Qualcomm Inc Snapdragon vulnerabilities

997 known vulnerabilities affecting qualcomm_inc/snapdragon.

Total CVEs

997

CISA KEV

actively exploited

Public exploits

Exploited in wild

Severity breakdown

CRITICAL54HIGH779MEDIUM164

Vulnerabilities

SortPage 37 of 50

CVE-2024-33026P3HIGHCVSS 7.5vAR8035vCSR8811+163 more2024-08-05

CVE-2024-33026 [HIGH] CWE-126 CVE-2024-33026: Transient DOS while parsing probe response and assoc response frame when received frame length is le Transient DOS while parsing probe response and assoc response frame when received frame length is less than max size of timestamp.

nvd

CVE-2024-33025P3HIGHCVSS 7.5vCSR8811vFastConnect 6800+167 more2024-08-05

CVE-2024-33025 [HIGH] CWE-126 CVE-2024-33025: Transient DOS while parsing the BSS parameter change count or MLD capabilities fields of the ML IE. Transient DOS while parsing the BSS parameter change count or MLD capabilities fields of the ML IE.

nvd

CVE-2024-33063P3HIGHCVSS 7.5vAR8035vFastConnect 6900+122 more2024-12-02

CVE-2024-33063 [HIGH] CWE-190 CVE-2024-33063: Transient DOS while parsing the ML IE when a beacon with common info length of the ML IE greater tha Transient DOS while parsing the ML IE when a beacon with common info length of the ML IE greater than the ML IE inside which this element is present.

nvd

CVE-2024-23358P3HIGHCVSS 7.5vAPQ8017vAPQ8037+51 more2024-09-02

CVE-2024-23358 [HIGH] CWE-126 CVE-2024-23358: Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in Modem Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in Modem.

nvd

CVE-2025-21430P3HIGHCVSS 7.5v315 5G IoT ModemvAPQ8017+223 more2025-04-07

CVE-2025-21430 [HIGH] CWE-126 CVE-2025-21430: Transient DOS while connecting STA to AP and initiating ADD TS request from AP to establish TSpec se Transient DOS while connecting STA to AP and initiating ADD TS request from AP to establish TSpec session.

nvd

CVE-2024-38404P3HIGHCVSS 7.5vAR8035vFastConnect 7800+38 more2025-02-03

CVE-2024-38404 [HIGH] CWE-126 CVE-2024-38404: Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in modem Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in modem.

nvd

CVE-2025-27057P3HIGHCVSS 7.5vAR8035vCSR8811+211 more2025-07-08

CVE-2025-27057 [HIGH] CWE-126 CVE-2025-27057: Transient DOS while handling beacon frames with invalid IE header length. Transient DOS while handling beacon frames with invalid IE header length.

nvd

CVE-2025-21454P3HIGHCVSS 7.5v315 5G IoT Modemv9206 LTE Modem+190 more2025-07-08

CVE-2025-21454 [HIGH] CWE-126 CVE-2025-21454: Transient DOS while processing received beacon frame. Transient DOS while processing received beacon frame.

nvd

CVE-2025-21449P3HIGHCVSS 7.5v315 5G IoT ModemvAPQ8017+183 more2025-07-08

CVE-2025-21449 [HIGH] CWE-126 CVE-2025-21449: Transient DOS may occur while processing malformed length field in SSID IEs. Transient DOS may occur while processing malformed length field in SSID IEs.

nvd

CVE-2025-27065P3HIGHCVSS 7.5vAR8035vFastConnect 6800+148 more2025-08-06

CVE-2025-27065 [HIGH] CWE-126 CVE-2025-27065: Transient DOS while processing a frame with malformed shared-key descriptor. Transient DOS while processing a frame with malformed shared-key descriptor.

nvd

CVE-2025-21463P3HIGHCVSS 7.5vAR8035vCSR8811+209 more2025-06-03

CVE-2025-21463 [HIGH] CWE-126 CVE-2025-21463: Transient DOS while processing the EHT operation IE in the received beacon frame. Transient DOS while processing the EHT operation IE in the received beacon frame.

nvd

CVE-2026-25281P3HIGHCVSS 7.4vColognevFastConnect 7800+5 more2026-09-17

CVE-2026-25281 [HIGH] CWE-770 CVE-2026-25281: Transient DOS when processing large or numerous request buffers without sufficient memory allocation Transient DOS when processing large or numerous request buffers without sufficient memory allocation validation.

nvd

CVE-2026-25284P3HIGHCVSS 7.3vColognevFastConnect 7800+5 more2026-09-17

CVE-2026-25284 [HIGH] CWE-126 CVE-2026-25284: Information Disclosure when a pointer is reused after being deallocated. Information Disclosure when a pointer is reused after being deallocated.

nvd

CVE-2026-24092P3HIGHCVSS 7.2vXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX2026-06-01

CVE-2026-24092 [HIGH] CWE-1286 CVE-2026-24092: Memory Corruption when processing fastboot commands to set display mode. Memory Corruption when processing fastboot commands to set display mode.

nvd

CVE-2026-25274P3MEDIUMCVSS 6.7vAQT1000vCologne+43 more2026-10-06

CVE-2026-25274 [MEDIUM] CWE-416 CVE-2026-25274: Memory Corruption when processing concurrent DMA buffer allocation and deallocation commands without Memory Corruption when processing concurrent DMA buffer allocation and deallocation commands without proper synchronization.

nvd

CVE-2024-53011P4HIGHCVSS 7.9vFastConnect 6700vFastConnect 6900+81 more2025-03-03

CVE-2024-53011 [HIGH] CWE-264 CVE-2024-53011: Information disclosure may occur due to improper permission and access controls to Video Analytics e Information disclosure may occur due to improper permission and access controls to Video Analytics engine.

nvd

CVE-2023-28575P4HIGHCVSS 7.8vAQT1000vC-V2X 9150+58 more2023-08-08

CVE-2023-28575 [HIGH] CWE-823 CVE-2023-28575: The cam_get_device_priv function does not check the type of handle being returned (device/session/li The cam_get_device_priv function does not check the type of handle being returned (device/session/link). This would lead to invalid type usage if a wrong handle is passed to it.

nvd

CVE-2023-33042P4HIGHCVSS 7.5v315 5G IoT ModemvAR8035+71 more2023-12-05

CVE-2023-33042 [HIGH] CWE-20 CVE-2023-33042: Transient DOS in Modem after RRC Setup message is received. Transient DOS in Modem after RRC Setup message is received.

nvd

CVE-2023-33081P4HIGHCVSS 7.5vAQT1000vAR8035+140 more2023-12-05

CVE-2023-33081 [HIGH] CWE-126 CVE-2023-33081: Transient DOS while converting TWT (Target Wake Time) frame parameters in the OTA broadcast. Transient DOS while converting TWT (Target Wake Time) frame parameters in the OTA broadcast.

nvd

CVE-2023-33098P3HIGHCVSS 7.5v315 5G IoT ModemvAQT1000+261 more2023-12-05

CVE-2023-33098 [HIGH] CWE-126 CVE-2023-33098: Transient DOS while parsing WPA IES, when it is passed with length more than expected size. Transient DOS while parsing WPA IES, when it is passed with length more than expected size.

nvd

← Previous37 / 50Next →