qca6430 firmware vulnerabilities and fixes

Recent CVEs affecting qca6430 firmware, with upgrade or downgrade steps. 11 tracked.

Also searched as: qca6430firmware.

qca6430 firmware has 11 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2026-02-02. Highest priority: CVE-2023-28562 (score 49/100).

• CVE-2025-47359 HIGH 7.8 MITIGATE MITIGATE Memory Corruption when multiple threads simultaneously access a memory free API.
• CVE-2023-28583 MEDIUM 6.7 MITIGATE MITIGATE Memory corruption when IPv6 prefix timer object`s lifetime expires which are created while Netmgr daemon gets
• CVE-2023-28562 CRITICAL 9.8 MITIGATE MITIGATE Memory corruption while handling payloads from remote ESL.
• CVE-2023-21663 MEDIUM 6.7 MITIGATE MITIGATE Memory Corruption while accessing metadata in Display.
• CVE-2023-21648 MEDIUM 6.7 MITIGATE MITIGATE Memory corruption in RIL while trying to send apdu packet.
• CVE-2023-21644 MEDIUM 6.7 MITIGATE MITIGATE Memory corruption in RIL due to Integer Overflow while triggering qcril_uim_request_apdu request.
• CVE-2023-21639 MEDIUM 6.7 MITIGATE MITIGATE Memory corruption in Audio while processing sva_model_serializer using memory size passed by HIDL client.
• CVE-2023-21636 MEDIUM 6.7 MITIGATE MITIGATE Memory Corruption due to improper validation of array index in Linux while updating adn record.
• CVE-2023-21627 MEDIUM 6.7 MITIGATE MITIGATE Memory corruption in Trusted Execution Environment while calling service API with invalid address.
• CVE-2022-40524 MEDIUM 6.7 MITIGATE MITIGATE Memory corruption due to buffer over-read in Modem while processing SetNativeHandle RTP service.
• CVE-2022-33230 MEDIUM 6.7 MITIGATE MITIGATE Memory corruption in FM Host due to buffer copy without checking the size of input in FM Host

FAQ

How do I fix qca6430 firmware vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is qca6430 firmware being exploited right now?

None of the tracked qca6430 firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which qca6430 firmware CVE should I patch first?

CVE-2023-28562 currently ranks highest (49/100): Memory corruption while handling payloads from remote ESL..

RSS feed for qca6430 firmware · ← Back to latest CVEs