Vulnerabilidades de Qualcomm

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Qualcomm: 207 registro(s), com severidade, exploração e correções.

Snapdragon 202 Fastconnect 7800 Firmware 171 Wcd9380 Firmware 163 Wcd9385 Firmware 163 Wsa8845 Firmware 161 Wsa8840 Firmware 161 Wsa8845h Firmware 161 Fastconnect 6900 Firmware 159 Wsa8835 Firmware 146 Wsa8830 Firmware 144 Wcd9370 Firmware 137 Wcd9375 Firmware 136 Fastconnect 6700 Firmware 128 Wsa8810 Firmware 122 Wsa8815 Firmware 122 Wsa8832 Firmware 119 Wcn3988 Firmware 113 Wcn3950 Firmware 111 Video Collaboration Vc3 Platform Firmware 107 Qcm6490 Firmware 105 Sc8380xp Firmware 103 Wcd9395 Firmware 103 Qcm5430 Firmware 102 Fastconnect 6200 Firmware 100 Qca6595au Firmware 100 Qca6698aq Firmware 99 Qca6797aq Firmware 96 Wcd9378 Firmware 95 Qca6391 Firmware 95 Wcn7861 Firmware 93 Qca6696 Firmware 92 Wcn6755 Firmware 90 Qca6574au Firmware 88 Wcn7881 Firmware 87 Wcn7860 Firmware 86 Sa9000p Firmware 84 Qam8255p Firmware 83 Qca6595 Firmware 83 Sa8255p Firmware 83 Wcd9390 Firmware 82

Somente exploradas (KEV) →

CVE-2025-27064 Média · 6.1 CWE-126 04/11/2025

Buffer Over-read in Core Services

Information disclosure while registering commands from clients with diag through diagHal.

CVE-2025-47355 Alta · 7.8 CWE-787 09/10/2025

Out-of-bounds Write in DSP Service

Memory corruption while invoking remote procedure IOCTL calls.

CVE-2025-47354 Alta · 7.8 CWE-416 09/10/2025

Use After Free in DSP Service

Memory corruption while allocating buffers in DSP service.

CVE-2025-47351 Alta · 7.8 CWE-190 09/10/2025

Integer Overflow or Wraparound in DSP Service

Memory corruption while processing user buffers.

CVE-2025-47349 Alta · 7.8 CWE-823 09/10/2025

Use of Out-of-range Pointer Offset in DSP Service

Memory corruption while processing an escape call.

CVE-2025-47347 Alta · 7.8 CWE-121 09/10/2025

Stack-based Buffer Overflow in Automotive Software platform based on QNX

Memory corruption while processing control commands in the virtual memory management interface.

CVE-2025-47342 Alta · 7.1 CWE-416 09/10/2025

Use After Free in BT Controller

Transient DOS may occur when multi-profile concurrency arises with QHS enabled.

CVE-2025-47341 Alta · 7.8 CWE-120 09/10/2025

Buffer Copy Without Checking Size of Input in Camera

memory corruption while processing an image encoding completion event.

CVE-2025-47340 Alta · 7.8 CWE-787 09/10/2025

Out-of-bounds Write in DSP Service

Memory corruption while processing IOCTL call to get the mapping.

CVE-2025-47338 Alta · 7.8 CWE-822 09/10/2025

Untrusted Pointer Dereference in DSP Service

Memory corruption while processing escape commands from userspace.

CVE-2025-27060 Alta · 8.8 CWE-822 09/10/2025

Untrusted Pointer Dereference in TZ Firmware

Memory corruption while performing SCM call with malformed inputs.

CVE-2025-27059 Alta · 8.8 CWE-823 09/10/2025

Use of Out-of-range Pointer Offset in TZ Firmware

Memory corruption while performing SCM call.

CVE-2025-27054 Alta · 7.8 CWE-787 09/10/2025

Out-of-bounds Write in Display

Memory corruption while processing a malformed license file during reboot.

CVE-2025-27053 Alta · 7.8 CWE-131 09/10/2025

Incorrect Calculation of Buffer Size in HLOS

Memory corruption during PlayReady APP usecase while processing TA commands.

CVE-2025-27049 Média · 5.5 CWE-126 09/10/2025

Buffer Over-read in Camera

Transient DOS while processing IOCTL call for image encoding.

CVE-2025-27048 Alta · 7.8 CWE-822 09/10/2025

Untrusted Pointer Dereference in Camera

Memory corruption while processing camera platform driver IOCTL calls.

CVE-2025-27045 Média · 6.1 CWE-126 09/10/2025

Buffer Over-read in Video

Information disclosure while processing batch command execution in Video driver.

CVE-2025-27041 Média · 5.5 CWE-126 09/10/2025

Buffer Over-read in Video

Transient DOS while processing video packets received from video firmware.

CVE-2025-27040 Média · 6.5 CWE-20 09/10/2025

Improper Input Validation in TZ Firmware

Information disclosure may occur while processing the hypervisor log.

CVE-2025-27039 Média · 6.6 CWE-390 09/10/2025

Detection of Error Condition Without Action in Computer Vision

Memory corruption may occur while processing IOCTL call for DMM/WARPNCC CONFIG request.

CVE-2025-21479 Alta · 8.6 KEV Alta · 56 Exploit público CWE-863 03/06/2025

Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability

Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.

CVE-2025-27038 Alta · 7.5 KEV Alta · 50 CWE-416 03/06/2025

Qualcomm Multiple Chipsets Use-After-Free Vulnerability

Memory corruption while rendering graphics using Adreno GPU drivers in Chrome.

CVE-2025-21480 Alta · 8.6 KEV Alta · 47 CWE-863 03/06/2025

Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability

Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.

CVE-2024-43047 Alta · 7.8 KEV Alta · 49 CWE-416 07/10/2024

Qualcomm Multiple Chipsets Use-After-Free Vulnerability

Memory corruption while maintaining memory maps of HLOS memory.

CVE-2023-33106 Alta · 7.8 KEV Alta · 49 CWE-119 05/12/2023

Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability

Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.