Read the docs

Qualcomm

Records3060All Threatist records
Exploited (KEV)12In CISA KEV
CVSS critical678CVSS 9.0–10.0
CVSS high1984CVSS 7.0–8.9

Exploited now

Qualcomm records in CISA KEV
TI-2026-17287 Qualcomm Multiple Chipsets Memory Corruption Vulnerability Priority CRITICAL 93KEV 2026-03-03TI-2025-15440 Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability Priority CRITICAL 96KEV 2025-06-03TI-2025-15441 Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability Priority CRITICAL 96KEV 2025-06-03TI-2025-19908 Qualcomm Multiple Chipsets Use-After-Free Vulnerability Priority CRITICAL 92KEV 2025-06-03TI-2024-28736 Qualcomm Multiple Chipsets Use-After-Free Vulnerability Priority CRITICAL 93KEV 2024-10-08TI-2022-06419 Qualcomm Multiple Chipsets Use-After-Free Vulnerability Priority CRITICAL 96KEV 2023-12-05

Components

Products in the NVD configurations · select one to filter the records
Wcd9380 Firmware 1213 records CRITICAL Wsa8835 Firmware 1141 records CRITICAL Wsa8830 Firmware 1140 records CRITICAL Wcd9385 Firmware 1123 records CRITICAL Qca6574au Firmware 1086 records CRITICAL Wcd9370 Firmware 1038 records CRITICAL Wsa8810 Firmware 1021 records CRITICAL Wsa8815 Firmware 1017 records CRITICAL

Records

25 records in Apq8052 Firmware · all components

TI-2022-06435 CVE-2022-22088 · GHSA-2rj9-9w62-f3q6

Integer Overflow to Buffer Overflow in Bluetooth HOST

Priority MEDIUM 50

Memory corruption in Bluetooth HOST due to buffer overflow while parsing the command response received from remote

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0054 Published 2023-01-06 No fix listed CWE-787
TI-2022-09295 CVE-2022-25720 · GHSA-2rr6-hjw5-xch6

Improper array index validation in Qualcomm Snapdragon Auto, Snapdragon Compute…

Priority MEDIUM 49

Memory corruption in WLAN due to out of bound array access during connect/roaming in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Sn…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00507 Published 2022-10-19 No fix listed CWE-129
TI-2022-09293 CVE-2022-25718 · GHSA-jf8h-prq4-w478

Cryptographic issue in WLAN due to improper check on return value while authentication…

Priority MEDIUM 49

Cryptographic issue in WLAN due to improper check on return value while authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdra…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00497 Published 2022-10-19 No fix listed CWE-252
TI-2022-19229 CVE-2022-40515 · GHSA-g5q2-299m-wxw3

Double free in Video

Priority MEDIUM 48

Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00326 Published 2023-03-07 No fix listed CWE-415
TI-2022-09269 CVE-2022-25687 · GHSA-7j9c-wwff-h9xc

Buffer overflow in Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity…

Priority MEDIUM 48

memory corruption in video due to buffer overflow while parsing asf clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00389 Published 2022-10-19 No fix listed CWE-120
TI-2022-09294 CVE-2022-25719 · GHSA-v4fg-34wm-hwrr

Out-of-bounds read in Qualcomm Snapdragon Auto, Snapdragon Connectivity, Snapdragon…

Priority MEDIUM 46

Information disclosure in WLAN due to improper length check while processing authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Sn…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00559 Published 2022-10-19 No fix listed CWE-125
TI-2020-09041 CVE-2020-11170 · GHSA-5hmm-wjg3-4m2m

Buffer overflow in Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity…

Priority MEDIUM 44

Out of bound memory access while playing music playbacks with crafted vorbis content due to improper checks in header extraction in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, S…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00834 Published 2021-02-22 No fix listed CWE-120
TI-2022-14641 CVE-2022-33213 · GHSA-jc95-8hq3-w9v4

Memory Corruption in MODEM

Priority MEDIUM 40

Memory corruption in modem due to buffer overflow while processing a PPP packet

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00409 Published 2023-03-07 No fix listed CWE-121
TI-2023-16207 CVE-2023-33019 · GHSA-9pxw-85r8-pc8f

