qca6436 firmware vulnerabilities and fixes

Recent CVEs affecting qca6436 firmware, with upgrade or downgrade steps. 7 tracked.

Also searched as: qca6436firmware.

qca6436 firmware has 7 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-08-06. Highest priority: CVE-2025-27071 (score 33/100).

• CVE-2025-27071 HIGH 7.3 MITIGATE MITIGATE Memory corruption while processing specific files in Powerline Communication Firmware.
• CVE-2025-21455 HIGH 7.8 MITIGATE MITIGATE Memory corruption while submitting blob data to kernel space though IOCTL.
• CVE-2024-53016 MEDIUM 6.6 MITIGATE MITIGATE Memory corruption while processing I2C settings in Camera driver.
• CVE-2024-45570 MEDIUM 6.6 MITIGATE MITIGATE Memory corruption may occur during IO configuration processing when the IO port count is invalid.
• CVE-2024-45566 HIGH 7.8 MITIGATE MITIGATE Memory corruption during concurrent buffer access due to modification of the reference count.
• CVE-2024-45544 MEDIUM 6.6 MITIGATE MITIGATE Memory corruption while processing IOCTL calls to add route entry in the HW.
• CVE-2024-43067 HIGH 7.8 MITIGATE MITIGATE Memory corruption occurs during the copying of read data from the EEPROM because the IO configuration is expos

FAQ

How do I fix qca6436 firmware vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is qca6436 firmware being exploited right now?

None of the tracked qca6436 firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which qca6436 firmware CVE should I patch first?

CVE-2025-27071 currently ranks highest (33/100): Memory corruption while processing specific files in Powerline Communication Firmware..

RSS feed for qca6436 firmware · ← Back to latest CVEs