Qualcomm
Page 2 of 4 — Qualcomm CVEs from a corpus of 387, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-47380 | High | 7.8 | 2026-01-07 | Memory corruption while preprocessing IOCTLs in sensors. |
CVE-2025-47369 | Medium | 5.5 | 2026-01-07 | Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID. |
CVE-2025-47356 | High | 7.8 | 2026-01-07 | Memory Corruption when multiple threads concurrently access and modify shared resources. |
CVE-2025-47348 | High | 7.8 | 2026-01-07 | Memory corruption while processing identity credential operations in the trusted application. |
CVE-2025-47346 | High | 7.8 | 2026-01-07 | Memory corruption while processing a secure logging command in the trusted application. |
CVE-2025-47345 | High | 8.4 | 2026-01-07 | Cryptographic issue may occur while encrypting license data. |
CVE-2025-47344 | Medium | 6.7 | 2026-01-07 | Memory corruption while handling sensor utility operations. |
CVE-2025-47343 | High | 7.8 | 2026-01-07 | Memory corruption while processing a video session to set video parameters. |
CVE-2025-47339 | High | 7.8 | 2026-01-07 | Memory corruption while deinitializing a HDCP session. |
CVE-2025-47337 | Medium | 6.7 | 2026-01-07 | Memory corruption while accessing a synchronization object during concurrent operations. |
CVE-2025-47336 | Medium | 6.7 | 2026-01-07 | Memory corruption while performing sensor register read operations. |
CVE-2025-47335 | Medium | 6.7 | 2026-01-07 | Memory corruption while parsing clock configuration data for a specific hardware type. |
CVE-2025-47334 | Medium | 6.7 | 2026-01-07 | Memory corruption while processing shared command buffer packet between camera userspace and kernel. |
CVE-2025-47333 | Medium | 6.6 | 2026-01-07 | Memory corruption while handling buffer mapping operations in the cryptographic driver. |
CVE-2025-47332 | Medium | 6.7 | 2026-01-07 | Memory corruption while processing a config call from userspace. |
CVE-2025-47331 | Medium | 6.1 | 2026-01-07 | Information disclosure while processing a firmware event. |
CVE-2025-47330 | Medium | 5.5 | 2026-01-07 | Transient DOS while parsing video packets received from the video firmware. |
CVE-2025-47387 | High | 7.8 | 2025-12-18 | Memory Corruption when processing IOCTLs for JPEG data without verification. |
CVE-2025-47382 | High | 7.8 | 2025-12-18 | Memory corruption while loading an invalid firmware in boot loader. |
CVE-2025-47372 | Critical | 9.0 | 2025-12-18 | Memory Corruption when a corrupted ELF image with an oversized file size is read into a buffer without authentication. |
CVE-2025-47350 | High | 7.8 | 2025-12-18 | Memory corruption while handling concurrent memory mapping and unmapping requests from a user-space application. |
CVE-2025-47325 | Medium | 6.5 | 2025-12-18 | Information disclosure while processing system calls with invalid parameters. |
CVE-2025-47323 | High | 7.8 | 2025-12-18 | Memory corruption while routing GPR packets between user and root when handling large data packet. |
CVE-2025-47322 | High | 7.8 | 2025-12-18 | Memory corruption while handling IOCTL calls to set mode. |
CVE-2025-47321 | High | 7.8 | 2025-12-18 | Memory corruption while copying packets received from unix clients. |
CVE-2025-47320 | High | 7.8 | 2025-12-18 | Memory corruption while processing MFC channel configuration during music playback. |
CVE-2025-47319 | Medium | 6.7 | 2025-12-18 | Information disclosure while exposing internal TA-to-TA communication APIs to HLOS |
CVE-2025-27063 | High | 7.8 | 2025-12-18 | Memory corruption during video playback when video session open fails with time out error. |
CVE-2025-24857 | High | 7.6 | 2025-12-10 | Improper access control for volatile memory containing boot code in Universal Boot Loader (U-Boot) before 2017.11 and Qualcomm chips IPQ4019, IPQ5018, IPQ5322… |
CVE-2025-47370 | Medium | 6.5 | 2025-11-04 | Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan. |
CVE-2025-47368 | High | 7.8 | 2025-11-04 | Memory corruption when dereferencing an invalid userspace address in a user buffer during MCDM IOCTL processing. |
CVE-2025-47367 | High | 7.8 | 2025-11-04 | Memory corruption while accessing a buffer during IOCTL processing. |
