Qualcomm
Page 3 of 4 — Qualcomm CVEs from a corpus of 387, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-21465 | Medium | 6.5 | 2025-08-06 | Information disclosure while processing the hash segment in an MBN file. |
CVE-2025-21464 | Medium | 6.5 | 2025-08-06 | Information disclosure while reading data from an image using specified offset and size parameters. |
CVE-2025-21461 | High | 7.8 | 2025-08-06 | Memory corruption when programming registers through virtual CDM. |
CVE-2025-21458 | High | 7.8 | 2025-08-06 | Memory corruption when IOCTL interface is called to map and unmap buffers simultaneously. |
CVE-2025-21457 | Medium | 6.1 | 2025-08-06 | Information disclosure while opening a fastrpc session when domain is not sanitized. |
CVE-2025-21456 | High | 7.8 | 2025-08-06 | Memory corruption while processing IOCTL command when multiple threads are called to map/unmap buffer concurrently. |
CVE-2025-21455 | High | 7.8 | 2025-08-06 | Memory corruption while submitting blob data to kernel space though IOCTL. |
CVE-2025-21452 | High | 7.5 | 2025-08-06 | Transient DOS while processing a random-access response (RAR) with an invalid PDU length on LTE network. |
CVE-2025-27061 | High | 7.8 | 2025-07-08 | Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmware. |
CVE-2025-27058 | High | 7.8 | 2025-07-08 | Memory corruption while processing packet data with exceedingly large packet. |
CVE-2025-27057 | High | 7.5 | 2025-07-08 | Transient DOS while handling beacon frames with invalid IE header length. |
CVE-2025-27056 | High | 7.8 | 2025-07-08 | Memory corruption during sub-system restart while processing clean-up to free up resources. |
CVE-2025-27055 | High | 7.8 | 2025-07-08 | Memory corruption during the image encoding process. |
CVE-2025-27052 | High | 7.8 | 2025-07-08 | Memory corruption while processing data packets in diag received from Unix clients. |
CVE-2025-27051 | High | 7.8 | 2025-07-08 | Memory corruption while processing command message in WLAN Host. |
CVE-2025-27050 | High | 7.8 | 2025-07-08 | Memory corruption while processing event close when client process terminates abruptly. |
CVE-2025-27047 | High | 7.8 | 2025-07-08 | Memory corruption while processing the TESTPATTERNCONFIG escape path. |
CVE-2025-27046 | High | 7.8 | 2025-07-08 | Memory corruption while processing multiple simultaneous escape calls. |
CVE-2025-27044 | High | 7.8 | 2025-07-08 | Memory corruption while executing timestamp video decode command with large input values. |
CVE-2025-27043 | High | 7.8 | 2025-07-08 | Memory corruption while processing manipulated payload in video firmware. |
CVE-2025-27042 | High | 7.8 | 2025-07-08 | Memory corruption while processing video packets received from video firmware. |
CVE-2025-21466 | High | 7.8 | 2025-07-08 | Memory corruption while processing a private escape command in an event trigger. |
CVE-2025-21454 | High | 7.5 | 2025-07-08 | Transient DOS while processing received beacon frame. |
CVE-2025-21450 | Critical | 9.1 | 2025-07-08 | Cryptographic issue occurs due to use of insecure connection method while downloading. |
CVE-2025-21449 | High | 7.5 | 2025-07-08 | Transient DOS may occur while processing malformed length field in SSID IEs. |
CVE-2025-21446 | High | 7.5 | 2025-07-08 | Transient DOS may occur when processing vendor-specific information elements while parsing a WLAN frame for BTM requests. |
CVE-2025-21445 | High | 7.8 | 2025-07-08 | Memory corruption while copying the result to the transmission queue which is shared between the virtual machine and the host. |
CVE-2025-21444 | High | 7.8 | 2025-07-08 | Memory corruption while copying the result to the transmission queue in EMAC. |
CVE-2025-21433 | Medium | 6.2 | 2025-07-08 | Transient DOS when importing a PKCS#8-encoded RSA private key with a zero-sized modulus. |
CVE-2025-21432 | High | 7.8 | 2025-07-08 | Memory corruption while retrieving the CBOR data from TA. |
CVE-2025-21427 | High | 8.2 | 2025-07-08 | Information disclosure while decoding this RTP packet Payload when UE receives the RTP packet from the network. |
CVE-2025-21426 | Medium | 6.6 | 2025-07-08 | Memory corruption while processing camera TPG write request. |
CVE-2025-21422 | High | 7.1 | 2025-07-08 | Cryptographic issue while processing crypto API calls, missing checks may lead to corrupted key usage or IV reuses. |
CVE-2024-53009 | Medium | 5.3 | 2025-07-08 | Memory corruption while operating the mailbox in Automotive. |
