Vulnerabilidades de Qualcomm
CVEs publicadas que afetam produtos de Qualcomm: 207 registro(s), com severidade, exploração e correções.
Snapdragon 202Fastconnect 7800 Firmware 171Wcd9380 Firmware 163Wcd9385 Firmware 163Wsa8845 Firmware 161Wsa8840 Firmware 161Wsa8845h Firmware 161Fastconnect 6900 Firmware 159Wsa8835 Firmware 146Wsa8830 Firmware 144Wcd9370 Firmware 137Wcd9375 Firmware 136Fastconnect 6700 Firmware 128Wsa8810 Firmware 122Wsa8815 Firmware 122Wsa8832 Firmware 119Wcn3988 Firmware 113Wcn3950 Firmware 111Video Collaboration Vc3 Platform Firmware 107Qcm6490 Firmware 105Sc8380xp Firmware 103Wcd9395 Firmware 103Qcm5430 Firmware 102Fastconnect 6200 Firmware 100Qca6595au Firmware 100Qca6698aq Firmware 99Qca6797aq Firmware 96Wcd9378 Firmware 95Qca6391 Firmware 95Wcn7861 Firmware 93Qca6696 Firmware 92Wcn6755 Firmware 90Qca6574au Firmware 88Wcn7881 Firmware 87Wcn7860 Firmware 86Sa9000p Firmware 84Qam8255p Firmware 83Qca6595 Firmware 83Sa8255p Firmware 83Wcd9390 Firmware 82
CVE-2025-47331
Média · 6.1
CWE-126 07/01/2026
Buffer Over-read in Video
Information disclosure while processing a firmware event.
CVE-2025-47330
Média · 5.5
CWE-126 07/01/2026
Buffer Over-read in Video
Transient DOS while parsing video packets received from the video firmware.
CVE-2025-47387
Alta · 7.8
CWE-822 18/12/2025
Untrusted Pointer Dereference in Camera
Memory Corruption when processing IOCTLs for JPEG data without verification.
CVE-2025-47382
Alta · 7.8
CWE-863 18/12/2025
Incorrect Authorization in Boot
Memory corruption while loading an invalid firmware in boot loader.
CVE-2025-47372
Alta · 8.4
CWE-787 18/12/2025
Buffer Copy Without Checking Size of Input in Boot
Memory Corruption when a corrupted ELF image with an oversized file size is read into a buffer without authentication.
CVE-2025-47350
Alta · 7.8
CWE-787 18/12/2025
Use After Free in DSP Service
Memory corruption while handling concurrent memory mapping and unmapping requests from a user-space application.
CVE-2025-47325
Média · 5.5
CWE-822 18/12/2025
Untrusted Pointer Dereference in TZ Firmware
Information disclosure while processing system calls with invalid parameters.
CVE-2025-47323
Alta · 7.8
CWE-190 18/12/2025
Integer Overflow or Wraparound in Audio
Memory corruption while routing GPR packets between user and root when handling large data packet.
CVE-2025-47322
Alta · 7.8
CWE-416 18/12/2025
Use After Free in Automotive Linux OS
Memory corruption while handling IOCTL calls to set mode.
CVE-2025-47321
Alta · 7.8
CWE-120 18/12/2025
Buffer Copy Without Checking Size of Input in Core Services
Memory corruption while copying packets received from unix clients.
CVE-2025-47320
Alta · 7.8
CWE-787 18/12/2025
Out-of-bounds Write in Audio
Memory corruption while processing MFC channel configuration during music playback.
CVE-2025-47319
Média · 6.7
CWE-497 18/12/2025
Exposure of Sensitive System Information to an Unauthorized Control Sphere in HLOS
Information disclosure while exposing internal TA-to-TA communication APIs to HLOS
CVE-2025-27063
Alta · 7.8
CWE-416 18/12/2025
Use After Free in Video
Memory corruption during video playback when video session open fails with time out error.
CVE-2025-47370
Média · 6.5
CWE-617 04/11/2025
Reachable Assertion in BT Controller
Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan.
CVE-2025-47368
Alta · 7.8
CWE-126 04/11/2025
Buffer Over-read in DSP Service
Memory corruption when dereferencing an invalid userspace address in a user buffer during MCDM IOCTL processing.
CVE-2025-47367
Alta · 7.8
CWE-787 04/11/2025
Out-of-bounds Write in WinBlast Driver
Memory corruption while accessing a buffer during IOCTL processing.
CVE-2025-47365
Alta · 7.8
CWE-190 04/11/2025
Integer Overflow or Wraparound in Automotive Platform
Memory corruption while processing large input data from a remote source via a communication interface.
CVE-2025-47362
Média · 6.1
CWE-126 04/11/2025
Buffer Over-read in Automotive Software platform based on QNX
Information disclosure while processing message from client with invalid payload.
CVE-2025-47361
Alta · 7.8
CWE-129 04/11/2025
Improper Validation of Array Index in Automotive Software platform based on QNX
Memory corruption when triggering a subsystem crash with an out-of-range identifier.
CVE-2025-47360
Alta · 7.8
CWE-121 04/11/2025
Stack-based Buffer Overflow in Automotive Software platform based on QNX
Memory corruption while processing client message during device management.
CVE-2025-47357
Alta · 7.8
CWE-306 04/11/2025
Missing Authentication for Critical Function in SMSS
Information Disclosure when a user-level driver performs QFPROM read or write operations on Fuse regions.
CVE-2025-47353
Alta · 7.8
CWE-749 04/11/2025
Exposed Dangerous Method or Function in Automotive Software platform based on QNX
Memory corruption while processing request sent from GVM.
CVE-2025-47352
Alta · 7.8
CWE-129 04/11/2025
Improper Validation of Array Index in Audio
Memory corruption while processing audio streaming operations.
CVE-2025-27074
Alta · 7.8
CWE-131 04/11/2025
Incorrect Calculation of Buffer Size in SCE-Mink
Memory corruption while processing a GP command response.
CVE-2025-27070
Alta · 7.8
CWE-787 04/11/2025
Out-of-bounds Write in Windows Compute
Memory corruption while performing encryption and decryption commands.