CVE-2025-27071 HIGH 7.3 MITIGATE MITIGATE Memory corruption while processing specific files in Powerline Communication Firmware.
• CVE-2025-27037 HIGH 7.8 MITIGATE MITIGATE Memory corruption while processing config_dev IOCTL when camera kernel driver drops its reference to CPU buffe
• CVE-2025-21474 HIGH 7.8 MITIGATE MITIGATE Memory corruption while processing commands from A2dp sink command queue.
• CVE-2025-21455 HIGH 7.8 MITIGATE MITIGATE Memory corruption while submitting blob data to kernel space though IOCTL.
• CVE-2024-53016 MEDIUM 6.6 MITIGATE MITIGATE Memory corruption while processing I2C settings in Camera driver.
• CVE-2024-45570 MEDIUM 6.6 MITIGATE MITIGATE Memory corruption may occur during IO configuration processing when the IO port count is invalid.
• CVE-2024-45566 HIGH 7.8 MITIGATE MITIGATE Memory corruption during concurrent buffer access due to modification of the reference count.
• CVE-2024-45544 MEDIUM 6.6 MITIGATE MITIGATE Memory corruption while processing IOCTL calls to add route entry in the HW.
• CVE-2024-43067 HIGH 7.8 MITIGATE MITIGATE Memory corruption occurs during the copying of read data from the EEPROM because the IO configuration is expos
• CVE-2024-33040 MEDIUM 6.7 MITIGATE MITIGATE Memory corruption while invoking redundant release command to release one buffer from user space as race condi
• CVE-2023-43527 MEDIUM 6.8 MITIGATE MITIGATE Information disclosure while parsing dts header atom in Video.

FAQ

How do I fix qca6426 firmware vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is qca6426 firmware being exploited right now?

None of the tracked qca6426 firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which qca6426 firmware CVE should I patch first?

CVE-2025-27071 currently ranks highest (33/100): Memory corruption while processing specific files in Powerline Communication Firmware..

RSS feed for qca6426 firmware · ← Back to latest CVEs