Qualcomm vulnerabilities
Published CVEs affecting Qualcomm products: 207 record(s), with severity, exploitation and fixes.
Snapdragon 202Fastconnect 7800 Firmware 171Wcd9380 Firmware 163Wcd9385 Firmware 163Wsa8845 Firmware 161Wsa8840 Firmware 161Wsa8845h Firmware 161Fastconnect 6900 Firmware 159Wsa8835 Firmware 146Wsa8830 Firmware 144Wcd9370 Firmware 137Wcd9375 Firmware 136Fastconnect 6700 Firmware 128Wsa8810 Firmware 122Wsa8815 Firmware 122Wsa8832 Firmware 119Wcn3988 Firmware 113Wcn3950 Firmware 111Video Collaboration Vc3 Platform Firmware 107Qcm6490 Firmware 105Sc8380xp Firmware 103Wcd9395 Firmware 103Qcm5430 Firmware 102Fastconnect 6200 Firmware 100Qca6595au Firmware 100Qca6698aq Firmware 99Qca6797aq Firmware 96Wcd9378 Firmware 95Qca6391 Firmware 95Wcn7861 Firmware 93Qca6696 Firmware 92Wcn6755 Firmware 90Qca6574au Firmware 88Wcn7881 Firmware 87Wcn7860 Firmware 86Sa9000p Firmware 84Qam8255p Firmware 83Qca6595 Firmware 83Sa8255p Firmware 83Wcd9390 Firmware 82
CVE-2025-47366
High · 7.8
CWE-749 Feb 2, 2026
Exposed Dangerous Method or Function in HLOS
Cryptographic issue when a Trusted Zone with outdated code is triggered by a HLOS providing incorrect input.
CVE-2025-47364
High · 7.8
CWE-190 Feb 2, 2026
Integer Overflow or Wraparound in Automotive
Memory corruption while calculating offset from partition start point.
CVE-2025-47363
High · 7.8
CWE-190 Feb 2, 2026
Integer Overflow or Wraparound in Automotive
Memory corruption when calculating oversized partition sizes without proper checks.
CVE-2025-47359
High · 7.8
CWE-416 Feb 2, 2026
Use After Free in Secure Processor
Memory Corruption when multiple threads simultaneously access a memory free API.
CVE-2025-47358
High · 7.8
CWE-416 Feb 2, 2026
Use After Free in Secure Processor
Memory Corruption when user space address is modified and passed to mem_free API, causing kernel memory to be freed inadvertently.
CVE-2025-47396
High · 7.8
CWE-415 Jan 7, 2026
Double Free in Graphics
Memory corruption occurs when a secure application is launched on a device with insufficient memory.
CVE-2025-47395
Medium · 6.5
CWE-126 Jan 7, 2026
Buffer Over-read in WLAN Firmware
Transient DOS while parsing a WLAN management frame with a Vendor Specific Information Element.
CVE-2025-47394
High · 7.8
CWE-120 Jan 7, 2026
Buffer Copy Without Checking Size of Input in DSP Service
Memory corruption when copying overlapping buffers during memory operations due to incorrect offset calculations.
CVE-2025-47393
High · 7.8
CWE-129 Jan 7, 2026
Improper Validation of Array Index in Automotive Linux OS
Memory corruption when accessing resources in kernel driver.
CVE-2025-47388
High · 7.8
CWE-120 Jan 7, 2026
Buffer Copy without Checking Size of Input in DSP Service
Memory corruption while passing pages to DSP with an unaligned starting address.
CVE-2025-47380
High · 7.8
CWE-822 Jan 7, 2026
Untrusted Pointer Dereference in Camera
Memory corruption while preprocessing IOCTLs in sensors.
CVE-2025-47369
Medium · 5.5
CWE-200 Jan 7, 2026
Information Exposure in Computer Vision
Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID.
CVE-2025-47356
High · 7.8
CWE-415 Jan 7, 2026
Double Free in Video
Memory Corruption when multiple threads concurrently access and modify shared resources.
CVE-2025-47348
High · 7.8
CWE-457 Jan 7, 2026
Use of Uninitialized Variable in HLOS
Memory corruption while processing identity credential operations in the trusted application.
CVE-2025-47346
High · 7.8
CWE-787 Jan 7, 2026
Out-of-bounds Write in HLOS
Memory corruption while processing a secure logging command in the trusted application.
CVE-2025-47345
High · 8.4
CWE-323 Jan 7, 2026
Reusing a Nonce, Key Pair in Encryption in Automotive Platform
Cryptographic issue may occur while encrypting license data.
CVE-2025-47344
Medium · 6.4
CWE-367 Jan 7, 2026
Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver
Memory corruption while handling sensor utility operations.
CVE-2025-47343
High · 7.8
CWE-822 Jan 7, 2026
Untrusted Pointer Dereference in Video
Memory corruption while processing a video session to set video parameters.
CVE-2025-47339
High · 7.8
CWE-416 Jan 7, 2026
Use After Free in HLOS
Memory corruption while deinitializing a HDCP session.
CVE-2025-47337
Medium · 6.7
CWE-416 Jan 7, 2026
Use After Free in Camera Driver
Memory corruption while accessing a synchronization object during concurrent operations.
CVE-2025-47336
Medium · 6.7
CWE-416 Jan 7, 2026
Use After Free in Camera Driver
Memory corruption while performing sensor register read operations.
CVE-2025-47335
Medium · 6.7
CWE-120 Jan 7, 2026
Buffer Copy Without Checking Size of Input in Camera Driver
Memory corruption while parsing clock configuration data for a specific hardware type.
CVE-2025-47334
Medium · 6.7
CWE-120 Jan 7, 2026
Buffer Copy Without Checking Size of Input in Camera Driver
Memory corruption while processing shared command buffer packet between camera userspace and kernel.
CVE-2025-47333
Medium · 6.6
CWE-416 Jan 7, 2026
Use After Free in HLOS
Memory corruption while handling buffer mapping operations in the cryptographic driver.
CVE-2025-47332
Medium · 6.4
CWE-367 Jan 7, 2026
Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver
Memory corruption while processing a config call from userspace.