Qualcomm vulnerabilities
Published CVEs affecting Qualcomm products: 207 record(s), with severity, exploitation and fixes.
Snapdragon 202Fastconnect 7800 Firmware 171Wcd9380 Firmware 163Wcd9385 Firmware 163Wsa8845 Firmware 161Wsa8840 Firmware 161Wsa8845h Firmware 161Fastconnect 6900 Firmware 159Wsa8835 Firmware 146Wsa8830 Firmware 144Wcd9370 Firmware 137Wcd9375 Firmware 136Fastconnect 6700 Firmware 128Wsa8810 Firmware 122Wsa8815 Firmware 122Wsa8832 Firmware 119Wcn3988 Firmware 113Wcn3950 Firmware 111Video Collaboration Vc3 Platform Firmware 107Qcm6490 Firmware 105Sc8380xp Firmware 103Wcd9395 Firmware 103Qcm5430 Firmware 102Fastconnect 6200 Firmware 100Qca6595au Firmware 100Qca6698aq Firmware 99Qca6797aq Firmware 96Wcd9378 Firmware 95Qca6391 Firmware 95Wcn7861 Firmware 93Qca6696 Firmware 92Wcn6755 Firmware 90Qca6574au Firmware 88Wcn7881 Firmware 87Wcn7860 Firmware 86Sa9000p Firmware 84Qam8255p Firmware 83Qca6595 Firmware 83Sa8255p Firmware 83Wcd9390 Firmware 82
CVE-2025-47400
High · 7.1
CWE-126 Apr 6, 2026
Buffer Over-read in Computer Vision
Cryptographic issue while copying data to a destination buffer without validating its size.
CVE-2025-47392
High · 8.8
CWE-190 Apr 6, 2026
Integer Overflow or Wraparound in GPS
Memory corruption when decoding corrupted satellite data files with invalid signature offsets.
CVE-2025-47391
High · 7.8
CWE-121 Apr 6, 2026
Stack-based Buffer Overflow in Camera Driver
Memory corruption while processing a frame request from user.
CVE-2025-47390
High · 7.8
CWE-126 Apr 6, 2026
Buffer Over-read in Camera
Memory corruption while preprocessing IOCTL request in JPEG driver.
CVE-2025-47389
High · 7.8
CWE-120 Apr 6, 2026
Buffer Copy Without Checking Size of Input in Automotive Platform
Memory corruption when buffer copy operation fails due to integer overflow during attestation report generation.
CVE-2025-47374
Medium · 6.5
CWE-416 Apr 6, 2026
Use After Free in Camera Driver
Memory Corruption when accessing freed memory due to concurrent fence deregistration and signal handling.
CVE-2026-21385
High · 7.8
KEV High · 57 Public exploit CWE-190 Mar 2, 2026
Qualcomm Multiple Chipsets Memory Corruption Vulnerability
Memory corruption while using alignments for memory allocation.
CVE-2025-59603
High · 7.8
CWE-787 Mar 2, 2026
Out-of-bounds Write in Computer Vision
Memory Corruption when processing invalid user address with nonstandard buffer address.
CVE-2025-59600
High · 7.8
CWE-126 Mar 2, 2026
Buffer Over-read in Graphics
Memory Corruption when adding user-supplied data without checking available buffer space.
CVE-2025-47386
High · 7.8
CWE-416 Mar 2, 2026
Use After Free in Automotive Audio
Memory Corruption while invoking IOCTL calls when concurrent access to shared buffer occurs.
CVE-2025-47385
High · 7.8
CWE-1262 Mar 2, 2026
Improper Access Control for Register Interface in SCE-Mink
Memory Corruption when accessing trusted execution environment without proper privilege check.
CVE-2025-47384
Medium · 6.5
CWE-617 Mar 2, 2026
Reachable Assertion in FW
Transient DOS when MAC configures config id greater than supported maximum value.
CVE-2025-47383
High · 7.2
CWE-325 Mar 2, 2026
Missing Cryptographic Step in Data Modem
Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE.
CVE-2025-47381
High · 7.8
CWE-416 Mar 2, 2026
Use After Free in Automotive Audio
Memory Corruption while processing IOCTL calls when concurrent access to shared buffer occurs.
CVE-2025-47379
High · 7.8
CWE-416 Mar 2, 2026
Use After Free in Automotive Audio
Memory Corruption when concurrent access to shared buffer occurs due to improper synchronization between assignment and deallocation of buffer resources.
CVE-2025-47378
High · 7.1
CWE-497 Mar 2, 2026
Exposure of Sensitive System Information to an Unauthorized Control Sphere in HLOS
Cryptographic Issue when a shared VM reference allows HLOS to boot loader and access cert chain.
CVE-2025-47377
High · 7.8
CWE-416 Mar 2, 2026
Use After Free in Automotive Audio
Memory Corruption when accessing a buffer after it has been freed while processing IOCTL calls.
CVE-2025-47376
High · 7.8
CWE-416 Mar 2, 2026
Use After Free in Automotive Audio
Memory Corruption when concurrent access to shared buffer occurs during IOCTL calls.
CVE-2025-47375
High · 7.8
CWE-416 Mar 2, 2026
Use After Free in Automotive Audio
Memory corruption while handling different IOCTL calls from the user-space simultaneously.
CVE-2025-47373
High · 7.8
CWE-787 Mar 2, 2026
Out-of-bounds Write in Automotive
Memory Corruption when accessing buffers with invalid length during TA invocation.
CVE-2025-47371
Medium · 6.5
CWE-617 Mar 2, 2026
Reachable Assertion in Modem
Transient DOS when an LTE RLC packet with invalid TB is received by UE.
CVE-2025-47402
Medium · 6.5
CWE-125 Feb 2, 2026
Buffer Over-read in WLAN Firmware
Transient DOS when processing a received frame with an excessively large authentication information element.
CVE-2025-47399
High · 7.8
CWE-120 Feb 2, 2026
Buffer Copy Without Checking Size of Input in Camera
Memory Corruption while processing IOCTL call to update sensor property settings with invalid input parameters.
CVE-2025-47398
High · 7.8
CWE-416 Feb 2, 2026
Use After Free in Graphics
Memory Corruption while deallocating graphics processing unit memory buffers due to improper handling of memory pointers.
CVE-2025-47397
High · 7.8
CWE-401 Feb 2, 2026
Improper Release of Memory Before Removing Last Reference in Graphics
Memory Corruption when initiating GPU memory mapping using scatter-gather lists due to unchecked IOMMU mapping errors.