CVE-2025-21479 | High | 8.6 | 2025-06-03 | Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands. |
CVE-2025-27038 | High | 7.5 | 2025-06-03 | Memory corruption while rendering graphics using Adreno GPU drivers in Chrome. |
CVE-2025-27031 | High | 7.8 | 2025-06-03 | memory corruption while processing IOCTL commands, when the buffer in write loopback mode is accessed after being freed. |
CVE-2025-27029 | High | 7.5 | 2025-06-03 | Transient DOS while processing the tone measurement response buffer when the response buffer is out of range. |
CVE-2025-21486 | High | 7.8 | 2025-06-03 | Memory corruption during dynamic process creation call when client is only passing address and length of shell binary. |
CVE-2025-21485 | High | 7.8 | 2025-06-03 | Memory corruption while processing INIT and multimode invoke IOCTL calls on FastRPC. |
CVE-2025-21480 | High | 8.6 | 2025-06-03 | Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands. |
CVE-2025-21463 | High | 7.5 | 2025-06-03 | Transient DOS while processing the EHT operation IE in the received beacon frame. |
CVE-2024-53026 | High | 8.2 | 2025-06-03 | Information disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call. |
CVE-2024-53021 | High | 8.2 | 2025-06-03 | Information disclosure may occur while processing goodbye RTCP packet from network. |
CVE-2024-53020 | High | 8.2 | 2025-06-03 | Information disclosure may occur while decoding the RTP packet with invalid header extension from network. |
CVE-2024-53019 | High | 8.2 | 2025-06-03 | Information disclosure may occur while decoding the RTP packet with improper header length for number of contributing sources. |
CVE-2024-53018 | Medium | 6.6 | 2025-06-03 | Memory corruption may occur while processing the OIS packet parser. |
CVE-2024-53017 | Medium | 6.6 | 2025-06-03 | Memory corruption while handling test pattern generator IOCTL command. |
CVE-2024-53016 | Medium | 6.6 | 2025-06-03 | Memory corruption while processing I2C settings in Camera driver. |
CVE-2024-53015 | Medium | 6.6 | 2025-06-03 | Memory corruption while processing IOCTL command to handle buffers associated with a session. |
CVE-2024-53013 | Medium | 6.6 | 2025-06-03 | Memory corruption may occur while processing voice call registration with user. |
CVE-2024-53010 | High | 7.8 | 2025-06-03 | Memory corruption may occur while attaching VM when the HLOS retains access to VM. |
CVE-2025-21475 | High | 7.8 | 2025-05-06 | Memory corruption while processing escape code, when DisplayId is passed with large unsigned value. |
CVE-2025-21470 | High | 7.8 | 2025-05-06 | Memory corruption while processing image encoding, when configuration is NULL in IOCTL parameter. |
CVE-2025-21469 | High | 7.8 | 2025-05-06 | Memory corruption while processing image encoding, when input buffer length is 0 in IOCTL call. |
CVE-2025-21468 | High | 7.8 | 2025-05-06 | Memory corruption while reading response from FW, when buffer size is changed by FW while driver is using this size to write null character at the end of buffe… |
CVE-2025-21467 | High | 7.8 | 2025-05-06 | Memory corruption while reading the FW response from the shared queue. |
CVE-2025-21462 | High | 7.8 | 2025-05-06 | Memory corruption while processing an IOCTL request, when buffer significantly exceeds the command argument limit. |
CVE-2025-21460 | High | 7.8 | 2025-05-06 | Memory corruption while processing a message, when the buffer is controlled by a Guest VM, the value can be changed continuously. |
CVE-2025-21459 | High | 7.5 | 2025-05-06 | Transient DOS while parsing per STA profile in ML IE. |
CVE-2025-21453 | High | 7.8 | 2025-05-06 | Memory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential failures occur. |
CVE-2024-49847 | High | 7.5 | 2025-05-06 | Transient DOS while processing of a registration acceptance OTA due to incorrect ciphering key data IE. |
CVE-2024-49846 | High | 8.2 | 2025-05-06 | Memory corruption while decoding of OTA messages from T3448 IE. |
CVE-2024-49845 | High | 7.8 | 2025-05-06 | Memory corruption during the FRS UDS generation process. |
CVE-2024-49844 | High | 7.8 | 2025-05-06 | Memory corruption while triggering commands in the PlayReady Trusted application. |
CVE-2024-49842 | High | 7.8 | 2025-05-06 | Memory corruption during memory mapping into protected VM address space due to incorrect API restrictions. |
CVE-2024-49841 | High | 7.8 | 2025-05-06 | Memory corruption during memory assignment to headless peripheral VM due to incorrect error code handling. |
