# Qualcomm Qca0000 vulnerabilities Source: https://junglewise.ai/threats/technologies/qca0000 Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/qca0000.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 19 vulnerabilities in Qualcomm Qca0000: 0 in the last 7 days and 5 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-25280, was published on 17 September 2026. Nothing in the last four weeks, down from 5 vulnerabilities in the four before. ## Counts - Last 7 days: 0 - Last 30 days: 0 - Last 90 days: 5 - All time: 19 (0 critical, 0 exploited in the wild) ## About Qualcomm Qca0000 The QCA0000 is a wireless local area network chipset. ## Latest Qualcomm Qca0000 vulnerabilities - [CVE-2026-25280: Qualcomm component memory corruption in escape handling](https://junglewise.ai/threats/cve-2026-25280-qualcomm-component-memory-corruption-in-escape-handling) (high, CVSS 7.8, published 17 Sep 2026) - [CVE-2026-25261: Qualcomm rear sensor driver memory corruption in IOCTL handling](https://junglewise.ai/threats/cve-2026-25261-qualcomm-rear-sensor-driver-memory-corruption-in-ioctl-handling) (medium, CVSS 6.7, published 17 Sep 2026) - [CVE-2026-24075: Qualcomm device control handler memory corruption via concurrent IOCTL requests](https://junglewise.ai/threats/cve-2026-24075-qualcomm-device-control-handler-memory-corruption-via-concurrent) (high, CVSS 7.8, published 17 Sep 2026) - [CVE-2026-24074: Qualcomm firmware memory corruption in data copy operations](https://junglewise.ai/threats/cve-2026-24074-qualcomm-firmware-memory-corruption-in-data-copy-operations) (high, CVSS 7.8, published 17 Sep 2026) - [CVE-2026-24073: Qualcomm decode statistics memory corruption](https://junglewise.ai/threats/cve-2026-24073-qualcomm-decode-statistics-memory-corruption) (high, CVSS 7.8, published 17 Sep 2026) - [CVE-2026-24076: Qualcomm memory corruption in registry value processing](https://junglewise.ai/threats/cve-2026-24076-qualcomm-memory-corruption-in-registry-value-processing) (medium, CVSS 6.7, published 4 Aug 2026) - [CVE-2025-47408: Memory corruption when another driver calls an IOCTL with invalid input/output buffer.](https://junglewise.ai/threats/cve-2025-47408-memory-corruption-when-another-driver-calls-an-ioctl-with-invalid) (high, CVSS 7.8, published 4 May 2026) - [CVE-2025-47406: Information Disclosure while processing IOCTL handler callbacks without verifying buffer size.](https://junglewise.ai/threats/cve-2025-47406-information-disclosure-while-processing-ioctl-handler-callbacks) (medium, CVSS 6.1, published 4 May 2026) - [CVE-2025-47405: Memory corruption when processing camera sensor input/output control codes with invalid output buffers.](https://junglewise.ai/threats/cve-2025-47405-memory-corruption-when-processing-camera-sensor-input-output) (high, CVSS 7.8, published 4 May 2026) - [CVE-2026-21382: Memory Corruption when handling power management requests with improperly sized input/output buffers.](https://junglewise.ai/threats/cve-2026-21382-memory-corruption-when-handling-power-management-requests-with) (high, CVSS 7.8, published 6 Apr 2026) - [CVE-2026-21380: Memory Corruption when using deprecated DMABUF IOCTL calls to manage video memory.](https://junglewise.ai/threats/cve-2026-21380-memory-corruption-when-using-deprecated-dmabuf-ioctl-calls-to) (high, CVSS 7.8, published 6 Apr 2026) - [CVE-2026-21378: Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor…](https://junglewise.ai/threats/cve-2026-21378-memory-corruption-when-accessing-an-output-buffer-without) (high, CVSS 7.8, published 6 Apr 2026) - [CVE-2026-21376: Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor…](https://junglewise.ai/threats/cve-2026-21376-memory-corruption-when-accessing-an-output-buffer-without) (high, CVSS 7.8, published 6 Apr 2026) - [CVE-2026-21375: Memory Corruption when accessing an output buffer without validating its size during IOCTL processing.](https://junglewise.ai/threats/cve-2026-21375-memory-corruption-when-accessing-an-output-buffer-without) (high, CVSS 7.8, published 6 Apr 2026) - [CVE-2026-21371: Memory Corruption when retrieving output buffer with insufficient size validation.](https://junglewise.ai/threats/cve-2026-21371-memory-corruption-when-retrieving-output-buffer-with-insufficient) (high, CVSS 7.8, published 6 Apr 2026) - [CVE-2025-47390: Memory corruption while preprocessing IOCTL request in JPEG driver.](https://junglewise.ai/threats/cve-2025-47390-memory-corruption-while-preprocessing-ioctl-request-in-jpeg) (high, CVSS 7.8, published 6 Apr 2026) - [CVE-2025-47356: Memory Corruption when multiple threads concurrently access and modify shared resources.](https://junglewise.ai/threats/cve-2025-47356-memory-corruption-when-multiple-threads-concurrently-access-and) (high, CVSS 