Read the docs

Qualcomm

Records3060All Threatist records
Exploited (KEV)12In CISA KEV
CVSS critical678CVSS 9.0–10.0
CVSS high1984CVSS 7.0–8.9

Exploited now

Qualcomm records in CISA KEV
TI-2026-17287 Qualcomm Multiple Chipsets Memory Corruption Vulnerability Priority CRITICAL 93KEV 2026-03-03TI-2025-15440 Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability Priority CRITICAL 96KEV 2025-06-03TI-2025-15441 Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability Priority CRITICAL 96KEV 2025-06-03TI-2025-19908 Qualcomm Multiple Chipsets Use-After-Free Vulnerability Priority CRITICAL 92KEV 2025-06-03TI-2024-28736 Qualcomm Multiple Chipsets Use-After-Free Vulnerability Priority CRITICAL 93KEV 2024-10-08TI-2022-06419 Qualcomm Multiple Chipsets Use-After-Free Vulnerability Priority CRITICAL 96KEV 2023-12-05

Components

Products in the NVD configurations · select one to filter the records
Wcd9380 Firmware 1213 records CRITICAL Wsa8835 Firmware 1141 records CRITICAL Wsa8830 Firmware 1140 records CRITICAL Wcd9385 Firmware 1123 records CRITICAL Qca6574au Firmware 1086 records CRITICAL Wcd9370 Firmware 1038 records CRITICAL Wsa8810 Firmware 1021 records CRITICAL Wsa8815 Firmware 1017 records CRITICAL

Records

120 records in C-v2x 9150 Firmware · all components

TI-2023-16287 CVE-2023-33107 · GHSA-wg3g-ggh3-7wgp

Integer Overflow or Wraparound in Graphics Linux

Priority CRITICAL 96KEV

Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00739 Published 2023-12-05 No fix listed CWE-190
TI-2026-17287 CVE-2026-21385 · GHSA-wwwq-962j-m7x8

Integer Overflow or Wraparound in Graphics

Priority CRITICAL 93KEV

Memory corruption while using alignments for memory allocation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01316 Published 2026-03-02 No fix listed CWE-190
TI-2023-16248 CVE-2023-33063 · GHSA-534v-34xw-2g2m

Use After Free in DSP Services

Priority CRITICAL 93KEV

Memory corruption in DSP Services during a remote call from HLOS to DSP.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00672 Published 2023-12-05 No fix listed CWE-416
TI-2023-16255 CVE-2023-33070 · GHSA-9cq4-qvx2-f3hh

Improper Authentication in Automotive OS

Priority MEDIUM 64

Transient DOS in Automotive OS due to improper authentication to the secure IO calls.

CVSS 3.1HIGH 7.1 Local No auth No interaction EPSS 0.00141 Published 2023-12-05 No fix listed CWE-287
TI-2023-08020 CVE-2023-21631 · GHSA-ccv7-j4hv-3wgx

Improper Input Validation in Modem

Priority MEDIUM 48

Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00362 Published 2023-07-04 No fix listed CWE-20
TI-2023-23308 CVE-2023-43551 · GHSA-4h56-hghf-36cj

Improper Authentication in Multi-Mode Call Processor

Priority MEDIUM 47

Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00256 Published 2024-06-03 No fix listed CWE-287
TI-2023-08645 CVE-2023-22385 · GHSA-4vv2-435c-33ch

Buffer Over-read in Data Modem

Priority MEDIUM 42

Memory Corruption in Data Modem while making a MO call or MT VOLTE call.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00422 Published 2023-10-03 No fix listed CWE-126
TI-2023-13109 CVE-2023-28578 · GHSA-9fv2-j4fg-6v4w

Improper Input Validation in Services

Priority MEDIUM 41

Memory corruption in Core Services while executing the command for removing a single event listener.

CVSS 3.1CRITICAL 9.3 Local No auth No interaction EPSS 0.00123 Published 2024-03-04 No fix listed CWE-20
TI-2022-19223 CVE-2022-40507 · GHSA-wcg5-6pc8-hjf5

Double free in Core

Priority MEDIUM 41

Memory corruption due to double free in Core while mapping HLOS address to the list.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.01305 Published 2023-06-06 No fix listed CWE-415
TI-2025-15393 CVE-2025-21429 · GHSA-mrr6-w84f-5xh8

Buffer Over-read in WLAN Host

Priority MEDIUM 40

Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00267 Published 2025-04-07 No fix listed CWE-126
TI-2025-15392 CVE-2025-21428 · GHSA-4rmv-m7cx-wvg4

Buffer Over-read in WLAN Host

Priority MEDIUM 40

Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request from the AP to establish a TSpec session.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00263 Published 2025-04-07 No fix listed CWE-126
TI-2024-15453 CVE-2024-23353 · GHSA-6cvr-wmr3-636f

Buffer Over-read in Multi Mode Call Processor

Priority LOW 39

Transient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00346 Published 2024-08-05 No fix listed CWE-126
TI-2024-14212 CVE-2024-21453 · GHSA-6gr4-fjw7-47pw

Improper Input Validation in Automotive Telematics

Priority LOW 39

Transient DOS while decoding message of size that exceeds the available system memory.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00367 Published 2024-04-01 No fix listed CWE-20
TI-2023-16220 CVE-2023-33032 · GHSA-q9h6-c2ff-prcp

Integer Overflow or Wraparound in TZ Secure OS

Priority LOW 39

Memory corruption in TZ Secure OS while requesting a memory allocation from TA region.

CVSS 3.1CRITICAL 9.3 Local No auth No interaction EPSS 0.00122 Published 2024-01-02 No fix listed CWE-190
TI-2023-16207 CVE-2023-33019 · GHSA-9pxw-85r8-pc8f

Improper Authorization in WLAN Host

Priority LOW 39

Transient DOS in WLAN Host while doing channel switch announcement (CSA), when a mobile station receives invalid channel in CSA IE.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00354 Published 2023-09-05 No fix listed CWE-285
TI-2023-10346 CVE-2023-24847 · GHSA-f8jp-2qgx-v4hf

NULL pointer Dereference in Modem

Priority LOW 39

Transient DOS in Modem while allocating DSM items.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00387 Published 2023-10-03 No fix listed CWE-476
TI-2022-14658 CVE-2022-33231 · GHSA-h9v3-m6cc-qpv3

Double free in Core

Priority LOW 39

Memory corruption due to double free in core while initializing the encryption key.

CVSS 3.1CRITICAL 9.3 Local No auth No interaction EPSS 0.0008 Published 2023-04-04 No fix listed CWE-415
TI-2024-21923 CVE-2024-33060 · GHSA-pphm-768w-qjh3

Use After Free in DSP Service

Priority LOW 38

Memory corruption when two threads try to map and unmap a single node simultaneously.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00165 Published 2024-09-02 No fix listed CWE-416
TI-2024-14211 CVE-2024-21452 · GHSA-w5m5-3q2m-hf8j

Improper Input Validation in Automotive Telematics

Priority LOW 38

Transient DOS while decoding an ASN.1 OER message containing a SEQUENCE of unknown extensions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00254 Published 2024-04-01 No fix listed CWE-20
TI-2024-21891 CVE-2024-33027 · GHSA-qvm8-hj6f-mrgr

Improper Access Control in Graphics Linux

Priority LOW 37

Memory corruption can occur when arbitrary user-space app gains kernel level privilege to modify DDR memory by corrupting the GPU page table.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00097 Published 2024-08-05 No fix listed CWE-284
Load more
Open these records in search →