Vendor
Qualcomm
3,001 known vulnerabilities.
Products
983 results · Clear filters · Feed
-
High 7.5
Reachable Assertion in WLAN Firmware
Transient DOS while processing an ANQP message.
-
High 7.5
Buffer Over-read in WLAN Firmware
Transient DOS while processing a frame with malformed shared-key descriptor.
-
High 7.8
Improper Access Control in Automotive Multimedia
Memory corruption while handling client exceptions, allowing unauthorized channel access.
-
High 7.5
Improper Input Validation in Modem
Transient DOS while processing CCCH data when NW sends data with invalid length.
-
High 7.8
Use After Free in BTHOST
Memory corruption while processing commands from A2dp sink command queue.
-
High 7.8
Time-of-check Time-of-use (TOCTOU) Race Condition in Camera_Linux
Memory corruption when using Virtual cdm (Camera Data Mover) to write registers.
-
High 7.8
Out-of-bounds Write in Camera_Linux
Memory corruption when programming registers through virtual CDM.
-
High 7.8
Use After Free in NPU
Memory corruption when IOCTL interface is called to map and unmap buffers simultaneously.
-
High 7.8
Use After Free in NPU
Memory corruption while processing IOCTL command when multiple threads are called to map/unmap buffer concurrently.
-
High 7.8
Time-of-check Time-of-use (TOCTOU) Race Condition in Camera_Linux
Memory corruption while submitting blob data to kernel space though IOCTL.
-
High 7.5
Reachable Assertion in Modem
Transient DOS while processing a random-access response (RAR) with an invalid PDU length on LTE network.
-
High 7.8
Out-of-bounds Write in Video
Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmware.
-
High 7.8
Buffer Copy Without Checking Size of Input in Computer Vision
Memory corruption while processing packet data with exceedingly large packet.
-
High 7.5
Buffer Over-read in WLAN Host
Transient DOS while handling beacon frames with invalid IE header length.
-
High 7.8
Use After Free in DSP Service
Memory corruption during sub-system restart while processing clean-up to free up resources.
-
High 7.8
Buffer Over-read in Camera
Memory corruption during the image encoding process.
-
High 7.8
Buffer Copy Without Checking Size of Input in Core Services
Memory corruption while processing data packets in diag received from Unix clients.
-
High 7.8
Double Free in Windows WLAN Host
Memory corruption while processing command message in WLAN Host.
-
High 7.8
Use After Free in Camera
Memory corruption while processing event close when client process terminates abruptly.
-
High 7.8
Use After Free in Display
Memory corruption while processing the TESTPATTERNCONFIG escape path.
-
High 7.8
Double Free in Display
Memory corruption while processing multiple simultaneous escape calls.
-
High 7.8
Out-of-bounds Write in Video
Memory corruption while executing timestamp video decode command with large input values.
-
High 7.8
Buffer Copy Without Checking Size of Input in Video
Memory corruption while processing manipulated payload in video firmware.
-
High 7.8
Incorrect Calculation of Buffer Size in Video
Memory corruption while processing video packets received from video firmware.
-
High 7.8
Use After Free in Display
Memory corruption while processing a private escape command in an event trigger.
-
High 7.5
Buffer Over-read in WLAN Embedded SW
Transient DOS while processing received beacon frame.
-
High 7.5
Buffer Over-read in WLAN Embedded SW
Transient DOS may occur while processing malformed length field in SSID IEs.
-
High 7.5
Buffer Over-read in WLAN Firmware
Transient DOS may occur when processing vendor-specific information elements while parsing a WLAN frame for BTM requests.
-
High 7.8
Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Data HLOS - QX
Memory corruption while copying the result to the transmission queue which is shared between the virtual machine and the host.
-
High 7.8
Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Data HLOS - QX
Memory corruption while copying the result to the transmission queue in EMAC.
-
High 7.8
Double Free in SPS-HLOS
Memory corruption while retrieving the CBOR data from TA.
-
High 8.2
Buffer Over-read in Data HLOS - LNX
Information disclosure while decoding this RTP packet Payload when UE receives the RTP packet from the network.
-
High 7.1
Cryptographic Issues in Automotive
Cryptographic issue while processing crypto API calls, missing checks may lead to corrupted key usage or IV reuses.
-
High 8.6
Incorrect Authorization in Graphics
Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.
KEV Jun 3, 2025 -
High 7.5CVE-2025-27038 Exploited
Use After Free in Graphics
Memory corruption while rendering graphics using Adreno GPU drivers in Chrome.
KEV Jun 3, 2025 -
High 7.8
Use After Free in Bluetooth HOST
memory corruption while processing IOCTL commands, when the buffer in write loopback mode is accessed after being freed.
-
High 7.5
Buffer Over-read in WLAN HAL
Transient DOS while processing the tone measurement response buffer when the response buffer is out of range.
-
High 7.8
Untrusted Pointer Dereference in DSP Service
Memory corruption during dynamic process creation call when client is only passing address and length of shell binary.
-
High 7.8
Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service
Memory corruption while processing INIT and multimode invoke IOCTL calls on FastRPC.
-
High 8.6CVE-2025-21480 Exploited
Incorrect Authorization in Graphics Windows
Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.
KEV Jun 3, 2025