CVE-2025-47365 | High | 7.8 | 2025-11-04 | Memory corruption while processing large input data from a remote source via a communication interface. |
CVE-2025-47362 | Medium | 6.1 | 2025-11-04 | Information disclosure while processing message from client with invalid payload. |
CVE-2025-47361 | High | 7.8 | 2025-11-04 | Memory corruption when triggering a subsystem crash with an out-of-range identifier. |
CVE-2025-47360 | High | 7.8 | 2025-11-04 | Memory corruption while processing client message during device management. |
CVE-2025-47357 | High | 8.0 | 2025-11-04 | Information Disclosure when a user-level driver performs QFPROM read or write operations on Fuse regions. |
CVE-2025-47353 | High | 7.8 | 2025-11-04 | Memory corruption while processing request sent from GVM. |
CVE-2025-47352 | High | 7.8 | 2025-11-04 | Memory corruption while processing audio streaming operations. |
CVE-2025-27074 | High | 8.8 | 2025-11-04 | Memory corruption while processing a GP command response. |
CVE-2025-27070 | High | 7.8 | 2025-11-04 | Memory corruption while performing encryption and decryption commands. |
CVE-2025-27064 | Medium | 6.1 | 2025-11-04 | Information disclosure while registering commands from clients with diag through diagHal. |
CVE-2025-47355 | High | 7.8 | 2025-10-09 | Memory corruption while invoking remote procedure IOCTL calls. |
CVE-2025-47354 | High | 7.8 | 2025-10-09 | Memory corruption while allocating buffers in DSP service. |
CVE-2025-47351 | High | 7.8 | 2025-10-09 | Memory corruption while processing user buffers. |
CVE-2025-47349 | High | 7.8 | 2025-10-09 | Memory corruption while processing an escape call. |
CVE-2025-47347 | High | 7.8 | 2025-10-09 | Memory corruption while processing control commands in the virtual memory management interface. |
CVE-2025-47342 | High | 7.1 | 2025-10-09 | Transient DOS may occur when multi-profile concurrency arises with QHS enabled. |
CVE-2025-47341 | High | 7.8 | 2025-10-09 | memory corruption while processing an image encoding completion event. |
CVE-2025-47340 | High | 7.8 | 2025-10-09 | Memory corruption while processing IOCTL call to get the mapping. |
CVE-2025-47338 | High | 7.8 | 2025-10-09 | Memory corruption while processing escape commands from userspace. |
CVE-2025-27060 | High | 8.8 | 2025-10-09 | Memory corruption while performing SCM call with malformed inputs. |
CVE-2025-27059 | High | 8.8 | 2025-10-09 | Memory corruption while performing SCM call. |
CVE-2025-27054 | High | 7.8 | 2025-10-09 | Memory corruption while processing a malformed license file during reboot. |
CVE-2025-27053 | High | 7.8 | 2025-10-09 | Memory corruption during PlayReady APP usecase while processing TA commands. |
CVE-2025-27049 | Medium | 5.5 | 2025-10-09 | Transient DOS while processing IOCTL call for image encoding. |
CVE-2025-27048 | High | 7.8 | 2025-10-09 | Memory corruption while processing camera platform driver IOCTL calls. |
CVE-2025-27045 | Medium | 6.1 | 2025-10-09 | Information disclosure while processing batch command execution in Video driver. |
CVE-2025-27041 | Medium | 5.5 | 2025-10-09 | Transient DOS while processing video packets received from video firmware. |
CVE-2025-27040 | Medium | 6.5 | 2025-10-09 | Information disclosure may occur while processing the hypervisor log. |
CVE-2025-27039 | Medium | 6.6 | 2025-10-09 | Memory corruption may occur while processing IOCTL call for DMM/WARPNCC CONFIG request. |
CVE-2025-47329 | High | 7.8 | 2025-09-24 | Memory corruption while handling invalid inputs in application info setup. |
CVE-2025-47328 | High | 7.5 | 2025-09-24 | Transient DOS while processing power control requests with invalid antenna or stream values. |
CVE-2025-47327 | High | 7.8 | 2025-09-24 | Memory corruption while encoding the image data. |
CVE-2025-47326 | High | 7.5 | 2025-09-24 | Transient DOS while handling command data during power control processing. |
CVE-2025-47318 | High | 7.5 | 2025-09-24 | Transient DOS while parsing the EPTM test control message to get the test pattern. |
CVE-2025-47317 | High | 7.8 | 2025-09-24 | Memory corruption due to global buffer overflow when a test command uses an invalid payload type. |
