Read the docs

Qualcomm

Records3060All Threatist records
Exploited (KEV)12In CISA KEV
CVSS critical678CVSS 9.0–10.0
CVSS high1984CVSS 7.0–8.9

Exploited now

Qualcomm records in CISA KEV
TI-2026-17287 Qualcomm Multiple Chipsets Memory Corruption Vulnerability Priority CRITICAL 93KEV 2026-03-03TI-2025-15440 Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability Priority CRITICAL 96KEV 2025-06-03TI-2025-15441 Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability Priority CRITICAL 96KEV 2025-06-03TI-2025-19908 Qualcomm Multiple Chipsets Use-After-Free Vulnerability Priority CRITICAL 92KEV 2025-06-03TI-2024-28736 Qualcomm Multiple Chipsets Use-After-Free Vulnerability Priority CRITICAL 93KEV 2024-10-08TI-2022-06419 Qualcomm Multiple Chipsets Use-After-Free Vulnerability Priority CRITICAL 96KEV 2023-12-05

Components

Products in the NVD configurations · select one to filter the records
Wcd9380 Firmware 1213 records CRITICAL Wsa8835 Firmware 1141 records CRITICAL Wsa8830 Firmware 1140 records CRITICAL Wcd9385 Firmware 1123 records CRITICAL Qca6574au Firmware 1086 records CRITICAL Wcd9370 Firmware 1038 records CRITICAL Wsa8810 Firmware 1021 records CRITICAL Wsa8815 Firmware 1017 records CRITICAL

Records

15 records in 215 Firmware · all components

TI-2023-08020 CVE-2023-21631 · GHSA-ccv7-j4hv-3wgx

Improper Input Validation in Modem

Priority MEDIUM 48

Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00362 Published 2023-07-04 No fix listed CWE-20
TI-2023-16207 CVE-2023-33019 · GHSA-9pxw-85r8-pc8f

Improper Authorization in WLAN Host

Priority LOW 39

Transient DOS in WLAN Host while doing channel switch announcement (CSA), when a mobile station receives invalid channel in CSA IE.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00354 Published 2023-09-05 No fix listed CWE-285
TI-2023-08842 CVE-2023-22667 · GHSA-rfq5-8cc9-h89m

Integer Overflow or Wraparound in Audio

Priority LOW 37

Memory Corruption in Audio while allocating the ion buffer during the music playback.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00116 Published 2023-07-04 No fix listed CWE-190
TI-2025-15388 CVE-2025-21424 · GHSA-q98w-g5j8-3x6h

Use After Free in NPU

Priority LOW 35

Memory corruption while calling the NPU driver APIs concurrently.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00117 Published 2025-03-03 No fix listed CWE-416
TI-2024-35492 CVE-2024-53014 · GHSA-32hq-jmxj-p7pr

Improper Validation of Array Index in Audio

Priority LOW 35

Memory corruption may occur while validating ports and channels in Audio driver.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00124 Published 2025-03-03 No fix listed CWE-129
TI-2023-16208 CVE-2023-33020 · GHSA-pw8j-xxwv-qpr8

Improper Authorization in WLAN Host

Priority LOW 33

Transient DOS in WLAN Host when an invalid channel (like channel out of range) is received in STA during CSA IE.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00354 Published 2023-09-05 No fix listed CWE-285
TI-2023-13106 CVE-2023-28575 · GHSA-32rf-9mpv-rfcv

Multiple Type Confusion Vulnerability

Priority LOW 33

The cam_get_device_priv function does not check the type of handle being returned (device/session/link).

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00122 Published 2023-08-08 No fix listed CWE-823
TI-2023-10353 CVE-2023-24854 · GHSA-r44j-rc5h-vr2f

Stack-based Buffer Overflow in WLAN HOST

Priority LOW 33

Memory Corruption in WLAN HOST while parsing QMI WLAN Firmware response message.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00116 Published 2023-07-04 No fix listed CWE-121
TI-2023-08647 CVE-2023-22387 · GHSA-6r2c-g7f8-6rfj

Use of Out-of-range Pointer Offset in Qualcomm IPC

Priority LOW 33

Arbitrary memory overwrite when VM gets compromised in TX write leading to Memory Corruption.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00116 Published 2023-07-04 No fix listed CWE-823
TI-2019-01860 CVE-2019-2248 · GHSA-j52m-wj96-vpr2

Memory corruption in Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon…

Priority LOW 33

Buffer overflow can occur if invalid header tries to overwrite the existing buffer which fix size allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial…

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00197 Published 2019-05-24 No fix listed CWE-119
TI-2018-08545 CVE-2018-11922 · GHSA-92v2-fpqg-mwfv

Configurations in Android Build

Priority LOW 32

Wrong configuration in Touch Pal application can collect user behavior data without awareness by the user.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00228 Published 2024-11-26 No fix listed CWE-16
TI-2023-08018 CVE-2023-21629 · GHSA-wc7f-hjq2-jvv5

Double Free in Modem

Priority LOW 31

Memory Corruption in Modem due to double free while parsing the PKCS15 sim files.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00186 Published 2023-07-04 No fix listed CWE-415
TI-2024-25676 CVE-2024-38426 · GHSA-24vm-48r8-7jq6

Improper Authentication in Modem

Priority LOW 24

While processing the authentication message in UE, improper authentication may lead to information disclosure.

CVSS 3.1MEDIUM 5.4 Adjacent network No auth No interaction EPSS 0.0027 Published 2025-03-03 No fix listed CWE-287
Open these records in search →