7.8, published 7 Jan 2026) - [CVE-2025-47343: Memory corruption while processing a video session to set video parameters.](https://junglewise.ai/threats/cve-2025-47343-memory-corruption-while-processing-a-video-session-to-set-video) (high, CVSS 7.8, published 7 Jan 2026) - [CVE-2025-27064: Information disclosure while registering commands from clients with diag through diagHal.](https://junglewise.ai/threats/cve-2025-27064-information-disclosure-while-registering-commands-from-clients) (medium, CVSS 6.1, published 4 Nov 2025) ## Most severe Qualcomm Qca0000 vulnerabilities - [CVE-2026-21376: Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor…](https://junglewise.ai/threats/cve-2026-21376-memory-corruption-when-accessing-an-output-buffer-without) (high, CVSS 7.8, published 6 Apr 2026) - [CVE-2026-21371: Memory Corruption when retrieving output buffer with insufficient size validation.](https://junglewise.ai/threats/cve-2026-21371-memory-corruption-when-retrieving-output-buffer-with-insufficient) (high, CVSS 7.8, published 6 Apr 2026) - [CVE-2025-47390: Memory corruption while preprocessing IOCTL request in JPEG driver.](https://junglewise.ai/threats/cve-2025-47390-memory-corruption-while-preprocessing-ioctl-request-in-jpeg) (high, CVSS 7.8, published 6 Apr 2026) - [CVE-2025-47408: Memory corruption when another driver calls an IOCTL with invalid input/output buffer.](https://junglewise.ai/threats/cve-2025-47408-memory-corruption-when-another-driver-calls-an-ioctl-with-invalid) (high, CVSS 7.8, published 4 May 2026) - [CVE-2025-47405: Memory corruption when processing camera sensor input/output control codes with invalid output buffers.](https://junglewise.ai/threats/cve-2025-47405-memory-corruption-when-processing-camera-sensor-input-output) (high, CVSS 7.8, published 4 May 2026) - [CVE-2026-21382: Memory Corruption when handling power management requests with improperly sized input/output buffers.](https://junglewise.ai/threats/cve-2026-21382-memory-corruption-when-handling-power-management-requests-with) (high, CVSS 7.8, published 6 Apr 2026) - [CVE-2026-21380: Memory Corruption when using deprecated DMABUF IOCTL calls to manage video memory.](https://junglewise.ai/threats/cve-2026-21380-memory-corruption-when-using-deprecated-dmabuf-ioctl-calls-to) (high, CVSS 7.8, published 6 Apr 2026) - [CVE-2026-21378: Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor…](https://junglewise.ai/threats/cve-2026-21378-memory-corruption-when-accessing-an-output-buffer-without) (high, CVSS 7.8, published 6 Apr 2026) - [CVE-2026-21375: Memory Corruption when accessing an output buffer without validating its size during IOCTL processing.](https://junglewise.ai/threats/cve-2026-21375-memory-corruption-when-accessing-an-output-buffer-without) (high, CVSS 7.8, published 6 Apr 2026) - [CVE-2025-47356: Memory Corruption when multiple threads concurrently access and modify shared resources.](https://junglewise.ai/threats/cve-2025-47356-memory-corruption-when-multiple-threads-concurrently-access-and) (high, CVSS 7.8, published 7 Jan 2026) ## Vulnerabilities per week Nothing in the last four weeks, down from 5 vulnerabilities in the four before. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 5 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other Qualcomm technologies - [Qualcomm FastConnect 7800](https://junglewise.ai/threats/technologies/fastconnect-7800): 54 vulnerabilities - [Qualcomm FastConnect 7800 Firmware](https://junglewise.ai/threats/technologies/fastconnect-7800-firmware): 48 vulnerabilities - [Qualcomm FastConnect 6900](https://junglewise.ai/threats/technologies/fastconnect-6900): 47 vulnerabilities - [Qualcomm WSA8840](https://junglewise.ai/threats/technologies/wsa8840): 45 vulnerabilities - [Qualcomm WSA8845](https://junglewise.ai/threats/technologies/wsa8845): 45 vulnerabilities - [Qualcomm WSA8845H](https://junglewise.ai/threats/technologies/wsa8845h): 45 vulnerabilities - [Qualcomm Wsa8840 Firmware](https://junglewise.ai/threats/technologies/wsa8840-firmware): 44 vulnerabilities - [Qualcomm Wsa8845 Firmware](https://junglewise.ai/threats/technologies/wsa8845-firmware): 44 vulnerabilities - [Qualcomm Wsa8845h Firmware](https://junglewise.ai/threats/technologies/wsa8845h-firmware): 44 vulnerabilities - [Qualcomm FastConnect 6900 Firmware](https://junglewise.ai/threats/technologies/fastconnect-6900-firmware): 41 vulnerabilities - [Qualcomm WCD9380](https://junglewise.ai/threats/technologies/wcd9380): 39 vulnerabilities - [Qualcomm Wcd9380 Firmware](https://junglewise.ai/threats/technologies/wcd9380-firmware): 38 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Qualcomm Qca0000 vulnerabilities", https://junglewise.ai/threats/technologies/qca0000, 9 November 2026.