Qualcomm, Inc.

2956 CVEs across 218 Qualcomm, Inc. products. Browse Qualcomm, Inc. vulnerabilities, severities, and proof-of-concept exploits.

Qualcomm, Inc. products with known CVEs

ProductCVEs
Snapdragon962
Android For Msm, Firefox OS For Msm, Qrd Android306
All Qualcomm Products194
Snapdragon Mobile, Snapdragon Wear132
Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear123
Snapdragon Mobile114
Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Iot, Snapdragon Industrial Iot, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables73
Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Iot, Snapdragon Industrial Iot, Snapdragon Iot, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables50
Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer Iot, Snapdragon Industrial Iot, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure And Networking47
Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Iot, Snapdragon Industrial Iot, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables45
Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Iot, Snapdragon Industrial Iot, Snapdragon Iot, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables41
Snapdragon Automobile, Snapdragon Mobile39
Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Iot, Snapdragon Industrial Iot, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure And Networking33
Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Iot, Snapdragon Industrial Iot, Snapdragon Mobile, Snapdragon Wearables33
Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer Iot, Snapdragon Industrial Iot, Snapdragon Iot, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure And Networking28
Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Iot, Snapdragon Industrial Iot, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure And Networking22
Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Iot, Snapdragon Industrial Iot, Snapdragon Mobile, Snapdragon Wearables22
Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial Iot, Snapdragon Mobile22
Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer Iot, Snapdragon Industrial Iot, Snapdragon Iot, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure And Networking21
Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Iot, Snapdragon Industrial Iot, Snapdragon Mobile20
Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Iot, Snapdragon Industrial Iot, Snapdragon Iot, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure And Networking18
Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer Iot, Snapdragon Industrial Iot, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables17
Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Iot, Snapdragon Industrial Iot, Snapdragon Mobile, Snapdragon Wired Infrastructure And Networking15
Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer Iot, Snapdragon Industrial Iot, Snapdragon Mobile, Snapdragon Voice & Music15
Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer Iot, Snapdragon Industrial Iot, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure And Networking14
Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Iot, Snapdragon Industrial Iot, Snapdragon Mobile14
Snapdragon Auto13
Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Iot, Snapdragon Industrial Iot, Snapdragon Wearables12
Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer Iot, Snapdragon Industrial Iot, Snapdragon Mobile, Snapdragon Voice & Music11
Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer Iot, Snapdragon Industrial Iot, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables11
Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Iot, Snapdragon Industrial Iot, Snapdragon Iot, Snapdragon Voice & Music, Snapdragon Wearables10
Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Iot, Snapdragon Industrial Iot, Snapdragon Mobile, Snapdragon Voice & Music10
Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer Iot, Snapdragon Industrial Iot, Snapdragon Mobile, Snapdragon Voice & Music10
Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Iot, Snapdragon Industrial Iot, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure And Networking10
Snapdragon Auto, Snapdragon Consumer Iot, Snapdragon Industrial Iot, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables10
Snapdragon Wired Infrastructure And Networking10
Snapdragon Connectivity, Snapdragon Mobile9
Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile8
Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer Iot, Snapdragon Industrial Iot, Snapdragon Mobile8
Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Iot, Snapdragon Industrial Iot, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure And Networking8
Snapdragon Auto, Snapdragon Consumer Iot, Snapdragon Industrial Iot, Snapdragon Mobile, Snapdragon Voice & Music8
Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Iot, Snapdragon Industrial Iot, Snapdragon Voice & Music, Snapdragon Wearables7
Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial Iot, Snapdragon Mobile, Snapdragon Wearables7
Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Iot, Snapdragon Industrial Iot, Snapdragon Mobile, Snapdragon Voice & Music7
Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Iot, Snapdragon Industrial Iot, Snapdragon Iot, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables7
Snapdragon Auto, Snapdragon Consumer Iot, Snapdragon Industrial Iot, Snapdragon Mobile7
Snapdragon Auto, Snapdragon Consumer Iot, Snapdragon Mobile7
Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial Iot, Snapdragon Mobile7
Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer Iot, Snapdragon Industrial Iot, Snapdragon Iot, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables6
Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Iot, Snapdragon Industrial Iot, Snapdragon Voice & Music, Snapdragon Wired Infrastructure And Networking6
Qualcomm, Inc. CVEs — newest first (page 1 of 30)
CVESeverityScorePublishedSummary
CVE-2026-25292High7.62026-08-04Memory Corruption when processing untrusted user input in the fastboot command handler for audio framework configuration.
