Read the docs

Qualcomm

Records3060All Threatist records
Exploited (KEV)12In CISA KEV
CVSS critical678CVSS 9.0–10.0
CVSS high1984CVSS 7.0–8.9

Exploited now

Qualcomm records in CISA KEV
TI-2026-17287 Qualcomm Multiple Chipsets Memory Corruption Vulnerability Priority CRITICAL 93KEV 2026-03-03TI-2025-15440 Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability Priority CRITICAL 96KEV 2025-06-03TI-2025-15441 Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability Priority CRITICAL 96KEV 2025-06-03TI-2025-19908 Qualcomm Multiple Chipsets Use-After-Free Vulnerability Priority CRITICAL 92KEV 2025-06-03TI-2024-28736 Qualcomm Multiple Chipsets Use-After-Free Vulnerability Priority CRITICAL 93KEV 2024-10-08TI-2022-06419 Qualcomm Multiple Chipsets Use-After-Free Vulnerability Priority CRITICAL 96KEV 2023-12-05

Components

Products in the NVD configurations · select one to filter the records
Wcd9380 Firmware 1213 records CRITICAL Wsa8835 Firmware 1141 records CRITICAL Wsa8830 Firmware 1140 records CRITICAL Wcd9385 Firmware 1123 records CRITICAL Qca6574au Firmware 1086 records CRITICAL Wcd9370 Firmware 1038 records CRITICAL Wsa8810 Firmware 1021 records CRITICAL Wsa8815 Firmware 1017 records CRITICAL

Records

20 records in Cq8750m Firmware · all components

TI-2026-20417 CVE-2026-25289 · GHSA-668h-p75c-x2rp

Stack-based Buffer Overflow in WLAN Firmware

Priority MEDIUM 42

Memory Corruption when processing Device Capability Extended attributes in certain NAN Service Discovery Frames with invalid length values.

CVSS 3.1CRITICAL 9.6 Adjacent network No auth No interaction EPSS 0.00193 Published 2026-08-04 No fix listed CWE-121
TI-2026-20407 CVE-2026-25275 · GHSA-r23j-xxqv-w996

Buffer Over-read in WLAN Firmware

Priority LOW 39

Transient DOS when processing authentication frames with invalid FILS information element header lengths.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00345 Published 2026-09-17 No fix listed CWE-126
TI-2025-37131 CVE-2025-59606 · GHSA-m8h2-g2g3-v35r

NULL Pointer Dereference in HLOS

Priority LOW 35

Memory Corruption when writing to invalid memory locations occurs due to heap memory exhaustion during secure data initialization.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00075 Published 2026-06-01 No fix listed CWE-476
TI-2025-37129 CVE-2025-59604 · GHSA-6jq8-vp5w-f9x2

NULL Pointer Dereference in SPS Applications

Priority LOW 35

Memory Corruption when running a memory copy operation due to invalid writes caused by a null pointer.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00075 Published 2026-06-01 No fix listed CWE-476
TI-2026-67913 CVE-2026-25302 · GHSA-5mfp-688h-g4r8

Improper Verification of Cryptographic Signature in Boot

Priority LOW 32

Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00063 Published 2026-10-06 No fix listed CWE-347
TI-2026-19416 CVE-2026-24090 · GHSA-q684-mwhh-phmm

Missing Authentication for Critical Function in HLOS

Priority LOW 32

Cryptographic issue while processing partition table entries allows unauthorized modification of boot flow.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00062 Published 2026-06-01 No fix listed CWE-306
TI-2026-19412 CVE-2026-24085 · GHSA-m8fr-cgc2-p8r8

Stack-based Buffer Overflow in Display

Priority LOW 32

Memory Corruption when processing display command line information due to improper initialization of a variable.

CVSS 3.1HIGH 7.2 Physical High privileges No interaction EPSS 0.00097 Published 2026-06-01 No fix listed CWE-121
TI-2026-19408 CVE-2026-24081 · GHSA-7gh6-gjx3-mf8w

Buffer Over-read in BT Controller

Priority LOW 32

Transient DOS when processing a channel map with insufficient used channels and adaptive frequency hopping is fully enabled.

CVSS 3.1HIGH 7.4 Adjacent network No auth No interaction EPSS 0.00162 Published 2026-09-17 No fix listed CWE-126
TI-2025-29915 CVE-2025-47403 · GHSA-w77j-cqm5-vgh4

Buffer Over-read in WLAN Firmware

Priority LOW 32

Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00216 Published 2026-05-04 No fix listed CWE-126
TI-2025-29913 CVE-2025-47401 · GHSA-j2m8-jxhw-9x9r

Buffer Over-read in WLAN HAL

Priority LOW 32

Transient DOS when processing target power rate tables during channel configuration.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00216 Published 2026-05-04 No fix listed CWE-126
TI-2026-67909 CVE-2026-25272 · GHSA-mrrc-xp76-r45x

Out-of-bounds write in Qualcomm Snapdragon camera driver

Priority LOW 30

Memory Corruption when processing camera CRE driver operations with improper handling of buffer limits during hardware update preparation.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00073 Published 2026-10-06 No fix listed CWE-787
TI-2026-67908 CVE-2026-25270 · GHSA-w5mm-g344-7j64

Out-of-bounds write in Qualcomm Snapdragon camera driver

Priority LOW 30

Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00073 Published 2026-10-06 No fix listed CWE-787
TI-2026-67907 CVE-2026-25269 · GHSA-j79m-pvj7-824v

Out-of-bounds write in Qualcomm Snapdragon camera driver

Priority LOW 30

Memory corruption when processing camera requests with excessive batch and IO buffer configurations exceeds allocated memory size.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00073 Published 2026-10-06 No fix listed CWE-787
Open these records in search →