Qualcomm vulnerabilities
Published CVEs affecting Qualcomm products: 207 record(s), with severity, exploitation and fixes.
Snapdragon 202Fastconnect 7800 Firmware 171Wcd9380 Firmware 163Wcd9385 Firmware 163Wsa8845 Firmware 161Wsa8840 Firmware 161Wsa8845h Firmware 161Fastconnect 6900 Firmware 159Wsa8835 Firmware 146Wsa8830 Firmware 144Wcd9370 Firmware 137Wcd9375 Firmware 136Fastconnect 6700 Firmware 128Wsa8810 Firmware 122Wsa8815 Firmware 122Wsa8832 Firmware 119Wcn3988 Firmware 113Wcn3950 Firmware 111Video Collaboration Vc3 Platform Firmware 107Qcm6490 Firmware 105Sc8380xp Firmware 103Wcd9395 Firmware 103Qcm5430 Firmware 102Fastconnect 6200 Firmware 100Qca6595au Firmware 100Qca6698aq Firmware 99Qca6797aq Firmware 96Wcd9378 Firmware 95Qca6391 Firmware 95Wcn7861 Firmware 93Qca6696 Firmware 92Wcn6755 Firmware 90Qca6574au Firmware 88Wcn7881 Firmware 87Wcn7860 Firmware 86Sa9000p Firmware 84Qam8255p Firmware 83Qca6595 Firmware 83Sa8255p Firmware 83Wcd9390 Firmware 82
CVE-2023-33107
High · 7.8
KEV High · 55 Public exploit CWE-190 Dec 5, 2023
Qualcomm Multiple Chipsets Integer Overflow Vulnerability
Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.
CVE-2023-33063
High · 7.8
KEV High · 49 CWE-416 Dec 5, 2023
Qualcomm Multiple Chipsets Use-After-Free Vulnerability
Memory corruption in DSP Services during a remote call from HLOS to DSP.
CVE-2022-22071
High · 7.8
KEV High · 46 CWE-416 Jun 14, 2022
Qualcomm Multiple Chipsets Use-After-Free Vulnerability
Possible use after free when process shell memory is freed using IOCTL munmap call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music
CVE-2020-11261
High · 7.8
KEV High · 52 CWE-787 Jun 9, 2021
Qualcomm Multiple Chipsets Improper Input Validation Vulnerability
Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-1905
High · 7.8
KEV High · 58 Public exploit CWE-416 May 7, 2021
Qualcomm Multiple Chipsets Use-After-Free Vulnerability
Possible use after free due to improper handling of memory mapping of multiple processes simultaneously. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-1906
Medium · 5.5
KEV May 7, 2021
Qualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerability
Improper handling of address deregistration on failure can lead to new GPU address allocation failure. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2020-3702
Medium · 6.5
CWE-319 Sep 8, 2020
Cleartext Transmission of Sensitive Information in Qualcomm Apq8053 Firmware
u'Specifically timed and handcrafted traffic can cause internal errors in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for a discrete set of traffic' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8053, IPQ4019, IPQ8064, MSM8909W, MSM8996AU, QCA9531, QCN5502, QCS405, SDX20, SM6150, SM7150