Qualcomm vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Qualcomm products: 207 record(s), with severity, exploitation and fixes.

Snapdragon 202 Fastconnect 7800 Firmware 171 Wcd9380 Firmware 163 Wcd9385 Firmware 163 Wsa8845 Firmware 161 Wsa8840 Firmware 161 Wsa8845h Firmware 161 Fastconnect 6900 Firmware 159 Wsa8835 Firmware 146 Wsa8830 Firmware 144 Wcd9370 Firmware 137 Wcd9375 Firmware 136 Fastconnect 6700 Firmware 128 Wsa8810 Firmware 122 Wsa8815 Firmware 122 Wsa8832 Firmware 119 Wcn3988 Firmware 113 Wcn3950 Firmware 111 Video Collaboration Vc3 Platform Firmware 107 Qcm6490 Firmware 105 Sc8380xp Firmware 103 Wcd9395 Firmware 103 Qcm5430 Firmware 102 Fastconnect 6200 Firmware 100 Qca6595au Firmware 100 Qca6698aq Firmware 99 Qca6797aq Firmware 96 Wcd9378 Firmware 95 Qca6391 Firmware 95 Wcn7861 Firmware 93 Qca6696 Firmware 92 Wcn6755 Firmware 90 Qca6574au Firmware 88 Wcn7881 Firmware 87 Wcn7860 Firmware 86 Sa9000p Firmware 84 Qam8255p Firmware 83 Qca6595 Firmware 83 Sa8255p Firmware 83 Wcd9390 Firmware 82

Exploited only (KEV) →

CVE-2025-27064 Medium · 6.1 CWE-126 Nov 4, 2025

Buffer Over-read in Core Services

Information disclosure while registering commands from clients with diag through diagHal.

CVE-2025-47355 High · 7.8 CWE-787 Oct 9, 2025

Out-of-bounds Write in DSP Service

Memory corruption while invoking remote procedure IOCTL calls.

CVE-2025-47354 High · 7.8 CWE-416 Oct 9, 2025

Use After Free in DSP Service

Memory corruption while allocating buffers in DSP service.

CVE-2025-47351 High · 7.8 CWE-190 Oct 9, 2025

Integer Overflow or Wraparound in DSP Service

Memory corruption while processing user buffers.

CVE-2025-47349 High · 7.8 CWE-823 Oct 9, 2025

Use of Out-of-range Pointer Offset in DSP Service

Memory corruption while processing an escape call.

CVE-2025-47347 High · 7.8 CWE-121 Oct 9, 2025

Stack-based Buffer Overflow in Automotive Software platform based on QNX

Memory corruption while processing control commands in the virtual memory management interface.

CVE-2025-47342 High · 7.1 CWE-416 Oct 9, 2025

Use After Free in BT Controller

Transient DOS may occur when multi-profile concurrency arises with QHS enabled.

CVE-2025-47341 High · 7.8 CWE-120 Oct 9, 2025

Buffer Copy Without Checking Size of Input in Camera

memory corruption while processing an image encoding completion event.

CVE-2025-47340 High · 7.8 CWE-787 Oct 9, 2025

Out-of-bounds Write in DSP Service

Memory corruption while processing IOCTL call to get the mapping.

CVE-2025-47338 High · 7.8 CWE-822 Oct 9, 2025

Untrusted Pointer Dereference in DSP Service

Memory corruption while processing escape commands from userspace.

CVE-2025-27060 High · 8.8 CWE-822 Oct 9, 2025

Untrusted Pointer Dereference in TZ Firmware

Memory corruption while performing SCM call with malformed inputs.

CVE-2025-27059 High · 8.8 CWE-823 Oct 9, 2025

Use of Out-of-range Pointer Offset in TZ Firmware

Memory corruption while performing SCM call.

CVE-2025-27054 High · 7.8 CWE-787 Oct 9, 2025

Out-of-bounds Write in Display

Memory corruption while processing a malformed license file during reboot.

CVE-2025-27053 High · 7.8 CWE-131 Oct 9, 2025

Incorrect Calculation of Buffer Size in HLOS

Memory corruption during PlayReady APP usecase while processing TA commands.

CVE-2025-27049 Medium · 5.5 CWE-126 Oct 9, 2025

Buffer Over-read in Camera

Transient DOS while processing IOCTL call for image encoding.

CVE-2025-27048 High · 7.8 CWE-822 Oct 9, 2025

Untrusted Pointer Dereference in Camera

Memory corruption while processing camera platform driver IOCTL calls.

CVE-2025-27045 Medium · 6.1 CWE-126 Oct 9, 2025

Buffer Over-read in Video

Information disclosure while processing batch command execution in Video driver.

CVE-2025-27041 Medium · 5.5 CWE-126 Oct 9, 2025

Buffer Over-read in Video

Transient DOS while processing video packets received from video firmware.

CVE-2025-27040 Medium · 6.5 CWE-20 Oct 9, 2025

Improper Input Validation in TZ Firmware

Information disclosure may occur while processing the hypervisor log.

CVE-2025-27039 Medium · 6.6 CWE-390 Oct 9, 2025

Detection of Error Condition Without Action in Computer Vision

Memory corruption may occur while processing IOCTL call for DMM/WARPNCC CONFIG request.

CVE-2025-21479 High · 8.6 KEV High · 56 Public exploit CWE-863 Jun 3, 2025

Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability

Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.

CVE-2025-27038 High · 7.5 KEV High · 50 CWE-416 Jun 3, 2025

Qualcomm Multiple Chipsets Use-After-Free Vulnerability

Memory corruption while rendering graphics using Adreno GPU drivers in Chrome.

CVE-2025-21480 High · 8.6 KEV High · 47 CWE-863 Jun 3, 2025

Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability

Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.

CVE-2024-43047 High · 7.8 KEV High · 49 CWE-416 Oct 7, 2024

Qualcomm Multiple Chipsets Use-After-Free Vulnerability

Memory corruption while maintaining memory maps of HLOS memory.

CVE-2023-33106 High · 7.8 KEV High · 49 CWE-119 Dec 5, 2023

Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability

Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.