Qualcomm vulnerabilities
Published CVEs affecting Qualcomm products: 207 record(s), with severity, exploitation and fixes.
Snapdragon 202Fastconnect 7800 Firmware 171Wcd9380 Firmware 163Wcd9385 Firmware 163Wsa8845 Firmware 161Wsa8840 Firmware 161Wsa8845h Firmware 161Fastconnect 6900 Firmware 159Wsa8835 Firmware 146Wsa8830 Firmware 144Wcd9370 Firmware 137Wcd9375 Firmware 136Fastconnect 6700 Firmware 128Wsa8810 Firmware 122Wsa8815 Firmware 122Wsa8832 Firmware 119Wcn3988 Firmware 113Wcn3950 Firmware 111Video Collaboration Vc3 Platform Firmware 107Qcm6490 Firmware 105Sc8380xp Firmware 103Wcd9395 Firmware 103Qcm5430 Firmware 102Fastconnect 6200 Firmware 100Qca6595au Firmware 100Qca6698aq Firmware 99Qca6797aq Firmware 96Wcd9378 Firmware 95Qca6391 Firmware 95Wcn7861 Firmware 93Qca6696 Firmware 92Wcn6755 Firmware 90Qca6574au Firmware 88Wcn7881 Firmware 87Wcn7860 Firmware 86Sa9000p Firmware 84Qam8255p Firmware 83Qca6595 Firmware 83Sa8255p Firmware 83Wcd9390 Firmware 82
CVE-2025-47331
Medium · 6.1
CWE-126 Jan 7, 2026
Buffer Over-read in Video
Information disclosure while processing a firmware event.
CVE-2025-47330
Medium · 5.5
CWE-126 Jan 7, 2026
Buffer Over-read in Video
Transient DOS while parsing video packets received from the video firmware.
CVE-2025-47387
High · 7.8
CWE-822 Dec 18, 2025
Untrusted Pointer Dereference in Camera
Memory Corruption when processing IOCTLs for JPEG data without verification.
CVE-2025-47382
High · 7.8
CWE-863 Dec 18, 2025
Incorrect Authorization in Boot
Memory corruption while loading an invalid firmware in boot loader.
CVE-2025-47372
High · 8.4
CWE-787 Dec 18, 2025
Buffer Copy Without Checking Size of Input in Boot
Memory Corruption when a corrupted ELF image with an oversized file size is read into a buffer without authentication.
CVE-2025-47350
High · 7.8
CWE-787 Dec 18, 2025
Use After Free in DSP Service
Memory corruption while handling concurrent memory mapping and unmapping requests from a user-space application.
CVE-2025-47325
Medium · 5.5
CWE-822 Dec 18, 2025
Untrusted Pointer Dereference in TZ Firmware
Information disclosure while processing system calls with invalid parameters.
CVE-2025-47323
High · 7.8
CWE-190 Dec 18, 2025
Integer Overflow or Wraparound in Audio
Memory corruption while routing GPR packets between user and root when handling large data packet.
CVE-2025-47322
High · 7.8
CWE-416 Dec 18, 2025
Use After Free in Automotive Linux OS
Memory corruption while handling IOCTL calls to set mode.
CVE-2025-47321
High · 7.8
CWE-120 Dec 18, 2025
Buffer Copy Without Checking Size of Input in Core Services
Memory corruption while copying packets received from unix clients.
CVE-2025-47320
High · 7.8
CWE-787 Dec 18, 2025
Out-of-bounds Write in Audio
Memory corruption while processing MFC channel configuration during music playback.
CVE-2025-47319
Medium · 6.7
CWE-497 Dec 18, 2025
Exposure of Sensitive System Information to an Unauthorized Control Sphere in HLOS
Information disclosure while exposing internal TA-to-TA communication APIs to HLOS
CVE-2025-27063
High · 7.8
CWE-416 Dec 18, 2025
Use After Free in Video
Memory corruption during video playback when video session open fails with time out error.
CVE-2025-47370
Medium · 6.5
CWE-617 Nov 4, 2025
Reachable Assertion in BT Controller
Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan.
CVE-2025-47368
High · 7.8
CWE-126 Nov 4, 2025
Buffer Over-read in DSP Service
Memory corruption when dereferencing an invalid userspace address in a user buffer during MCDM IOCTL processing.
CVE-2025-47367
High · 7.8
CWE-787 Nov 4, 2025
Out-of-bounds Write in WinBlast Driver
Memory corruption while accessing a buffer during IOCTL processing.
CVE-2025-47365
High · 7.8
CWE-190 Nov 4, 2025
Integer Overflow or Wraparound in Automotive Platform
Memory corruption while processing large input data from a remote source via a communication interface.
CVE-2025-47362
Medium · 6.1
CWE-126 Nov 4, 2025
Buffer Over-read in Automotive Software platform based on QNX
Information disclosure while processing message from client with invalid payload.
CVE-2025-47361
High · 7.8
CWE-129 Nov 4, 2025
Improper Validation of Array Index in Automotive Software platform based on QNX
Memory corruption when triggering a subsystem crash with an out-of-range identifier.
CVE-2025-47360
High · 7.8
CWE-121 Nov 4, 2025
Stack-based Buffer Overflow in Automotive Software platform based on QNX
Memory corruption while processing client message during device management.
CVE-2025-47357
High · 7.8
CWE-306 Nov 4, 2025
Missing Authentication for Critical Function in SMSS
Information Disclosure when a user-level driver performs QFPROM read or write operations on Fuse regions.
CVE-2025-47353
High · 7.8
CWE-749 Nov 4, 2025
Exposed Dangerous Method or Function in Automotive Software platform based on QNX
Memory corruption while processing request sent from GVM.
CVE-2025-47352
High · 7.8
CWE-129 Nov 4, 2025
Improper Validation of Array Index in Audio
Memory corruption while processing audio streaming operations.
CVE-2025-27074
High · 7.8
CWE-131 Nov 4, 2025
Incorrect Calculation of Buffer Size in SCE-Mink
Memory corruption while processing a GP command response.
CVE-2025-27070
High · 7.8
CWE-787 Nov 4, 2025
Out-of-bounds Write in Windows Compute
Memory corruption while performing encryption and decryption commands.