Read the docs

Qualcomm

Records3060All Threatist records
Exploited (KEV)12In CISA KEV
CVSS critical678CVSS 9.0–10.0
CVSS high1984CVSS 7.0–8.9

Exploited now

Qualcomm records in CISA KEV
TI-2026-17287 Qualcomm Multiple Chipsets Memory Corruption Vulnerability Priority CRITICAL 93KEV 2026-03-03TI-2025-15440 Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability Priority CRITICAL 96KEV 2025-06-03TI-2025-15441 Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability Priority CRITICAL 96KEV 2025-06-03TI-2025-19908 Qualcomm Multiple Chipsets Use-After-Free Vulnerability Priority CRITICAL 92KEV 2025-06-03TI-2024-28736 Qualcomm Multiple Chipsets Use-After-Free Vulnerability Priority CRITICAL 93KEV 2024-10-08TI-2022-06419 Qualcomm Multiple Chipsets Use-After-Free Vulnerability Priority CRITICAL 96KEV 2023-12-05

Components

Products in the NVD configurations · select one to filter the records
Wcd9380 Firmware 1213 records CRITICAL Wsa8835 Firmware 1141 records CRITICAL Wsa8830 Firmware 1140 records CRITICAL Wcd9385 Firmware 1123 records CRITICAL Qca6574au Firmware 1086 records CRITICAL Wcd9370 Firmware 1038 records CRITICAL Wsa8810 Firmware 1021 records CRITICAL Wsa8815 Firmware 1017 records CRITICAL

Records

531 records in Qca6698aq Firmware · all components

TI-2023-16287 CVE-2023-33107 · GHSA-wg3g-ggh3-7wgp

Integer Overflow or Wraparound in Graphics Linux

Priority CRITICAL 96KEV

Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00739 Published 2023-12-05 No fix listed CWE-190
TI-2023-16286 CVE-2023-33106 · GHSA-x563-8qf7-q64m

Use of Out-of-range Pointer Offset in Graphics

Priority CRITICAL 96KEV

Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00788 Published 2023-12-05 No fix listed CWE-823
TI-2026-17287 CVE-2026-21385 · GHSA-wwwq-962j-m7x8

Integer Overflow or Wraparound in Graphics

Priority CRITICAL 93KEV

Memory corruption while using alignments for memory allocation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01316 Published 2026-03-02 No fix listed CWE-190
TI-2024-28736 CVE-2024-43047 · GHSA-36wv-6w83-xmqr

Use After Free in DSP Service

Priority CRITICAL 93KEV

Memory corruption while maintaining memory maps of HLOS memory.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00674 Published 2024-10-07 No fix listed CWE-416
TI-2023-16248 CVE-2023-33063 · GHSA-534v-34xw-2g2m

Use After Free in DSP Services

Priority CRITICAL 93KEV

Memory corruption in DSP Services during a remote call from HLOS to DSP.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00672 Published 2023-12-05 No fix listed CWE-416
TI-2023-16255 CVE-2023-33070 · GHSA-9cq4-qvx2-f3hh

Improper Authentication in Automotive OS

Priority MEDIUM 64

Transient DOS in Automotive OS due to improper authentication to the secure IO calls.

CVSS 3.1HIGH 7.1 Local No auth No interaction EPSS 0.00141 Published 2023-12-05 No fix listed CWE-287
TI-2023-23310 CVE-2023-43553 · GHSA-p8vw-h7rx-fgxr

Use of Out-of-range Pointer Offset in WLAN HOST

Priority MEDIUM 49

Memory corruption while parsing beacon/probe response frame when AP sends more supported links in MLIE.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00353 Published 2024-03-04 No fix listed CWE-823
TI-2023-23309 CVE-2023-43552 · GHSA-f2j2-g4wg-mxr5

Use After Free in WLAN Host Communication

Priority MEDIUM 49

Memory corruption while processing MBSSID beacon containing several subelement IE.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00353 Published 2024-03-04 No fix listed CWE-416
TI-2024-33290 CVE-2024-49839 · GHSA-qr6j-94j6-gq32

Buffer Over-read in WLAN Host Cmn

Priority MEDIUM 48

Memory corruption during management frame processing due to mismatch in T2LM info element.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00295 Published 2025-02-03 No fix listed CWE-126
TI-2023-13072 CVE-2023-28540 · GHSA-fmqm-mv4m-4vh3

Improper Authentication in Data Modem

Priority MEDIUM 48

Cryptographic issue in Data Modem due to improper authentication during TLS handshake.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00431 Published 2023-10-03 No fix listed CWE-287
TI-2023-08020 CVE-2023-21631 · GHSA-ccv7-j4hv-3wgx

Improper Input Validation in Modem

Priority MEDIUM 48

Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00362 Published 2023-07-04 No fix listed CWE-20
TI-2025-15414 CVE-2025-21450 · GHSA-f96p-7qr6-2qh9

Improper Authentication in GPS_GNSS

Priority MEDIUM 47

Cryptographic issue occurs due to use of insecure connection method while downloading.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00316 Published 2025-07-08 No fix listed CWE-287
TI-2023-23308 CVE-2023-43551 · GHSA-4h56-hghf-36cj

Improper Authentication in Multi-Mode Call Processor

Priority MEDIUM 47

Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00256 Published 2024-06-03 No fix listed CWE-287
TI-2024-33297 CVE-2024-49846 · GHSA-ghfm-pj4r-3hw7

Buffer Over-read in Multi-Mode Call Processor

Priority MEDIUM 45

Memory corruption while decoding of OTA messages from T3448 IE.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.0029 Published 2025-05-06 No fix listed CWE-126
TI-2024-14215 CVE-2024-21456 · GHSA-7f4r-2cq6-j835

Buffer Over-read in WLAN HOST

Priority MEDIUM 45

Information Disclosure while parsing beacon frame in STA.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00271 Published 2024-07-01 No fix listed CWE-126
Load more
Open these records in search →