Read the docs

Qualcomm

Records3060All Threatist records
Exploited (KEV)12In CISA KEV
CVSS critical678CVSS 9.0–10.0
CVSS high1984CVSS 7.0–8.9

Exploited now

Qualcomm records in CISA KEV
TI-2026-17287 Qualcomm Multiple Chipsets Memory Corruption Vulnerability Priority CRITICAL 93KEV 2026-03-03TI-2025-15440 Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability Priority CRITICAL 96KEV 2025-06-03TI-2025-15441 Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability Priority CRITICAL 96KEV 2025-06-03TI-2025-19908 Qualcomm Multiple Chipsets Use-After-Free Vulnerability Priority CRITICAL 92KEV 2025-06-03TI-2024-28736 Qualcomm Multiple Chipsets Use-After-Free Vulnerability Priority CRITICAL 93KEV 2024-10-08TI-2022-06419 Qualcomm Multiple Chipsets Use-After-Free Vulnerability Priority CRITICAL 96KEV 2023-12-05

Components

Products in the NVD configurations · select one to filter the records
Wcd9380 Firmware 1213 records CRITICAL Wsa8835 Firmware 1141 records CRITICAL Wsa8830 Firmware 1140 records CRITICAL Wcd9385 Firmware 1123 records CRITICAL Qca6574au Firmware 1086 records CRITICAL Wcd9370 Firmware 1038 records CRITICAL Wsa8810 Firmware 1021 records CRITICAL Wsa8815 Firmware 1017 records CRITICAL

Records

724 records in Ar8035 Firmware · all components

TI-2023-16287 CVE-2023-33107 · GHSA-wg3g-ggh3-7wgp

Integer Overflow or Wraparound in Graphics Linux

Priority CRITICAL 96KEV

Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00739 Published 2023-12-05 No fix listed CWE-190
TI-2023-16286 CVE-2023-33106 · GHSA-x563-8qf7-q64m

Use of Out-of-range Pointer Offset in Graphics

Priority CRITICAL 96KEV

Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00788 Published 2023-12-05 No fix listed CWE-823
TI-2022-06419 CVE-2022-22071 · GHSA-hx5m-cxr8-37mp

Use after free in Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity…

Priority CRITICAL 96KEV

Possible use after free when process shell memory is freed using IOCTL munmap call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapd…

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00394 Published 2022-06-14 No fix listed CWE-416
TI-2026-17287 CVE-2026-21385 · GHSA-wwwq-962j-m7x8

Integer Overflow or Wraparound in Graphics

Priority CRITICAL 93KEV

Memory corruption while using alignments for memory allocation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01316 Published 2026-03-02 No fix listed CWE-190
TI-2023-16248 CVE-2023-33063 · GHSA-534v-34xw-2g2m

Use After Free in DSP Services

Priority CRITICAL 93KEV

Memory corruption in DSP Services during a remote call from HLOS to DSP.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00672 Published 2023-12-05 No fix listed CWE-416
TI-2020-09124 CVE-2020-11261 · GHSA-5cwq-39c4-23v7

Improper input validation in Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon…

Priority CRITICAL 93KEV

Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01529 Published 2021-06-09 No fix listed CWE-20
TI-2023-16255 CVE-2023-33070 · GHSA-9cq4-qvx2-f3hh

Improper Authentication in Automotive OS

Priority MEDIUM 64

Transient DOS in Automotive OS due to improper authentication to the secure IO calls.

CVSS 3.1HIGH 7.1 Local No auth No interaction EPSS 0.00141 Published 2023-12-05 No fix listed CWE-287
TI-2020-09127 CVE-2020-11264 · GHSA-jm3v-7p2w-cvmp

Improper authentication in Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon…

Priority MEDIUM 57

Improper authentication of Non-EAPOL/WAPI plaintext frames during four-way handshake can lead to arbitrary network packet injection in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Ele…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.13186 Published 2021-09-08 No fix listed CWE-287
TI-2020-09163 CVE-2020-11301 · GHSA-mq5c-744g-f8pj

Improper authentication in Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon…

Priority MEDIUM 52

Improper authentication of un-encrypted plaintext Wi-Fi frames in an encrypted network can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics C…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.11108 Published 2021-09-08 No fix listed CWE-287
TI-2024-14232 CVE-2024-21473 · GHSA-6fcw-vg67-c8gp

Improper Input Validation in WIN SON

Priority MEDIUM 50

Memory corruption while redirecting log file to any file location with any file name.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00663 Published 2024-04-01 No fix listed CWE-20
TI-2023-10354 CVE-2023-24855 · GHSA-r633-28cw-p576

Use of Out-of-range Pointer Offset in Modem

Priority MEDIUM 50

Memory corruption in Modem while processing security related configuration before AS Security Exchange.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00546 Published 2023-10-03 No fix listed CWE-823
TI-2023-23310 CVE-2023-43553 · GHSA-p8vw-h7rx-fgxr

Use of Out-of-range Pointer Offset in WLAN HOST

Priority MEDIUM 49

Memory corruption while parsing beacon/probe response frame when AP sends more supported links in MLIE.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00353 Published 2024-03-04 No fix listed CWE-823
TI-2023-23309 CVE-2023-43552 · GHSA-f2j2-g4wg-mxr5

Use After Free in WLAN Host Communication

Priority MEDIUM 49

Memory corruption while processing MBSSID beacon containing several subelement IE.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00353 Published 2024-03-04 No fix listed CWE-416
Load more
Open these records in search →