Read the docs

Qualcomm

Records3060All Threatist records
Exploited (KEV)12In CISA KEV
CVSS critical678CVSS 9.0–10.0
CVSS high1984CVSS 7.0–8.9

Exploited now

Qualcomm records in CISA KEV
TI-2026-17287 Qualcomm Multiple Chipsets Memory Corruption Vulnerability Priority CRITICAL 93KEV 2026-03-03TI-2025-15440 Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability Priority CRITICAL 96KEV 2025-06-03TI-2025-15441 Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability Priority CRITICAL 96KEV 2025-06-03TI-2025-19908 Qualcomm Multiple Chipsets Use-After-Free Vulnerability Priority CRITICAL 92KEV 2025-06-03TI-2024-28736 Qualcomm Multiple Chipsets Use-After-Free Vulnerability Priority CRITICAL 93KEV 2024-10-08TI-2022-06419 Qualcomm Multiple Chipsets Use-After-Free Vulnerability Priority CRITICAL 96KEV 2023-12-05

Components

Products in the NVD configurations · select one to filter the records
Wcd9380 Firmware 1213 records CRITICAL Wsa8835 Firmware 1141 records CRITICAL Wsa8830 Firmware 1140 records CRITICAL Wcd9385 Firmware 1123 records CRITICAL Qca6574au Firmware 1086 records CRITICAL Wcd9370 Firmware 1038 records CRITICAL Wsa8810 Firmware 1021 records CRITICAL Wsa8815 Firmware 1017 records CRITICAL

Records

11 records in 8098 Firmware · all components

TI-2023-16248 CVE-2023-33063 · GHSA-534v-34xw-2g2m

Use After Free in DSP Services

Priority CRITICAL 93KEV

Memory corruption in DSP Services during a remote call from HLOS to DSP.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00672 Published 2023-12-05 No fix listed CWE-416
TI-2023-16263 CVE-2023-33080 · GHSA-rh2q-252v-ccqc

Buffer over-read in WLAN Firmware

Priority LOW 39

Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00338 Published 2023-12-05 No fix listed CWE-126
TI-2023-16239 CVE-2023-33054 · GHSA-9v76-xcm4-wwhw

Improper Authentication in GPS HLOS Driver

Priority LOW 39

Cryptographic issue in GPS HLOS Driver while downloading Qualcomm GNSS assistance data.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00361 Published 2023-12-05 No fix listed CWE-287
TI-2023-16215 CVE-2023-33027 · GHSA-hxqc-xv34-842x

Buffer Over-read in WLAN Firmware

Priority LOW 39

Transient DOS in WLAN Firmware while parsing rsn ies.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00387 Published 2023-10-03 No fix listed CWE-126
TI-2022-14658 CVE-2022-33231 · GHSA-h9v3-m6cc-qpv3

Double free in Core

Priority LOW 39

Memory corruption due to double free in core while initializing the encryption key.

CVSS 3.1CRITICAL 9.3 Local No auth No interaction EPSS 0.0008 Published 2023-04-04 No fix listed CWE-415
TI-2023-13069 CVE-2023-28537 · GHSA-hwh2-grqv-74jx

Integer Overflow or Wraparound in Audio

Priority LOW 35

Memory corruption while allocating memory in COmxApeDec module in Audio.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00116 Published 2023-08-08 No fix listed CWE-190
TI-2023-13102 CVE-2023-28571 · GHSA-q2gh-hfh3-q82q

Buffer Over-read in WLAN HOST

Priority LOW 26

Information disclosure in WLAN HOST while processing the WLAN scan descriptor list during roaming scan.

CVSS 3.1MEDIUM 6.1 Local Low privileges No interaction EPSS 0.00113 Published 2023-10-03 No fix listed CWE-126
Open these records in search →