Read the docs

Qualcomm

Records3060All Threatist records
Exploited (KEV)12In CISA KEV
CVSS critical678CVSS 9.0–10.0
CVSS high1984CVSS 7.0–8.9

Exploited now

Qualcomm records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

186 records in Wcn7861 Firmware · all components

TI-2025-15441 CVE-2025-21480 · GHSA-gj4f-pc42-qxg8

Incorrect Authorization in Graphics Windows

Priority CRITICAL 96KEV

Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.

CVSS 3.1HIGH 8.6 Local No auth User interaction EPSS 0.00428 Published 2025-06-03 No fix listed CWE-863
TI-2025-15440 CVE-2025-21479 · GHSA-vmqr-hrfr-7527

Incorrect Authorization in Graphics

Priority CRITICAL 96KEV

Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.

CVSS 3.1HIGH 8.6 Local No auth User interaction EPSS 0.00783 Published 2025-06-03 No fix listed CWE-863
TI-2026-17287 CVE-2026-21385 · GHSA-wwwq-962j-m7x8

Integer Overflow or Wraparound in Graphics

Priority CRITICAL 93KEV

Memory corruption while using alignments for memory allocation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01316 Published 2026-03-02 No fix listed CWE-190
TI-2024-33290 CVE-2024-49839 · GHSA-qr6j-94j6-gq32

Buffer Over-read in WLAN Host Cmn

Priority MEDIUM 48

Memory corruption during management frame processing due to mismatch in T2LM info element.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00295 Published 2025-02-03 No fix listed CWE-126
TI-2025-15414 CVE-2025-21450 · GHSA-f96p-7qr6-2qh9

Improper Authentication in GPS_GNSS

Priority MEDIUM 47

Cryptographic issue occurs due to use of insecure connection method while downloading.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00316 Published 2025-07-08 No fix listed CWE-287
TI-2024-25658 CVE-2024-38408 · GHSA-wqm7-xh9j-c3ff

Cryptographic Issues in BT Controller

Priority MEDIUM 44

Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00145 Published 2024-11-04 No fix listed CWE-310
TI-2026-20417 CVE-2026-25289 · GHSA-668h-p75c-x2rp

Stack-based Buffer Overflow in WLAN Firmware

Priority MEDIUM 42

Memory Corruption when processing Device Capability Extended attributes in certain NAN Service Discovery Frames with invalid length values.

CVSS 3.1CRITICAL 9.6 Adjacent network No auth No interaction EPSS 0.00193 Published 2026-08-04 No fix listed CWE-121
Priority MEDIUM 41

Information disclosure while decoding this RTP packet headers received by UE from the network when the padding bit is set.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00274 Published 2025-09-24 No fix listed CWE-126
Priority MEDIUM 41

Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00269 Published 2025-09-24 No fix listed CWE-126
Priority MEDIUM 41

Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00269 Published 2025-09-24 No fix listed CWE-126
Priority MEDIUM 41

Information disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00308 Published 2025-06-03 No fix listed CWE-126
Priority MEDIUM 41

Information disclosure may occur while decoding the RTP packet with invalid header extension from network.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00255 Published 2025-06-03 No fix listed CWE-126
Priority MEDIUM 41

Information disclosure may occur while decoding the RTP packet with improper header length for number of contributing sources.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00255 Published 2025-06-03 No fix listed CWE-126
TI-2024-33289 CVE-2024-49838 · GHSA-g3x4-qg6f-w8x2

Buffer Over-read in WLAN HOST

Priority MEDIUM 41

Information disclosure while parsing the OCI IE with invalid length.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00308 Published 2025-02-03 No fix listed CWE-126
TI-2026-20407 CVE-2026-25275 · GHSA-r23j-xxqv-w996

Buffer Over-read in WLAN Firmware

Priority LOW 39

Transient DOS when processing authentication frames with invalid FILS information element header lengths.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00345 Published 2026-09-17 No fix listed CWE-126
TI-2026-20405 CVE-2026-25268 · GHSA-685v-jj9g-mfg9

Stack-based Buffer Overflow in WLAN Host

Priority LOW 39

Memory Corruption when processing invalid HT40 channel layouts during dynamic channel switching operations.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00106 Published 2026-07-06 No fix listed CWE-121
TI-2025-29904 CVE-2025-47392 · GHSA-2986-hg3w-pgmr

Integer Overflow or Wraparound in GPS

Priority LOW 39

Memory corruption when decoding corrupted satellite data files with invalid signature offsets.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00173 Published 2026-04-06 No fix listed CWE-190
TI-2025-19936 CVE-2025-27066 · GHSA-hgjc-f253-c7xh

Reachable Assertion in WLAN Firmware

Priority LOW 39

Transient DOS while processing an ANQP message.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0033 Published 2025-08-06 No fix listed CWE-617
TI-2025-15422 CVE-2025-21459 · GHSA-5587-5jwr-xc28

Buffer Over-read in WLAN Host Communication

Priority LOW 39

Transient DOS while parsing per STA profile in ML IE.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00351 Published 2025-05-06 No fix listed CWE-126
Load more
Open these records in search →