Read the docs

Qualcomm

Records3060All Threatist records
Exploited (KEV)12In CISA KEV
CVSS critical678CVSS 9.0–10.0
CVSS high1984CVSS 7.0–8.9

Exploited now

Qualcomm records in CISA KEV
TI-2026-17287 Qualcomm Multiple Chipsets Memory Corruption Vulnerability Priority CRITICAL 93KEV 2026-03-03TI-2025-15440 Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability Priority CRITICAL 96KEV 2025-06-03TI-2025-15441 Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability Priority CRITICAL 96KEV 2025-06-03TI-2025-19908 Qualcomm Multiple Chipsets Use-After-Free Vulnerability Priority CRITICAL 92KEV 2025-06-03TI-2024-28736 Qualcomm Multiple Chipsets Use-After-Free Vulnerability Priority CRITICAL 93KEV 2024-10-08TI-2022-06419 Qualcomm Multiple Chipsets Use-After-Free Vulnerability Priority CRITICAL 96KEV 2023-12-05

Components

Products in the NVD configurations · select one to filter the records
Wcd9380 Firmware 1213 records CRITICAL Wsa8835 Firmware 1141 records CRITICAL Wsa8830 Firmware 1140 records CRITICAL Wcd9385 Firmware 1123 records CRITICAL Qca6574au Firmware 1086 records CRITICAL Wcd9370 Firmware 1038 records CRITICAL Wsa8810 Firmware 1021 records CRITICAL Wsa8815 Firmware 1017 records CRITICAL

Records

15 records in 215 Mobile Platform Firmware · all components

TI-2025-15448 CVE-2025-21487 · GHSA-j4c6-9q52-52q7

Buffer Over-read in Data Network Stack & Connectivity

Priority MEDIUM 41

Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00269 Published 2025-09-24 No fix listed CWE-126
TI-2024-35504 CVE-2024-53026 · GHSA-w4q4-rw8x-3296

Buffer Over-read in Data Network Stack & Connectivity

Priority MEDIUM 41

Information disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00308 Published 2025-06-03 No fix listed CWE-126
TI-2024-35498 CVE-2024-53020 · GHSA-w9f5-6mhq-cp5w

Buffer Over-read in Data Network Stack & Connectivity

Priority MEDIUM 41

Information disclosure may occur while decoding the RTP packet with invalid header extension from network.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00255 Published 2025-06-03 No fix listed CWE-126
TI-2024-15453 CVE-2024-23353 · GHSA-6cvr-wmr3-636f

Buffer Over-read in Multi Mode Call Processor

Priority LOW 39

Transient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00346 Published 2024-08-05 No fix listed CWE-126
TI-2024-21891 CVE-2024-33027 · GHSA-qvm8-hj6f-mrgr

Improper Access Control in Graphics Linux

Priority LOW 37

Memory corruption can occur when arbitrary user-space app gains kernel level privilege to modify DDR memory by corrupting the GPU page table.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00097 Published 2024-08-05 No fix listed CWE-284
TI-2024-15470 CVE-2024-23373 · GHSA-wgv9-rgrg-cmg6

Use After Free in Graphics

Priority LOW 37

Memory corruption when IOMMU unmap operation fails, the DMA and anon buffers are getting released.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00149 Published 2024-07-01 No fix listed CWE-416
TI-2024-14220 CVE-2024-21461 · GHSA-56fc-m9wv-h689

Double Free in HLOS

Priority LOW 37

Memory corruption while performing finish HMAC operation when context is freed by keymaster.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00104 Published 2024-07-01 No fix listed CWE-415
TI-2025-19923 CVE-2025-27053 · GHSA-jgwx-g3h6-cg8j

Incorrect Calculation of Buffer Size in HLOS

Priority LOW 35

Memory corruption during PlayReady APP usecase while processing TA commands.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00089 Published 2025-10-09 No fix listed CWE-131
TI-2024-25672 CVE-2024-38422 · GHSA-3qgc-vrvv-mv2r

Integer Overflow to Buffer Overflow in Audio

Priority LOW 35

Memory corruption while processing voice packet with arbitrary data received from ADSP.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00103 Published 2024-11-04 No fix listed CWE-680
TI-2024-25665 CVE-2024-38415 · GHSA-5jgq-h327-whqc

Use After Free in Computer Vision

Priority LOW 35

Memory corruption while handling session errors from firmware.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00103 Published 2024-11-04 No fix listed CWE-416
TI-2024-15457 CVE-2024-23357 · GHSA-pf2q-6c5m-pvcj

NULL Pointer Dereference in HLOS

Priority LOW 26

Transient DOS while importing a PKCS#8-encoded RSA key with zero bytes modulus.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00094 Published 2024-08-05 No fix listed CWE-476
TI-2024-21907 CVE-2024-33043 · GHSA-pq3f-467x-f7v6

Buffer Over-read in FM Host

Priority LOW 23

Transient DOS while handling PS event when Program Service name length offset value is set to 255.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00093 Published 2024-09-02 No fix listed CWE-126
Open these records in search →