Read the docs

Qualcomm

Records3060All Threatist records
Exploited (KEV)12In CISA KEV
CVSS critical678CVSS 9.0–10.0
CVSS high1984CVSS 7.0–8.9

Exploited now

Qualcomm records in CISA KEV
TI-2026-17287 Qualcomm Multiple Chipsets Memory Corruption Vulnerability Priority CRITICAL 93KEV 2026-03-03TI-2025-15440 Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability Priority CRITICAL 96KEV 2025-06-03TI-2025-15441 Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability Priority CRITICAL 96KEV 2025-06-03TI-2025-19908 Qualcomm Multiple Chipsets Use-After-Free Vulnerability Priority CRITICAL 92KEV 2025-06-03TI-2024-28736 Qualcomm Multiple Chipsets Use-After-Free Vulnerability Priority CRITICAL 93KEV 2024-10-08TI-2022-06419 Qualcomm Multiple Chipsets Use-After-Free Vulnerability Priority CRITICAL 96KEV 2023-12-05

Components

Products in the NVD configurations · select one to filter the records
Wcd9380 Firmware 1213 records CRITICAL Wsa8835 Firmware 1141 records CRITICAL Wsa8830 Firmware 1140 records CRITICAL Wcd9385 Firmware 1123 records CRITICAL Qca6574au Firmware 1086 records CRITICAL Wcd9370 Firmware 1038 records CRITICAL Wsa8810 Firmware 1021 records CRITICAL Wsa8815 Firmware 1017 records CRITICAL

Records

8 records in 8905 Firmware · all components

TI-2022-19220 CVE-2022-40503 · GHSA-h95q-46mc-6g3w

Buffer over-read in Bluetooth Host.

Priority LOW 36

Information disclosure due to buffer over-read in Bluetooth Host while A2DP streaming.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00406 Published 2023-04-04 No fix listed CWE-126
TI-2022-19244 CVE-2022-40532 · GHSA-767v-xrqh-x67m

Integer overflow or wraparound in WLAN

Priority LOW 35

Memory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00116 Published 2023-04-04 No fix listed CWE-190
TI-2022-19221 CVE-2022-40504 · GHSA-xgf4-6mjg-7hqq

Reachable assertion in Modem

Priority LOW 33

Transient DOS due to reachable assertion in Modem when UE received Downlink Data Indication message from the network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00383 Published 2023-05-02 No fix listed CWE-617
TI-2022-14723 CVE-2022-33302 · GHSA-3rwq-2648-vg59

Improper validation of array index in User Identity Module

Priority LOW 33

Memory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than command length.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00118 Published 2023-04-04 No fix listed CWE-129
TI-2022-14717 CVE-2022-33296 · GHSA-wmfr-hvpj-h75h

Integer overflow to buffer overflow in Modem

Priority LOW 33

Memory corruption due to integer overflow to buffer overflow in Modem while parsing Traffic Channel Neighbor List Update message.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00115 Published 2023-04-04 No fix listed CWE-680
TI-2022-14711 CVE-2022-33289 · GHSA-qgph-86jf-wcq5

Improper validation of array index in Modem

Priority LOW 31

Memory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00186 Published 2023-04-04 No fix listed CWE-129
Open these records in search →