Improper Authorization in WLAN Host

Priority LOW 39

Transient DOS in WLAN Host while doing channel switch announcement (CSA), when a mobile station receives invalid channel in CSA IE.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00354 Published 2023-09-05 No fix listed CWE-285
TI-2021-01621 CVE-2021-1924 · GHSA-m6gv-23gp-3jm6

Observable discrepancy in Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon…

Priority LOW 38

Information disclosure through timing and power side-channels during mod exponentiation for RSA-CRT in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdrago…

CVSS 3.1CRITICAL 9.0 Local No auth No interaction EPSS 0.00171 Published 2021-11-12 No fix listed CWE-203
TI-2020-09132 CVE-2020-11269 · GHSA-wq76-jv4p-3h98

Integer overflow in Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon…

Priority LOW 38

Possible memory corruption while processing EAPOL frames due to lack of validation of key length before using it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivi…

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00294 Published 2021-02-22 No fix listed CWE-190
TI-2022-09277 CVE-2022-25695 · GHSA-4h86-c5mg-pxv5

Improper array index validation in Qualcomm Snapdragon Auto, Snapdragon Compute…

Priority LOW 37

Memory corruption in MODEM due to Improper Validation of Array Index while processing GSTK Proactive commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industria…

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00126 Published 2022-12-13 No fix listed CWE-129
TI-2022-09276 CVE-2022-25694 · GHSA-rx6m-wjqw-383g

Use of Out-of-range Pointer Offset in MODEM

Priority LOW 37

Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00123 Published 2023-03-07 No fix listed CWE-823
TI-2022-09266 CVE-2022-25682 · GHSA-4m84-qqp5-f6jr

Memory corruption in Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon…

Priority LOW 37

Memory corruption in MODEM UIM due to usage of out of range pointer offset while decoding command from card in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial…

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00126 Published 2022-12-13 No fix listed CWE-119
TI-2020-09078 CVE-2020-11207 · GHSA-5fxf-5q9m-pwrw

Buffer overflow in Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT…

Priority LOW 37

Buffer overflow in LibFastCV library due to improper size checks with respect to buffer length' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in APQ8052, AP…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01472 Published 2020-11-12 No fix listed CWE-120
TI-2018-08463 CVE-2018-11816 · GHSA-7gfr-xrcc-jm66

Use After Free in Video

Priority LOW 35

Crafted Binder Request Causes Heap UAF in MediaServer

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0011 Published 2024-11-26 No fix listed CWE-416
TI-2023-16208 CVE-2023-33020 · GHSA-pw8j-xxwv-qpr8

Improper Authorization in WLAN Host

Priority LOW 33

Transient DOS in WLAN Host when an invalid channel (like channel out of range) is received in STA during CSA IE.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00354 Published 2023-09-05 No fix listed CWE-285
TI-2022-14660 CVE-2022-33233 · GHSA-q3j4-865v-r93h

Configuration weakness in modem

Priority LOW 33

Memory corruption due to configuration weakness in modem wile sending command to write protected files.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00123 Published 2023-02-09 No fix listed CWE-16
TI-2022-09282 CVE-2022-25705 · GHSA-w9cc-3843-6mhx

Integer Overflow to Buffer Overflow in Modem

Priority LOW 33

Memory corruption in modem due to integer overflow to buffer overflow while handling APDU response

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00125 Published 2023-03-07 No fix listed CWE-680
TI-2021-01608 CVE-2021-1909 · GHSA-hpj4-57qp-2v2m

Buffer overflow in Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity…

Priority LOW 33

Buffer overflow occurs in trusted applications due to lack of length check of parameters in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00158 Published 2021-09-09 No fix listed CWE-120
TI-2022-09248 CVE-2022-25664 · GHSA-v82w-q73w-95p8

Information disclosure due to exposure of information while GPU reads the data in…

Priority LOW 27

Information disclosure due to exposure of information while GPU reads the data in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapd…

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00186 Published 2022-10-12 No fix listed CWE-459
Open these records in search →