CVE-2025-47316 | High | 7.8 | 2025-09-24 | Memory corruption due to double free when multiple threads race to set the timestamp store. |
CVE-2025-47315 | High | 7.8 | 2025-09-24 | Memory corruption while handling repeated memory unmap requests from guest VM. |
CVE-2025-47314 | High | 7.8 | 2025-09-24 | Memory corruption while processing data sent by FE driver. |
CVE-2025-27077 | High | 7.8 | 2025-09-24 | Memory corruption while processing message in guest VM. |
CVE-2025-27037 | High | 7.8 | 2025-09-24 | Memory corruption while processing config_dev IOCTL when camera kernel driver drops its reference to CPU buffers. |
CVE-2025-27036 | Medium | 6.1 | 2025-09-24 | Information disclosure when Video engine escape input data is less than expected minimum size. |
CVE-2025-27034 | Critical | 9.8 | 2025-09-24 | Memory corruption while selecting the PLMN from SOR failed list. |
CVE-2025-27033 | Medium | 6.1 | 2025-09-24 | Information disclosure while running video usecase having rogue firmware. |
CVE-2025-27032 | High | 7.8 | 2025-09-24 | memory corruption while loading a PIL authenticated VM, when authenticated VM image is loaded without maintaining cache coherency. |
CVE-2025-27030 | Medium | 6.1 | 2025-09-24 | information disclosure while invoking calibration data from user space to update firmware size. |
CVE-2025-21488 | High | 8.2 | 2025-09-24 | Information disclosure while decoding this RTP packet headers received by UE from the network when the padding bit is set. |
CVE-2025-21487 | High | 8.2 | 2025-09-24 | Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length. |
CVE-2025-21484 | High | 8.2 | 2025-09-24 | Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet. |
CVE-2025-21483 | Critical | 9.8 | 2025-09-24 | Memory corruption when the UE receives an RTP packet from the network, during the reassembly of NALUs. |
CVE-2025-21482 | High | 7.1 | 2025-09-24 | Cryptographic issue while performing RSA PKCS padding decoding. |
CVE-2025-21481 | High | 7.8 | 2025-09-24 | Memory corruption while performing private key encryption in trusted application. |
CVE-2025-21476 | High | 7.8 | 2025-09-24 | Memory corruption when passing parameters to the Trusted Virtual Machine during the handshake. |
CVE-2025-47324 | High | 7.5 | 2025-08-06 | Information disclosure while accessing and modifying the PIB file of a remote device via powerline. |
CVE-2025-27076 | High | 7.8 | 2025-08-06 | Memory corruption while processing simultaneous requests via escape path. |
CVE-2025-27075 | High | 7.8 | 2025-08-06 | Memory corruption while processing IOCTL command with larger buffer in Bluetooth Host. |
CVE-2025-27073 | High | 7.5 | 2025-08-06 | Transient DOS while creating NDP instance. |
CVE-2025-27072 | Medium | 5.5 | 2025-08-06 | Information disclosure while processing a packet at EAVB BE side with invalid header length. |
CVE-2025-27071 | High | 7.3 | 2025-08-06 | Memory corruption while processing specific files in Powerline Communication Firmware. |
CVE-2025-27069 | High | 7.8 | 2025-08-06 | Memory corruption while processing DDI command calls. |
CVE-2025-27068 | High | 7.8 | 2025-08-06 | Memory corruption while processing an IOCTL command with an arbitrary address. |
CVE-2025-27067 | High | 7.8 | 2025-08-06 | Memory corruption while processing DDI call with invalid buffer. |
CVE-2025-27066 | High | 7.5 | 2025-08-06 | Transient DOS while processing an ANQP message. |
CVE-2025-27065 | High | 7.5 | 2025-08-06 | Transient DOS while processing a frame with malformed shared-key descriptor. |
CVE-2025-27062 | High | 7.8 | 2025-08-06 | Memory corruption while handling client exceptions, allowing unauthorized channel access. |
CVE-2025-21477 | High | 7.5 | 2025-08-06 | Transient DOS while processing CCCH data when NW sends data with invalid length. |
CVE-2025-21474 | High | 7.8 | 2025-08-06 | Memory corruption while processing commands from A2dp sink command queue. |
CVE-2025-21473 | High | 7.8 | 2025-08-06 | Memory corruption when using Virtual cdm (Camera Data Mover) to write registers. |
CVE-2025-21472 | Medium | 5.5 | 2025-08-06 | Information disclosure while capturing logs as eSE debug messages are logged. |