CVE-2026-25289Critical9.62026-08-04Memory Corruption when processing Device Capability Extended attributes in certain NAN Service Discovery Frames with invalid length values.
CVE-2026-25288High7.42026-08-04Transient DOS when processing a short target wake time channel usage response frame with insufficient packet size.
CVE-2026-24084High7.52026-08-04Weak configuration when UE does not verify the consistency of its additional security capabilities with the replayed capabilities.
CVE-2026-24083High7.82026-08-04Memory Corruption while processing IOCTL device driver requests with invalid arguments.
CVE-2026-24080High7.82026-08-04Memory Corruption when handling malformed request parameters in the fingerprint TA.
CVE-2026-24079High8.12026-08-04Cryptographic Issue while processing registration requests with malformed or missing authentication parameters.
CVE-2026-24078Medium6.52026-08-04Information Disclosure when IPSec negotiation fails or is not established properly during NG-eCall SIP signaling.
CVE-2026-24077Medium6.52026-08-04Information Disclosure when processing wireless network channel switch information with improperly formatted length fields.
CVE-2026-24076Medium6.72026-08-04Memory Corruption when processing registry values with incorrect types using a direct query method.
CVE-2026-21366High7.82026-08-04Memory corruption while processing a packet with a size close to the maximum allowed value.
CVE-2026-25271High7.82026-07-06Memory Corruption when processing asynchronous input parameters due to improper handling of modified values between check and use.
CVE-2026-25268High8.82026-07-06Memory Corruption when processing invalid HT40 channel layouts during dynamic channel switching operations.
CVE-2026-21384Medium5.32026-07-06Memory Corruption when updating prepared commands with invalid port indices based on user space input exceeds supported read client limits.
CVE-2026-21383High7.12026-07-06Cryptographic Issue when using a static initialization vector for AES-GCM key wrapping, which requires a unique value for each call to ensure security.
CVE-2026-21379High7.82026-07-06Memory Corruption when allocating memory with sizes that exceed the maximum allowed value.
CVE-2026-21370Medium5.32026-07-06Memory Corruption when validating input batch size and buffer plane count exceeds maximum allowed values.
CVE-2026-21369Medium5.32026-07-06Memory Corruption when handling flash commands due to outdated LED count values being used after userspace modification.
CVE-2026-21368Medium5.32026-07-06Memory Corruption when parsing jpeg commands due to unaccounted extra writes to the buffer during validation checks.
CVE-2025-59617Medium6.62026-07-06Memory Corruption when processing multiple IOCTL calls with the same buffer file descriptor input.
CVE-2025-59616Medium6.62026-07-06Memory Corruption when processing multiple IOCTL calls with the same buffer file descriptor input due to accessing already freed memory.
CVE-2025-59615Medium6.62026-07-06Memory Corruption when invoking device input/output control operations for mapping and unmapping persistent memory buffers due to improper synchronization.
CVE-2026-25277High8.82026-06-01Memory corruption while using Strongbox due to buffer overflow.
CVE-2026-25276High8.82026-06-01Memory corruption while using Strongbox due to missing bounds check.
CVE-2026-25260High7.82026-06-01Memory Corruption when accessing shared buffers without validation of concurrent user-mode input modifications.
CVE-2026-25259High7.82026-06-01Memory corruption while processing multiple IOCTL command for escape operations.
CVE-2026-25258High7.82026-06-01Memory corruption while processing IOCTL calls for escape operations.
CVE-2026-24092High7.22026-06-01Memory Corruption when processing fastboot commands to set display mode.
CVE-2026-24091High7.22026-06-01Memory corruption while processing fastboot commands with improperly formatted input.
CVE-2026-24090High7.12026-06-01Cryptographic issue while processing partition table entries allows unauthorized modification of boot flow.
