qca6436 firmware vulnerabilities and fixes

Recent CVEs affecting qca6436 firmware, with upgrade or downgrade steps. 12 tracked.

Also searched as: qca6436firmware.

qca6436 firmware has 12 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-08-06. Highest priority: CVE-2023-28581 (score 50/100).

• CVE-2025-27071 HIGH 7.3 MITIGATE MITIGATE Memory corruption while processing specific files in Powerline Communication Firmware.
• CVE-2025-21455 HIGH 7.8 MITIGATE MITIGATE Memory corruption while submitting blob data to kernel space though IOCTL.
• CVE-2024-53016 MEDIUM 6.6 MITIGATE MITIGATE Memory corruption while processing I2C settings in Camera driver.
• CVE-2024-45570 MEDIUM 6.6 MITIGATE MITIGATE Memory corruption may occur during IO configuration processing when the IO port count is invalid.
• CVE-2024-45566 HIGH 7.8 MITIGATE MITIGATE Memory corruption during concurrent buffer access due to modification of the reference count.
• CVE-2024-45544 MEDIUM 6.6 MITIGATE MITIGATE Memory corruption while processing IOCTL calls to add route entry in the HW.
• CVE-2024-43067 HIGH 7.8 MITIGATE MITIGATE Memory corruption occurs during the copying of read data from the EEPROM because the IO configuration is expos
• CVE-2023-28581 CRITICAL 9.8 MITIGATE MITIGATE Memory corruption in WLAN Firmware while parsing receieved GTK Keys in GTK KDE.
• CVE-2023-28577 MEDIUM 6.7 MITIGATE MITIGATE In the function call related to CAM_REQ_MGR_RELEASE_BUF there is no check if the buffer is being used
• CVE-2023-28576 MEDIUM 6.4 MITIGATE MITIGATE The buffer obtained from kernel APIs such as cam_mem_get_cpu_buf() may be readable/writable in userspace after
• CVE-2023-21667 MEDIUM 6.5 MITIGATE MITIGATE Transient DOS in Bluetooth HOST while passing descriptor to validate the blacklisted BT keyboard.
• CVE-2023-21647 MEDIUM 6.5 MITIGATE MITIGATE Information disclosure in Bluetooth when an GATT packet is received due to improper input validation.

FAQ

How do I fix qca6436 firmware vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is qca6436 firmware being exploited right now?

None of the tracked qca6436 firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which qca6436 firmware CVE should I patch first?

CVE-2023-28581 currently ranks highest (50/100): Memory corruption in WLAN Firmware while parsing receieved GTK Keys in GTK KDE..

RSS feed for qca6436 firmware · ← Back to latest CVEs