Read the docs

Qualcomm

Records3060All Threatist records
Exploited (KEV)12In CISA KEV
CVSS critical678CVSS 9.0–10.0
CVSS high1984CVSS 7.0–8.9

Exploited now

Qualcomm records in CISA KEV
TI-2026-17287 Qualcomm Multiple Chipsets Memory Corruption Vulnerability Priority CRITICAL 93KEV 2026-03-03TI-2025-15440 Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability Priority CRITICAL 96KEV 2025-06-03TI-2025-15441 Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability Priority CRITICAL 96KEV 2025-06-03TI-2025-19908 Qualcomm Multiple Chipsets Use-After-Free Vulnerability Priority CRITICAL 92KEV 2025-06-03TI-2024-28736 Qualcomm Multiple Chipsets Use-After-Free Vulnerability Priority CRITICAL 93KEV 2024-10-08TI-2022-06419 Qualcomm Multiple Chipsets Use-After-Free Vulnerability Priority CRITICAL 96KEV 2023-12-05

Components

Products in the NVD configurations · select one to filter the records
Wcd9380 Firmware 1213 records CRITICAL Wsa8835 Firmware 1141 records CRITICAL Wsa8830 Firmware 1140 records CRITICAL Wcd9385 Firmware 1123 records CRITICAL Qca6574au Firmware 1086 records CRITICAL Wcd9370 Firmware 1038 records CRITICAL Wsa8810 Firmware 1021 records CRITICAL Wsa8815 Firmware 1017 records CRITICAL

Records

429 records in Sd 8 Gen1 5g Firmware · all components

TI-2023-16287 CVE-2023-33107 · GHSA-wg3g-ggh3-7wgp

Integer Overflow or Wraparound in Graphics Linux

Priority CRITICAL 96KEV

Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00739 Published 2023-12-05 No fix listed CWE-190
TI-2023-16286 CVE-2023-33106 · GHSA-x563-8qf7-q64m

Use of Out-of-range Pointer Offset in Graphics

Priority CRITICAL 96KEV

Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00788 Published 2023-12-05 No fix listed CWE-823
TI-2022-06435 CVE-2022-22088 · GHSA-2rj9-9w62-f3q6

Integer Overflow to Buffer Overflow in Bluetooth HOST

Priority MEDIUM 50

Memory corruption in Bluetooth HOST due to buffer overflow while parsing the command response received from remote

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0054 Published 2023-01-06 No fix listed CWE-787
TI-2022-09295 CVE-2022-25720 · GHSA-2rr6-hjw5-xch6

Improper array index validation in Qualcomm Snapdragon Auto, Snapdragon Compute…

Priority MEDIUM 49

Memory corruption in WLAN due to out of bound array access during connect/roaming in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Sn…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00507 Published 2022-10-19 No fix listed CWE-129
TI-2022-19229 CVE-2022-40515 · GHSA-g5q2-299m-wxw3

Double free in Video

Priority MEDIUM 48

Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00326 Published 2023-03-07 No fix listed CWE-415
TI-2022-09269 CVE-2022-25687 · GHSA-7j9c-wwff-h9xc

Buffer overflow in Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity…

Priority MEDIUM 48

memory corruption in video due to buffer overflow while parsing asf clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00389 Published 2022-10-19 No fix listed CWE-120
TI-2025-15414 CVE-2025-21450 · GHSA-f96p-7qr6-2qh9

Improper Authentication in GPS_GNSS

Priority MEDIUM 47

Cryptographic issue occurs due to use of insecure connection method while downloading.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00316 Published 2025-07-08 No fix listed CWE-287
TI-2024-25658 CVE-2024-38408 · GHSA-wqm7-xh9j-c3ff

Cryptographic Issues in BT Controller

Priority MEDIUM 44

Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00145 Published 2024-11-04 No fix listed CWE-310
TI-2021-14063 CVE-2021-35104 · GHSA-w3v6-c3h3-fpcj

Buffer overflow in Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity…

Priority MEDIUM 44

Possible buffer overflow due to improper parsing of headers while playing the FLAC audio clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdrago…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0084 Published 2022-06-14 No fix listed CWE-120
TI-2021-10839 CVE-2021-30341 · GHSA-hw3p-fc78-hc6r

Out-of-bounds write in Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon…

Priority MEDIUM 44

Improper buffer size validation of DSM packet received can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT,…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00827 Published 2022-06-14 No fix listed CWE-787
TI-2024-14222 CVE-2024-21463 · GHSA-6h4m-m7mr-m96f

Buffer Copy Without Checking Size of Input in Audio

Priority MEDIUM 43

Memory corruption while processing Codec2 during v13k decoder pitch synthesis.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00291 Published 2024-04-01 No fix listed CWE-120
TI-2022-19228 CVE-2022-40514 · GHSA-vjfc-6h99-w884

Buffer copy without checking size of input in WLAN Firmware

Priority MEDIUM 43

Memory corruption due to buffer copy without checking the size of input in WLAN Firmware while processing CCKM IE in reassoc response frame.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00475 Published 2023-02-09 No fix listed CWE-120
TI-2022-19225 CVE-2022-40510 · GHSA-6f27-8674-h7p8

Buffer copy without checking size of input in Audio.

Priority MEDIUM 43

Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00427 Published 2023-08-08 No fix listed CWE-457
TI-2022-06443 CVE-2022-22096 · GHSA-pcf8-p7p2-jgq9

Out-of-bounds write in Qualcomm Snapdragon Connectivity, Snapdragon Mobile

Priority MEDIUM 43

Memory corruption in Bluetooth HOST due to stack-based buffer overflow when when extracting data using command length parameter in Snapdragon Connectivity, Snapdragon Mobile

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00526 Published 2022-09-02 No fix listed CWE-787
Load more
Open these records in search →