CVE-2026-24089High7.22026-06-01Memory corruption while processing fastboot commands with invalid input.
CVE-2026-24088High8.22026-06-01Cryptographic Issue while processing a specific partition which allows unauthorized write access to load a customized bootloader.
CVE-2026-24087High7.22026-06-01Memory corruption while processing fastboot OEM commands.
CVE-2026-24085High7.22026-06-01Memory Corruption when processing display command line information due to improper initialization of a variable.
CVE-2025-59614Medium6.72026-06-01Memory Corruption when sending random number generator command with insufficient output buffer size.
CVE-2025-59613Medium6.72026-06-01Memory Corruption when output buffer size is smaller than input buffer size during data copying operation.
CVE-2025-59612Medium6.72026-06-01Memory corruption in windows drivers while sending incorrect trusted application request
CVE-2025-59611Medium6.72026-06-01Memory corruption in diagnostic services due to absence of input validation
CVE-2025-59610Medium6.42026-06-01Memory Corruption when processing IOCTL requests with mismatched API versions due to concurrent modification of user-space buffer.
CVE-2025-59609Medium5.52026-06-01Information Disclosure when processing advertisement frames with malformed MBSSID elements of insufficient length.
CVE-2025-59606High7.82026-06-01Memory Corruption when writing to invalid memory locations occurs due to heap memory exhaustion during secure data initialization.
CVE-2025-59605High7.82026-06-01Memory Corruption when processing device identifier strings that exceed the expected maximum length.
CVE-2025-59604High7.82026-06-01Memory Corruption when running a memory copy operation due to invalid writes caused by a null pointer.
CVE-2025-59601Medium6.52026-06-01Information Disclosure when resetting device to factory default settings through powerline interface allows unauthorized access to device configuration.
CVE-2026-25293Critical9.62026-05-04Buffer overflow due to incorrect authorization in PLC FW
CVE-2026-25266Medium5.52026-05-04Memory corruption while processing IOCTL command when device is in power-save state.
CVE-2026-24082High7.82026-05-04Memory Corruption when copying data from a freed source while executing performance counter deselect operation.
CVE-2025-47408High7.82026-05-04Memory corruption when another driver calls an IOCTL with invalid input/output buffer.
CVE-2025-47407High7.82026-05-04Memory corruption while creating a process on the digital signal processor due to allocation failure at the kernel level.
CVE-2025-47406Medium6.12026-05-04Information Disclosure while processing IOCTL handler callbacks without verifying buffer size.
CVE-2025-47405High7.82026-05-04Memory corruption when processing camera sensor input/output control codes with invalid output buffers.
CVE-2025-47404Medium6.52026-05-04Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified.
CVE-2025-47403Medium6.52026-05-04Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming.
CVE-2025-47401Medium6.52026-05-04Transient DOS when processing target power rate tables during channel configuration.
CVE-2026-21382High7.82026-04-06Memory Corruption when handling power management requests with improperly sized input/output buffers.
CVE-2026-21381High7.62026-04-06Transient DOS when receiving a service data frame with excessive length during device matching over a neighborhood awareness network protocol connection.
CVE-2026-21380High7.82026-04-06Memory Corruption when using deprecated DMABUF IOCTL calls to manage video memory.
CVE-2026-21378High7.82026-04-06Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver.
CVE-2026-21376High7.82026-04-06Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver.
CVE-2026-21375High7.82026-04-06Memory Corruption when accessing an output buffer without validating its size during IOCTL processing.
CVE-2026-21374High7.82026-04-06Memory Corruption when processing auxiliary sensor input/output control commands with insufficient buffer size validation.
CVE-2026-21373High7.82026-04-06Memory Corruption when accessing an output buffer without validating its size during IOCTL processing.
CVE-2026-21372High7.82026-04-06Memory Corruption when sending IOCTL requests with invalid buffer sizes during memcpy operations.
CVE-2026-21371High7.82026-04-06Memory Corruption when retrieving output buffer with insufficient size validation.
CVE-2026-21367High7.62026-04-06Transient DOS when processing nonstandard FILS Discovery Frames with out-of-range action sizes during initial scans.
CVE-2025-47400High7.12026-04-06Cryptographic issue while copying data to a destination buffer without validating its size.
