Qualcomm vulnerabilities
Published CVEs affecting Qualcomm products: 168 record(s), with severity, exploitation and fixes.
Snapdragon 163Fastconnect 7800 Firmware 138Wcd9380 Firmware 136Wcd9385 Firmware 136Fastconnect 6900 Firmware 131Wsa8840 Firmware 130Wsa8845 Firmware 130Wsa8845h Firmware 130Wsa8835 Firmware 124Wsa8830 Firmware 122Wcd9375 Firmware 113Wcd9370 Firmware 113Wsa8815 Firmware 104Wsa8810 Firmware 104Fastconnect 6700 Firmware 104Wsa8832 Firmware 101Wcn3950 Firmware 96Wcn3988 Firmware 96Video Collaboration Vc3 Platform Firmware 89Wcd9395 Firmware 87Qcm6490 Firmware 87Fastconnect 6200 Firmware 86Qca6595au Firmware 86Qca6698aq Firmware 85Qcm5430 Firmware 85Qca6391 Firmware 84Sc8380xp Firmware 82Qca6797aq Firmware 82Wcd9378 Firmware 79Qca6696 Firmware 79Qca6574au Firmware 77Wcn6755 Firmware 75Wcn7861 Firmware 74Qca6595 Firmware 74Sa9000p Firmware 73Qam8255p Firmware 72Sa8255p Firmware 72Sa8770p Firmware 71Wcd9390 Firmware 70Wcn7881 Firmware 69
CVE-2026-57559
High · 7.8
CWE-416 Oct 6, 2026
Use After Free in DSP_Services
Memory corruption while processing service requests.
CVE-2026-57555
High · 7.8
CWE-416 Oct 6, 2026
Use After Free in DSP Service
Memory Corruption when executing system service routines due to improper handling of user input buffers.
CVE-2026-57554
High · 7.8
CWE-416 Oct 6, 2026
Use After Free in DSP Service
Memory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC invocations.
CVE-2026-57546
High · 7.5
CWE-126 Oct 6, 2026
Buffer Over-read in WLAN HAL
Transient DOS when processing a continuous receive command with a zero-sized global configuration override.
CVE-2026-57545
High · 7.8
CWE-822 Oct 6, 2026
Untrusted Pointer Dereference in Graphics
Memory corruption when processing draw objects of incorrect type during graphics command list execution.
CVE-2026-57537
High · 7.8
CWE-416 Oct 6, 2026
Use After Free in DSP Service
Memory Corruption when accessing and modifying geographic mapping data concurrently without proper synchronization.
CVE-2026-25302
High · 7.1
CWE-347 Oct 6, 2026
Improper Verification of Cryptographic Signature in Boot
Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed.
CVE-2026-25291
High · 7.8
CWE-416 Oct 6, 2026
Use After Free in Graphics
Memory corruption when performing concurrent operations on shared memory page lists due to lack of proper synchronization mechanisms.
CVE-2026-25274
Medium · 6.7
CWE-416 Oct 6, 2026
Use After Free in Windows WLAN Host
Memory Corruption when processing concurrent DMA buffer allocation and deallocation commands without proper synchronization.
CVE-2026-25273
Medium · 6.7
CWE-787 Oct 6, 2026
Out-of-bounds Write in Camera Driver
Memory Corruption when processing camera operations due to out-of-bounds write during driver updates.
CVE-2026-25272
Medium · 6.7
CWE-787 Oct 6, 2026
Out-of-bounds Write in Camera Driver
Memory Corruption when processing camera CRE driver operations with improper handling of buffer limits during hardware update preparation.
CVE-2026-25270
Medium · 6.7
CWE-787 Oct 6, 2026
Out-of-bounds Write in Camera Driver
Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver.
CVE-2026-25269
Medium · 6.7
CWE-787 Oct 6, 2026
Out-of-bounds Write in Camera Driver
Memory corruption when processing camera requests with excessive batch and IO buffer configurations exceeds allocated memory size.
CVE-2026-25267
High · 7.8
CWE-862 Oct 6, 2026
Missing Authorization in Core
Memory corruption when non-secure loader rewrites page tables before secure memory initialization.
CVE-2026-25263
Medium · 6.6
CWE-787 Oct 6, 2026
Out of Bounds write in Linux Camera
Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters.
CVE-2026-25262
Medium · 6.3
CWE-123 Sep 22, 2026
Write-what-where Condition in Primary Bootloader
Memory corruption while processing a crafted ELF file in the Primary Bootloader.
CVE-2026-25255
High · 7.8
CWE-749 Sep 22, 2026
Exposed function in Qualcomm Package Manager and Qualcomm Software Center.
Exposed dangerous function lead to privilege escalation via gRPC server.
CVE-2025-59607
High · 7.8
CWE-822 Sep 17, 2026
Untrusted Pointer Dereference in Windows Compute
Memory Corruption when copying large input data exceeds normal allocation limits.
CVE-2026-25277
High · 8.8
CWE-120 Jun 1, 2026
Buffer Copy Without Checking Size of Input in Secure Processor
Memory corruption while using Strongbox due to buffer overflow.
CVE-2026-25276
High · 8.8
CWE-129 Jun 1, 2026
Improper Validation of Array Index in Secure Processor
Memory corruption while using Strongbox due to missing bounds check.
CVE-2026-25260
High · 7.0
CWE-367 Jun 1, 2026
Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service
Memory Corruption when accessing shared buffers without validation of concurrent user-mode input modifications.
CVE-2026-25259
High · 7.8
CWE-787 Jun 1, 2026
Out-of-bounds Write in DSP Service
Memory corruption while processing multiple IOCTL command for escape operations.
CVE-2026-25258
High · 7.8
CWE-125 Jun 1, 2026
Out-of-bounds Read in DSP Service
Memory corruption while processing IOCTL calls for escape operations.
CVE-2026-24092
High · 7.2
CWE-1286 Jun 1, 2026
Improper Validation of Syntactic Correctness of Input in Display
Memory Corruption when processing fastboot commands to set display mode.
CVE-2026-24091
High · 7.2
CWE-1286 Jun 1, 2026
Improper Validation of Syntactic Correctness of Input in Display
Memory corruption while processing fastboot commands with improperly formatted input.