Vendor
Qualcomm
3,001 known vulnerabilities.
Products
3,001 results · Feed
-
Medium 5.5
Exposed dangerous function in windows host
Memory corruption while processing IOCTL command when device is in power-save state.
-
High 7.8
Use After Free in Automotive GPU
Memory Corruption when copying data from a freed source while executing performance counter deselect operation.
-
High 7.8
Untrusted Pointer Dereference in Power Optimization Firmware
Memory corruption when another driver calls an IOCTL with invalid input/output buffer.
-
High 7.8
Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service
Memory corruption while creating a process on the digital signal processor due to allocation failure at the kernel level.
-
Medium 6.1
Buffer Over-read in DSP Service
Information Disclosure while processing IOCTL handler callbacks without verifying buffer size.
-
High 7.8
Untrusted Pointer Dereference in Camera
Memory corruption when processing camera sensor input/output control codes with invalid output buffers.
-
Medium 6.5
Buffer Copy Without Checking Size of Input in Automotive Audio
Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified.
-
Medium 6.5
Buffer Over-read in WLAN Firmware
Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming.
-
Medium 6.5
Buffer Over-read in WLAN HAL
Transient DOS when processing target power rate tables during channel configuration.
-
High 7.8
Buffer Copy Without Checking Size of Input in Power Management IC
Memory Corruption when handling power management requests with improperly sized input/output buffers.
-
High 7.6
Buffer Over-read in WLAN Firmware
Transient DOS when receiving a service data frame with excessive length during device matching over a neighborhood awareness network protocol connection.
-
High 7.8
Use After Free in DSP Service
Memory Corruption when using deprecated DMABUF IOCTL calls to manage video memory.
-
High 7.8
Buffer Over-read in Camera
Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver.
-
High 7.8
Buffer Over-read in Camera
Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver.
-
High 7.8
Buffer Over-read in Camera
Memory Corruption when accessing an output buffer without validating its size during IOCTL processing.
-
High 7.8
Buffer Over-read in Camera
Memory Corruption when processing auxiliary sensor input/output control commands with insufficient buffer size validation.
-
High 7.8
Buffer Over-read in Camera
Memory Corruption when accessing an output buffer without validating its size during IOCTL processing.
-
High 7.8
Heap-Based Buffer Overflow in Power Management IC
Memory Corruption when sending IOCTL requests with invalid buffer sizes during memcpy operations.
-
High 7.8
Buffer Over-read in WinBlast Driver
Memory Corruption when retrieving output buffer with insufficient size validation.
-
High 7.6
Buffer Over-read in WLAN Firmware
Transient DOS when processing nonstandard FILS Discovery Frames with out-of-range action sizes during initial scans.
-
High 7.1
Buffer Over-read in Computer Vision
Cryptographic issue while copying data to a destination buffer without validating its size.
-
High 8.8
Integer Overflow or Wraparound in GPS
Memory corruption when decoding corrupted satellite data files with invalid signature offsets.
-
High 7.8
Stack-based Buffer Overflow in Camera Driver
Memory corruption while processing a frame request from user.
-
High 7.8
Buffer Over-read in Camera
Memory corruption while preprocessing IOCTL request in JPEG driver.
-
High 7.8
Buffer Copy Without Checking Size of Input in Automotive Platform
Memory corruption when buffer copy operation fails due to integer overflow during attestation report generation.
-
Medium 6.5
Use After Free in Camera Driver
Memory Corruption when accessing freed memory due to concurrent fence deregistration and signal handling.
-
High 7.8
Integer Overflow or Wraparound in Graphics
Memory corruption while using alignments for memory allocation.
KEV Mar 3, 2026 -
High 7.8
Out-of-bounds Write in Computer Vision
Memory Corruption when processing invalid user address with nonstandard buffer address.
-
High 7.8
Buffer Over-read in Graphics
Memory Corruption when adding user-supplied data without checking available buffer space.
-
High 7.8
Use After Free in Automotive Audio
Memory Corruption while invoking IOCTL calls when concurrent access to shared buffer occurs.
-
High 7.8
Improper Access Control for Register Interface in SCE-Mink
Memory Corruption when accessing trusted execution environment without proper privilege check.
-
Medium 6.5
Reachable Assertion in FW
Transient DOS when MAC configures config id greater than supported maximum value.
-
High 7.2
Missing Cryptographic Step in Data Modem
Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE.
-
High 7.8
Use After Free in Automotive Audio
Memory Corruption while processing IOCTL calls when concurrent access to shared buffer occurs.
-
High 7.8
Use After Free in Automotive Audio
Memory Corruption when concurrent access to shared buffer occurs due to improper synchronization between assignment and deallocation of buffer resources.
-
High 7.1
Exposure of Sensitive System Information to an Unauthorized Control Sphere in HLOS
Cryptographic Issue when a shared VM reference allows HLOS to boot loader and access cert chain.
-
High 7.8
Use After Free in Automotive Audio
Memory Corruption when accessing a buffer after it has been freed while processing IOCTL calls.
-
High 7.8
Use After Free in Automotive Audio
Memory Corruption when concurrent access to shared buffer occurs during IOCTL calls.
-
High 7.8
Use After Free in Automotive Audio
Memory corruption while handling different IOCTL calls from the user-space simultaneously.
-
High 7.8
Out-of-bounds Write in Automotive
Memory Corruption when accessing buffers with invalid length during TA invocation.