Read the docs

Qualcomm

Records3060All Threatist records
Exploited (KEV)12In CISA KEV
CVSS critical678CVSS 9.0–10.0
CVSS high1984CVSS 7.0–8.9

Exploited now

Qualcomm records in CISA KEV
TI-2026-17287 Qualcomm Multiple Chipsets Memory Corruption Vulnerability Priority CRITICAL 93KEV 2026-03-03TI-2025-15440 Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability Priority CRITICAL 96KEV 2025-06-03TI-2025-15441 Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability Priority CRITICAL 96KEV 2025-06-03TI-2025-19908 Qualcomm Multiple Chipsets Use-After-Free Vulnerability Priority CRITICAL 92KEV 2025-06-03TI-2024-28736 Qualcomm Multiple Chipsets Use-After-Free Vulnerability Priority CRITICAL 93KEV 2024-10-08TI-2022-06419 Qualcomm Multiple Chipsets Use-After-Free Vulnerability Priority CRITICAL 96KEV 2023-12-05

Components

Products in the NVD configurations · select one to filter the records
Wcd9380 Firmware 1213 records CRITICAL Wsa8835 Firmware 1141 records CRITICAL Wsa8830 Firmware 1140 records CRITICAL Wcd9385 Firmware 1123 records CRITICAL Qca6574au Firmware 1086 records CRITICAL Wcd9370 Firmware 1038 records CRITICAL Wsa8810 Firmware 1021 records CRITICAL Wsa8815 Firmware 1017 records CRITICAL

Records

630 records in Msm8909w Firmware · all components

TI-2023-16287 CVE-2023-33107 · GHSA-wg3g-ggh3-7wgp

Integer Overflow or Wraparound in Graphics Linux

Priority CRITICAL 96KEV

Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00739 Published 2023-12-05 No fix listed CWE-190
TI-2020-09124 CVE-2020-11261 · GHSA-5cwq-39c4-23v7

Improper input validation in Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon…

Priority CRITICAL 93KEV

Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01529 Published 2021-06-09 No fix listed CWE-20
TI-2020-03185 CVE-2020-3657 · GHSA-m5wr-7765-xwvx

Buffer overflow in Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT…

Priority MEDIUM 64

u'Remote code execution can happen by sending a carefully crafted POST query when Device configuration is accessed from a tethered client through webserver due to lack of array bound check.' in Snapdragon Auto, Snapdrago…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.26632 Published 2020-11-02 No fix listed CWE-120
TI-2022-06435 CVE-2022-22088 · GHSA-2rj9-9w62-f3q6

Integer Overflow to Buffer Overflow in Bluetooth HOST

Priority MEDIUM 50

Memory corruption in Bluetooth HOST due to buffer overflow while parsing the command response received from remote

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0054 Published 2023-01-06 No fix listed CWE-787
TI-2022-09295 CVE-2022-25720 · GHSA-2rr6-hjw5-xch6

Improper array index validation in Qualcomm Snapdragon Auto, Snapdragon Compute…

Priority MEDIUM 49

Memory corruption in WLAN due to out of bound array access during connect/roaming in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Sn…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00507 Published 2022-10-19 No fix listed CWE-129
TI-2022-09293 CVE-2022-25718 · GHSA-jf8h-prq4-w478

Cryptographic issue in WLAN due to improper check on return value while authentication…

Priority MEDIUM 49

Cryptographic issue in WLAN due to improper check on return value while authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdra…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00497 Published 2022-10-19 No fix listed CWE-252
TI-2021-10849 CVE-2021-30351 · GHSA-3jg5-wrcx-ch82

Buffer overflow in Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity…

Priority MEDIUM 49

An out of bound memory access can occur due to improper validation of number of frames being passed during music playback in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdrag…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04018 Published 2022-01-03 No fix listed CWE-120
TI-2023-08020 CVE-2023-21631 · GHSA-ccv7-j4hv-3wgx

Improper Input Validation in Modem

Priority MEDIUM 48

Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00362 Published 2023-07-04 No fix listed CWE-20
TI-2022-19229 CVE-2022-40515 · GHSA-g5q2-299m-wxw3

Double free in Video

Priority MEDIUM 48

Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00326 Published 2023-03-07 No fix listed CWE-415
TI-2022-09269 CVE-2022-25687 · GHSA-7j9c-wwff-h9xc

Buffer overflow in Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity…

Priority MEDIUM 48

memory corruption in video due to buffer overflow while parsing asf clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00389 Published 2022-10-19 No fix listed CWE-120
TI-2023-23308 CVE-2023-43551 · GHSA-4h56-hghf-36cj

Improper Authentication in Multi-Mode Call Processor

Priority MEDIUM 47

Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00256 Published 2024-06-03 No fix listed CWE-287
TI-2022-09294 CVE-2022-25719 · GHSA-v4fg-34wm-hwrr

Out-of-bounds read in Qualcomm Snapdragon Auto, Snapdragon Connectivity, Snapdragon…

Priority MEDIUM 46

Information disclosure in WLAN due to improper length check while processing authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Sn…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00559 Published 2022-10-19 No fix listed CWE-125
TI-2018-08564 CVE-2018-11945 · GHSA-666p-2mrf-25f7

Out-of-bounds write in Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer…

Priority MEDIUM 45

Improper input validation in wireless service messaging module for data received from broadcast messages can lead to heap overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Sna…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01352 Published 2019-02-25 No fix listed CWE-787
TI-2018-04311 CVE-2018-5915 · GHSA-4gxr-4rj2-2vxc

Exception in Modem IP stack while processing IPv6 packet in snapdragon automobile…

Priority MEDIUM 45

Exception in Modem IP stack while processing IPv6 packet in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, S…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01269 Published 2019-01-18 No fix listed CWE-19
TI-2018-02629 CVE-2018-3593 · GHSA-q35w-9mfw-496g

Double free in Qualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear

Priority MEDIUM 45

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 425, SD 430, SD 450, SD 61…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01252 Published 2018-04-11 No fix listed CWE-415
TI-2017-13356 CVE-2017-18160 · GHSA-4rxr-9956-j9gp

Cryptographic flaw in Qualcomm Snapdragon Mobile, Snapdragon Wear

Priority MEDIUM 45

AGPS session failure in GNSS module due to cyphersuites are hardcoded and needed manual update everytime in snapdragon mobile and snapdragon wear in versions MDM9635M, MDM9645, MDM9650, MDM9655, MSM8909W, SD 835, SD 845,…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01269 Published 2019-01-18 No fix listed CWE-310
TI-2017-13341 CVE-2017-18140 · GHSA-jvcr-g399-6q7h

Use after free in Qualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear

Priority MEDIUM 45

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 425, SD 430, SD 450, SD 61…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01252 Published 2018-04-11 No fix listed CWE-416
TI-2017-13340 CVE-2017-18139 · GHSA-m52h-wgxp-47vr

Memory corruption in Qualcomm Snapdragon Mobile, Snapdragon Wear

Priority MEDIUM 45

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 42…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01281 Published 2018-04-11 No fix listed CWE-119
TI-2017-13339 CVE-2017-18138 · GHSA-x8p2-cj2w-2hrg

Memory corruption in Qualcomm Snapdragon Mobile, Snapdragon Wear

Priority MEDIUM 45

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 42…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01281 Published 2018-04-11 No fix listed CWE-119
TI-2017-13337 CVE-2017-18136 · GHSA-8hjg-frh4-7wvv

Use after free in Qualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear

Priority MEDIUM 45

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9635M, MDM9640, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, S…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01252 Published 2018-04-11 No fix listed CWE-416
Load more
Open these records in search →