Qualcomm vulnerabilities
Published CVEs affecting Qualcomm products: 207 record(s), with severity, exploitation and fixes.
Snapdragon 202Fastconnect 7800 Firmware 171Wcd9380 Firmware 163Wcd9385 Firmware 163Wsa8845 Firmware 161Wsa8840 Firmware 161Wsa8845h Firmware 161Fastconnect 6900 Firmware 159Wsa8835 Firmware 146Wsa8830 Firmware 144Wcd9370 Firmware 137Wcd9375 Firmware 136Fastconnect 6700 Firmware 128Wsa8810 Firmware 122Wsa8815 Firmware 122Wsa8832 Firmware 119Wcn3988 Firmware 113Wcn3950 Firmware 111Video Collaboration Vc3 Platform Firmware 107Qcm6490 Firmware 105Sc8380xp Firmware 103Wcd9395 Firmware 103Qcm5430 Firmware 102Fastconnect 6200 Firmware 100Qca6595au Firmware 100Qca6698aq Firmware 99Qca6797aq Firmware 96Wcd9378 Firmware 95Qca6391 Firmware 95Wcn7861 Firmware 93Qca6696 Firmware 92Wcn6755 Firmware 90Qca6574au Firmware 88Wcn7881 Firmware 87Wcn7860 Firmware 86Sa9000p Firmware 84Qam8255p Firmware 83Qca6595 Firmware 83Sa8255p Firmware 83Wcd9390 Firmware 82
CVE-2026-21379
High · 7.8
CWE-126 Jul 6, 2026
Buffer Over-read in Windows Compute
Memory Corruption when allocating memory with sizes that exceed the maximum allowed value.
CVE-2026-21370
Medium · 5.3
CWE-787 Jul 6, 2026
Out-of-bounds Write in Camera Driver
Memory Corruption when validating input batch size and buffer plane count exceeds maximum allowed values.
CVE-2026-21369
Medium · 5.3
CWE-787 Jul 6, 2026
Out-of-bounds Write in Camera Driver
Memory Corruption when handling flash commands due to outdated LED count values being used after userspace modification.
CVE-2026-21368
Medium · 5.3
CWE-787 Jul 6, 2026
Out-of-bounds Write in Camera Driver
Memory Corruption when parsing jpeg commands due to unaccounted extra writes to the buffer during validation checks.
CVE-2025-59617
High · 7.3
CWE-416 Jul 6, 2026
Use After Free in Computer Vision
Memory Corruption when processing multiple IOCTL calls with the same buffer file descriptor input.
CVE-2025-59616
High · 7.8
CWE-416 Jul 6, 2026
Use After Free in Computer Vision
Memory Corruption when processing multiple IOCTL calls with the same buffer file descriptor input due to accessing already freed memory.
CVE-2025-59615
High · 7.8
CWE-416 Jul 6, 2026
Use After Free in Computer Vision
Memory Corruption when invoking device input/output control operations for mapping and unmapping persistent memory buffers due to improper synchronization.
CVE-2026-25277
High · 8.8
CWE-120 Jun 1, 2026
Buffer Copy Without Checking Size of Input in Secure Processor
Memory corruption while using Strongbox due to buffer overflow.
CVE-2026-25276
High · 8.8
CWE-129 Jun 1, 2026
Improper Validation of Array Index in Secure Processor
Memory corruption while using Strongbox due to missing bounds check.
CVE-2026-25260
High · 7.0
CWE-367 Jun 1, 2026
Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service
Memory Corruption when accessing shared buffers without validation of concurrent user-mode input modifications.
CVE-2026-25259
High · 7.8
CWE-787 Jun 1, 2026
Out-of-bounds Write in DSP Service
Memory corruption while processing multiple IOCTL command for escape operations.
CVE-2026-25258
High · 7.8
CWE-125 Jun 1, 2026
Out-of-bounds Read in DSP Service
Memory corruption while processing IOCTL calls for escape operations.
CVE-2026-24092
High · 7.2
CWE-1286 Jun 1, 2026
Improper Validation of Syntactic Correctness of Input in Display
Memory Corruption when processing fastboot commands to set display mode.
CVE-2026-24091
High · 7.2
CWE-1286 Jun 1, 2026
Improper Validation of Syntactic Correctness of Input in Display
Memory corruption while processing fastboot commands with improperly formatted input.
CVE-2026-24090
High · 7.1
CWE-306 Jun 1, 2026
Missing Authentication for Critical Function in HLOS
Cryptographic issue while processing partition table entries allows unauthorized modification of boot flow.
CVE-2026-24089
High · 7.2
CWE-1286 Jun 1, 2026
Improper Validation of Syntactic Correctness of Input in Kernel
Memory corruption while processing fastboot commands with invalid input.
CVE-2026-24088
High · 8.2
CWE-306 Jun 1, 2026
Missing Authentication for Critical Function in Boot
Cryptographic Issue while processing a specific partition which allows unauthorized write access to load a customized bootloader.
CVE-2026-24087
High · 7.2
CWE-1286 Jun 1, 2026
Improper Validation of Syntactic Correctness of Input in Kernel
Memory corruption while processing fastboot OEM commands.
CVE-2026-24085
High · 7.2
CWE-121 Jun 1, 2026
Stack-based Buffer Overflow in Display
Memory Corruption when processing display command line information due to improper initialization of a variable.
CVE-2025-59614
Medium · 6.7
CWE-787 Jun 1, 2026
Out-of-bounds Write in Windows Compute
Memory Corruption when sending random number generator command with insufficient output buffer size.
CVE-2025-59613
Medium · 6.7
CWE-121 Jun 1, 2026
Stack-based Buffer Overflow in Windows Compute
Memory Corruption when output buffer size is smaller than input buffer size during data copying operation.
CVE-2025-59612
Medium · 6.7
CWE-121 Jun 1, 2026
Stack-based Buffer Overflow in Windows Compute
Memory corruption in windows drivers while sending incorrect trusted application request
CVE-2025-59611
Medium · 6.7
CWE-787 Jun 1, 2026
Out-of-bounds Write in Core Services
Memory corruption in diagnostic services due to absence of input validation
CVE-2025-59610
Medium · 6.4
CWE-367 Jun 1, 2026
Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver
Memory Corruption when processing IOCTL requests with mismatched API versions due to concurrent modification of user-space buffer.
CVE-2025-59609
Medium · 5.5
CWE-126 Jun 1, 2026
Buffer Over-read in WLAN Host Communication
Information Disclosure when processing advertisement frames with malformed MBSSID elements of insufficient length.