CVE-2024-49835 | High | 7.8 | 2025-05-06 | Memory corruption while reading secure file. |
CVE-2024-49830 | Medium | 6.6 | 2025-05-06 | Memory corruption while processing an IOCTL call to set mixer controls. |
CVE-2024-49829 | Medium | 6.7 | 2025-05-06 | Memory corruption can occur during context user dumps due to inadequate checks on buffer length. |
CVE-2024-45583 | Medium | 6.6 | 2025-05-06 | Memory corruption while handling multiple IOCTL calls from userspace to operate DMA operations. |
CVE-2024-45581 | Medium | 6.6 | 2025-05-06 | Memory corruption while sound model registration for voice activation with audio kernel driver. |
CVE-2024-45579 | High | 7.8 | 2025-05-06 | Memory corruption may occur when invoking IOCTL calls from userspace to the camera kernel driver to dump request information, due to a missing memory requireme… |
CVE-2024-45578 | High | 7.8 | 2025-05-06 | Memory corruption while acquire and update IOCTLs during IFE output resource ID validation. |
CVE-2024-45577 | High | 7.8 | 2025-05-06 | Memory corruption while invoking IOCTL calls from userspace to camera kernel driver to dump request information. |
CVE-2024-45576 | High | 7.8 | 2025-05-06 | Memory corruption while prociesing command buffer buffer in OPE module. |
CVE-2024-45575 | High | 7.8 | 2025-05-06 | Memory corruption Camera kernel when large number of devices are attached through userspace. |
CVE-2024-45574 | High | 7.8 | 2025-05-06 | Memory corruption during array access in Camera kernel due to invalid index from invalid command data. |
CVE-2024-45570 | Medium | 6.6 | 2025-05-06 | Memory corruption may occur during IO configuration processing when the IO port count is invalid. |
CVE-2024-45568 | Medium | 6.7 | 2025-05-06 | Memory corruption due to improper bounds check while command handling in camera-kernel driver. |
CVE-2024-45567 | High | 7.8 | 2025-05-06 | Memory corruption while encoding JPEG format. |
CVE-2024-45566 | High | 7.8 | 2025-05-06 | Memory corruption during concurrent buffer access due to modification of the reference count. |
CVE-2024-45565 | High | 7.8 | 2025-05-06 | Memory corruption when blob structure is modified by user-space after kernel verification. |
CVE-2024-45564 | High | 7.8 | 2025-05-06 | Memory corruption during concurrent access to server info object due to incorrect reference count update. |
CVE-2024-45563 | Medium | 6.6 | 2025-05-06 | Memory corruption while handling schedule request in Camera Request Manager(CRM) due to invalid link count in the corresponding session. |
CVE-2024-45562 | Medium | 6.6 | 2025-05-06 | Memory corruption during concurrent access to server info object due to unprotected critical field. |
CVE-2024-45554 | High | 7.8 | 2025-05-06 | Memory corruption during concurrent SSR execution due to race condition on the global maps list. |
CVE-2025-21448 | High | 7.5 | 2025-04-07 | Transient DOS may occur while parsing SSID in action frames. |
CVE-2025-21447 | High | 7.8 | 2025-04-07 | Memory corruption may occur while processing device IO control call for session control. |
CVE-2025-21443 | High | 7.8 | 2025-04-07 | Memory corruption while processing message content in eAVB. |
CVE-2025-21442 | High | 7.8 | 2025-04-07 | Memory corruption while transmitting packet mapping information with invalid header payload size. |
CVE-2025-21441 | High | 7.8 | 2025-04-07 | Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver. |
CVE-2025-21440 | High | 7.8 | 2025-04-07 | Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver. |
CVE-2025-21439 | High | 7.8 | 2025-04-07 | Memory corruption may occur while reading board data via IOCTL call when the WLAN driver copies the content to the provided output buffer. |
CVE-2025-21438 | High | 7.8 | 2025-04-07 | Memory corruption while IOCTL call is invoked from user-space to read board data. |
CVE-2025-21437 | High | 7.8 | 2025-04-07 | Memory corruption while processing memory map or unmap IOCTL operations simultaneously. |
CVE-2025-21436 | High | 7.8 | 2025-04-07 | Memory corruption may occur while initiating two IOCTL calls simultaneously to create processes from two different threads. |
CVE-2025-21435 | High | 7.5 | 2025-04-07 | Transient DOS may occur while parsing extended IE in beacon. |
CVE-2025-21434 | High | 7.5 | 2025-04-07 | Transient DOS may occur while parsing EHT operation IE or EHT capability IE. |
CVE-2025-21431 | Medium | 5.5 | 2025-04-07 | Information disclosure may be there when a guest VM is connected. |