Read the docs

Qualcomm

Records3060All Threatist records
Exploited (KEV)12In CISA KEV
CVSS critical678CVSS 9.0–10.0
CVSS high1984CVSS 7.0–8.9

Exploited now

Qualcomm records in CISA KEV
TI-2026-17287 Qualcomm Multiple Chipsets Memory Corruption Vulnerability Priority CRITICAL 93KEV 2026-03-03TI-2025-15440 Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability Priority CRITICAL 96KEV 2025-06-03TI-2025-15441 Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability Priority CRITICAL 96KEV 2025-06-03TI-2025-19908 Qualcomm Multiple Chipsets Use-After-Free Vulnerability Priority CRITICAL 92KEV 2025-06-03TI-2024-28736 Qualcomm Multiple Chipsets Use-After-Free Vulnerability Priority CRITICAL 93KEV 2024-10-08TI-2022-06419 Qualcomm Multiple Chipsets Use-After-Free Vulnerability Priority CRITICAL 96KEV 2023-12-05

Components

Products in the NVD configurations · select one to filter the records
Wcd9380 Firmware 1213 records CRITICAL Wsa8835 Firmware 1141 records CRITICAL Wsa8830 Firmware 1140 records CRITICAL Wcd9385 Firmware 1123 records CRITICAL Qca6574au Firmware 1086 records CRITICAL Wcd9370 Firmware 1038 records CRITICAL Wsa8810 Firmware 1021 records CRITICAL Wsa8815 Firmware 1017 records CRITICAL

Records

8 records in Congo Firmware · all components

TI-2026-20407 CVE-2026-25275 · GHSA-r23j-xxqv-w996

Buffer Over-read in WLAN Firmware

Priority LOW 39

Transient DOS when processing authentication frames with invalid FILS information element header lengths.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00345 Published 2026-09-17 No fix listed CWE-126
TI-2026-68016 CVE-2026-57546 · GHSA-5982-f562-35cj

Buffer over-read in Qualcomm Snapdragon WLAN HAL

Priority LOW 38

Transient DOS when processing a continuous receive command with a zero-sized global configuration override.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00167 Published 2026-10-06 No fix listed CWE-126
TI-2026-68014 CVE-2026-57537 · GHSA-rw2p-f79q-94qj

Use after free in Qualcomm Snapdragon DSP service

Priority LOW 34

Memory Corruption when accessing and modifying geographic mapping data concurrently without proper synchronization.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0007 Published 2026-10-06 No fix listed CWE-416
TI-2026-20421 CVE-2026-25294 · GHSA-59fm-5gr7-cvvq

Buffer Over-read in WLAN Firmware

Priority LOW 32

Transient DOS while parsing frame during channel usage.

CVSS 3.1HIGH 7.4 Adjacent network No auth No interaction EPSS 0.00162 Published 2026-09-17 No fix listed CWE-126
TI-2026-67911 CVE-2026-25274 · GHSA-5cww-hhww-jff4

Use after free in Windows WLAN Host on Qualcomm Snapdragon

Priority LOW 30

Memory Corruption when processing concurrent DMA buffer allocation and deallocation commands without proper synchronization.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00073 Published 2026-10-06 No fix listed CWE-416
TI-2026-67910 CVE-2026-25273 · GHSA-4rv6-wj6g-mxj9

Out-of-bounds write in Qualcomm Snapdragon camera driver

Priority LOW 30

Memory Corruption when processing camera operations due to out-of-bounds write during driver updates.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00073 Published 2026-10-06 No fix listed CWE-787
TI-2026-67908 CVE-2026-25270 · GHSA-w5mm-g344-7j64

Out-of-bounds write in Qualcomm Snapdragon camera driver

Priority LOW 30

Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00073 Published 2026-10-06 No fix listed CWE-787
Open these records in search →