Read the docs

Qualcomm

Records3060All Threatist records
Exploited (KEV)12In CISA KEV
CVSS critical678CVSS 9.0–10.0
CVSS high1984CVSS 7.0–8.9

Exploited now

Qualcomm records in CISA KEV
TI-2026-17287 Qualcomm Multiple Chipsets Memory Corruption Vulnerability Priority CRITICAL 93KEV 2026-03-03TI-2025-15440 Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability Priority CRITICAL 96KEV 2025-06-03TI-2025-15441 Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability Priority CRITICAL 96KEV 2025-06-03TI-2025-19908 Qualcomm Multiple Chipsets Use-After-Free Vulnerability Priority CRITICAL 92KEV 2025-06-03TI-2024-28736 Qualcomm Multiple Chipsets Use-After-Free Vulnerability Priority CRITICAL 93KEV 2024-10-08TI-2022-06419 Qualcomm Multiple Chipsets Use-After-Free Vulnerability Priority CRITICAL 96KEV 2023-12-05

Components

Products in the NVD configurations · select one to filter the records
Wcd9380 Firmware 1213 records CRITICAL Wsa8835 Firmware 1141 records CRITICAL Wsa8830 Firmware 1140 records CRITICAL Wcd9385 Firmware 1123 records CRITICAL Qca6574au Firmware 1086 records CRITICAL Wcd9370 Firmware 1038 records CRITICAL Wsa8810 Firmware 1021 records CRITICAL Wsa8815 Firmware 1017 records CRITICAL

Records

81 records in Sm8450 Firmware · all components

TI-2023-16248 CVE-2023-33063 · GHSA-534v-34xw-2g2m

Use After Free in DSP Services

Priority CRITICAL 93KEV

Memory corruption in DSP Services during a remote call from HLOS to DSP.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00672 Published 2023-12-05 No fix listed CWE-416
TI-2021-10849 CVE-2021-30351 · GHSA-3jg5-wrcx-ch82

Buffer overflow in Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity…

Priority MEDIUM 49

An out of bound memory access can occur due to improper validation of number of frames being passed during music playback in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdrag…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04018 Published 2022-01-03 No fix listed CWE-120
TI-2023-13072 CVE-2023-28540 · GHSA-fmqm-mv4m-4vh3

Improper Authentication in Data Modem

Priority MEDIUM 48

Cryptographic issue in Data Modem due to improper authentication during TLS handshake.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00431 Published 2023-10-03 No fix listed CWE-287
TI-2021-01669 CVE-2021-1975 · GHSA-fqhw-6hfw-h298

Out-of-bounds write in Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon…

Priority MEDIUM 44

Possible heap overflow due to improper length check of domain while parsing the DNS response in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00869 Published 2021-11-12 No fix listed CWE-787
TI-2022-19223 CVE-2022-40507 · GHSA-wcg5-6pc8-hjf5

Double free in Core

Priority MEDIUM 41

Memory corruption due to double free in Core while mapping HLOS address to the list.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.01305 Published 2023-06-06 No fix listed CWE-415
TI-2021-01674 CVE-2021-1981 · GHSA-xgw2-jw8v-c2pm

Out-of-bounds read in Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon…

Priority MEDIUM 40

Possible buffer over read due to improper IE size check of Bearer capability IE in MT setup request from network in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Indust…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00611 Published 2021-11-12 No fix listed CWE-125
TI-2023-16263 CVE-2023-33080 · GHSA-rh2q-252v-ccqc

Buffer over-read in WLAN Firmware

Priority LOW 39

Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00338 Published 2023-12-05 No fix listed CWE-126
TI-2023-16239 CVE-2023-33054 · GHSA-9v76-xcm4-wwhw

Improper Authentication in GPS HLOS Driver

Priority LOW 39

Cryptographic issue in GPS HLOS Driver while downloading Qualcomm GNSS assistance data.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00361 Published 2023-12-05 No fix listed CWE-287
TI-2023-16215 CVE-2023-33027 · GHSA-hxqc-xv34-842x

Buffer Over-read in WLAN Firmware

Priority LOW 39

Transient DOS in WLAN Firmware while parsing rsn ies.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00387 Published 2023-10-03 No fix listed CWE-126
TI-2023-16214 CVE-2023-33026 · GHSA-h89f-5h94-vmj5