CVE-2025-47392High8.82026-04-06Memory corruption when decoding corrupted satellite data files with invalid signature offsets.
CVE-2025-47391High7.82026-04-06Memory corruption while processing a frame request from user.
CVE-2025-47390High7.82026-04-06Memory corruption while preprocessing IOCTL request in JPEG driver.
CVE-2025-47389High7.82026-04-06Memory corruption when buffer copy operation fails due to integer overflow during attestation report generation.
CVE-2025-47374Medium6.52026-04-06Memory Corruption when accessing freed memory due to concurrent fence deregistration and signal handling.
CVE-2026-21385High7.82026-03-02Memory corruption while using alignments for memory allocation.
CVE-2025-59603High7.82026-03-02Memory Corruption when processing invalid user address with nonstandard buffer address.
CVE-2025-59600High7.82026-03-02Memory Corruption when adding user-supplied data without checking available buffer space.
CVE-2025-47386High7.82026-03-02Memory Corruption while invoking IOCTL calls when concurrent access to shared buffer occurs.
CVE-2025-47385High7.82026-03-02Memory Corruption when accessing trusted execution environment without proper privilege check.
CVE-2025-47384Medium6.52026-03-02Transient DOS when MAC configures config id greater than supported maximum value.
CVE-2025-47383High7.22026-03-02Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE.
CVE-2025-47381High7.82026-03-02Memory Corruption while processing IOCTL calls when concurrent access to shared buffer occurs.
CVE-2025-47379High7.82026-03-02Memory Corruption when concurrent access to shared buffer occurs due to improper synchronization between assignment and deallocation of buffer resources.
CVE-2025-47378High7.12026-03-02Cryptographic Issue when a shared VM reference allows HLOS to boot loader and access cert chain.
CVE-2025-47377High7.82026-03-02Memory Corruption when accessing a buffer after it has been freed while processing IOCTL calls.
CVE-2025-47376High7.82026-03-02Memory Corruption when concurrent access to shared buffer occurs during IOCTL calls.
CVE-2025-47375High7.82026-03-02Memory corruption while handling different IOCTL calls from the user-space simultaneously.
CVE-2025-47373High7.82026-03-02Memory Corruption when accessing buffers with invalid length during TA invocation.
CVE-2025-47371Medium6.52026-03-02Transient DOS when an LTE RLC packet with invalid TB is received by UE.
CVE-2025-47402Medium6.52026-02-02Transient DOS when processing a received frame with an excessively large authentication information element.
CVE-2025-47399High7.82026-02-02Memory Corruption while processing IOCTL call to update sensor property settings with invalid input parameters.
CVE-2025-47398High7.82026-02-02Memory Corruption while deallocating graphics processing unit memory buffers due to improper handling of memory pointers.
CVE-2025-47397High7.82026-02-02Memory Corruption when initiating GPU memory mapping using scatter-gather lists due to unchecked IOMMU mapping errors.
CVE-2025-47366High7.12026-02-02Cryptographic issue when a Trusted Zone with outdated code is triggered by a HLOS providing incorrect input.
CVE-2025-47364Medium6.82026-02-02Memory corruption while calculating offset from partition start point.
CVE-2025-47363Medium6.82026-02-02Memory corruption when calculating oversized partition sizes without proper checks.
CVE-2025-47359High7.82026-02-02Memory Corruption when multiple threads simultaneously access a memory free API.
CVE-2025-47358High7.82026-02-02Memory Corruption when user space address is modified and passed to mem_free API, causing kernel memory to be freed inadvertently.
CVE-2025-47396High7.82026-01-07Memory corruption occurs when a secure application is launched on a device with insufficient memory.
CVE-2025-47395Medium6.52026-01-07Transient DOS while parsing a WLAN management frame with a Vendor Specific Information Element.
CVE-2025-47394High7.82026-01-07Memory corruption when copying overlapping buffers during memory operations due to incorrect offset calculations.
CVE-2025-47393High7.82026-01-07Memory corruption when accessing resources in kernel driver.
CVE-2025-47388High7.82026-01-07Memory corruption while passing pages to DSP with an unaligned starting address.