Buffer over-read in WLAN Firmware

Priority LOW 39

Transient DOS in WLAN Firmware while parsing a NAN management frame.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00387 Published 2023-10-03 No fix listed CWE-126
TI-2023-13086 CVE-2023-28555 · GHSA-4fmh-mf22-vcrx

Buffer Over-read in Audio

Priority LOW 39

Transient DOS in Audio while remapping channel buffer in media codec decoding.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00406 Published 2023-08-08 No fix listed CWE-126
TI-2023-08049 CVE-2023-21661 · GHSA-qcvh-ffq5-55f3

Buffer Over-read in WLAN Firmware

Priority LOW 39

Transient DOS while parsing WLAN beacon or probe-response frame.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00383 Published 2023-06-06 No fix listed CWE-126
TI-2023-08048 CVE-2023-21660 · GHSA-9rm7-7c5c-f5vj

Buffer Over-read in WLAN Firmware

Priority LOW 39

Transient DOS in WLAN Firmware while parsing FT Information Elements.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00383 Published 2023-06-06 No fix listed CWE-126
TI-2023-08046 CVE-2023-21658 · GHSA-w8vw-44wp-qv75

Buffer Over-Read in WLAN Firmware

Priority LOW 39

Transient DOS in WLAN Firmware while processing the received beacon or probe response frame.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00383 Published 2023-06-06 No fix listed CWE-126
TI-2023-08034 CVE-2023-21646 · GHSA-g2g3-xc9m-vr7r

Reachable Assertion in Modem

Priority LOW 39

Transient DOS in Modem while processing invalid System Information Block 1.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00383 Published 2023-09-05 No fix listed CWE-617
TI-2022-19248 CVE-2022-40536 · GHSA-jrg7-q7cg-93r8

Improper authentication in Modem

Priority LOW 39

Transient DOS due to improper authentication in modem while receiving plain TLB OTA request message from network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00399 Published 2023-06-06 No fix listed CWE-285
TI-2022-19224 CVE-2022-40508 · GHSA-5353-grp4-p243

Reachable assertion in Modem

Priority LOW 39

Transient DOS due to reachable assertion in Modem while processing config related to cross carrier scheduling, which is not supported.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00383 Published 2023-05-02 No fix listed CWE-617
TI-2022-14710 CVE-2022-33288 · GHSA-fwgv-m2q7-ffhf

Buffer copy without checking the size of input in Core

Priority LOW 39

Memory corruption due to buffer copy without checking the size of input in Core while sending SCM command to get write protection information.

CVSS 3.1CRITICAL 9.3 Local No auth No interaction EPSS 0.00118 Published 2023-04-04 No fix listed CWE-120
TI-2022-14691 CVE-2022-33269 · GHSA-6f6p-f4c4-22jj

Integer overflow or wraparound in Core

Priority LOW 39

Memory corruption due to integer overflow or wraparound in Core while DDR memory assignment.

CVSS 3.1CRITICAL 9.3 Local No auth No interaction EPSS 0.00116 Published 2023-04-04 No fix listed CWE-190
TI-2022-14658 CVE-2022-33231 · GHSA-h9v3-m6cc-qpv3

Double free in Core

Priority LOW 39

Memory corruption due to double free in core while initializing the encryption key.

CVSS 3.1CRITICAL 9.3 Local No auth No interaction EPSS 0.0008 Published 2023-04-04 No fix listed CWE-415
TI-2022-06408 CVE-2022-22060 · GHSA-9v99-6qcm-j8g8

Reachable Assertion in Modem

Priority LOW 39

Assertion occurs while processing Reconfiguration message due to improper validation

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00383 Published 2023-06-06 No fix listed CWE-617
TI-2023-16210 CVE-2023-33022 · GHSA-48vm-fq56-767f

Integer Overflow to Buffer Overflow in HLOS

Priority LOW 38

Memory corruption in HLOS while invoking IOCTL calls from user-space.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00159 Published 2023-12-05 No fix listed CWE-680
TI-2023-16217 CVE-2023-33029 · GHSA-vchp-mc49-g36w

Use After Free in DSP Service

Priority LOW 37

Memory corruption in DSP Service during a remote call from HLOS to DSP.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00116 Published 2023-10-03 No fix listed CWE-416
Load more
Open these records in search →