Qualcomm Inc Snapdragon vulnerabilities

997 known vulnerabilities affecting qualcomm_inc/snapdragon.

Total CVEs

997

CISA KEV

actively exploited

Public exploits

Exploited in wild

Severity breakdown

CRITICAL54HIGH779MEDIUM164

Vulnerabilities

SortPage 46 of 50

CVE-2024-33037P4MEDIUMCVSS 6.1vC-V2X 9150vFastConnect 6800+49 more2024-12-02

CVE-2024-33037 [MEDIUM] CWE-126 CVE-2024-33037: Information disclosure as NPU firmware can send invalid IPC message to NPU driver as the driver does Information disclosure as NPU firmware can send invalid IPC message to NPU driver as the driver doesn`t validate the IPC message received from the firmware.

nvd

CVE-2025-27036P4MEDIUMCVSS 6.1vFastConnect 6700vFastConnect 6900+18 more2025-09-24

CVE-2025-27036 [MEDIUM] CWE-126 CVE-2025-27036: Information disclosure when Video engine escape input data is less than expected minimum size. Information disclosure when Video engine escape input data is less than expected minimum size.

nvd

CVE-2025-47362P4MEDIUMCVSS 6.1vMSM8996AUvQAM8255P+36 more2025-11-04

CVE-2025-47362 [MEDIUM] CWE-126 CVE-2025-47362: Information disclosure while processing message from client with invalid payload. Information disclosure while processing message from client with invalid payload.

nvd

CVE-2025-59609P4MEDIUMCVSS 5.5vAR8035vCSR8811+188 more2026-06-01

CVE-2025-59609 [MEDIUM] CWE-126 CVE-2025-59609: Information Disclosure when processing advertisement frames with malformed MBSSID elements of insuff Information Disclosure when processing advertisement frames with malformed MBSSID elements of insufficient length.

nvd

CVE-2026-21369P4MEDIUMCVSS 5.3vFastConnect 6200vFastConnect 6700+107 more2026-07-06

CVE-2026-21369 [MEDIUM] CWE-787 CVE-2026-21369: Memory Corruption when handling flash commands due to outdated LED count values being used after use Memory Corruption when handling flash commands due to outdated LED count values being used after userspace modification.

nvd

CVE-2025-47319P4MEDIUMCVSS 6.7vAR8035vFastConnect 6200+116 more2025-12-18

CVE-2025-47319 [MEDIUM] CWE-497 CVE-2025-47319: Information disclosure while exposing internal TA-to-TA communication APIs to HLOS Information disclosure while exposing internal TA-to-TA communication APIs to HLOS

nvd

CVE-2022-33284P4MEDIUMCVSS 6.5vAQT1000vAR8035+174 more2023-01-09

CVE-2022-33284 [MEDIUM] CWE-125 CVE-2022-33284: Information disclosure due to buffer over-read in WLAN while parsing BTM action frame. Information disclosure due to buffer over-read in WLAN while parsing BTM action frame.

nvd

CVE-2023-28586P4MEDIUMCVSS 6.5v315 5G IoT Modemv9205 LTE Modem+311 more2023-12-05

CVE-2023-28586 [MEDIUM] CWE-119 CVE-2023-28586: Information disclosure when the trusted application metadata symbol addresses are accessed while loa Information disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE.

nvd

CVE-2025-47395P4MEDIUMCVSS 6.5vWCN78612026-01-07

CVE-2025-47395 [MEDIUM] CWE-126 CVE-2025-47395: Transient DOS while parsing a WLAN management frame with a Vendor Specific Information Element. Transient DOS while parsing a WLAN management frame with a Vendor Specific Information Element.

nvd

CVE-2025-47371P4MEDIUMCVSS 6.5v5G Fixed Wireless Access PlatformvAR8035+123 more2026-03-02

CVE-2025-47371 [MEDIUM] CWE-617 CVE-2025-47371: Transient DOS when an LTE RLC packet with invalid TB is received by UE. Transient DOS when an LTE RLC packet with invalid TB is received by UE.

nvd

CVE-2025-47384P4MEDIUMCVSS 6.5v5G Fixed Wireless Access PlatformvFastConnect 6200+41 more2026-03-02

CVE-2025-47384 [MEDIUM] CWE-617 CVE-2025-47384: Transient DOS when MAC configures config id greater than supported maximum value. Transient DOS when MAC configures config id greater than supported maximum value.

nvd

CVE-2025-27040P4MEDIUMCVSS 6.5vCSR8811vImmersive Home 214 Platform+63 more2025-10-09

CVE-2025-27040 [MEDIUM] CWE-20 CVE-2025-27040: Information disclosure may occur while processing the hypervisor log. Information disclosure may occur while processing the hypervisor log.

nvd

CVE-2025-21457P4MEDIUMCVSS 6.1vAR8035vFastConnect 7800+13 more2025-08-06

CVE-2025-21457 [MEDIUM] CWE-126 CVE-2025-21457: Information disclosure while opening a fastrpc session when domain is not sanitized. Information disclosure while opening a fastrpc session when domain is not sanitized.

nvd

CVE-2025-27033P4MEDIUMCVSS 6.1vQCM5430vQCM6490+30 more2025-09-24

CVE-2025-27033 [MEDIUM] CWE-126 CVE-2025-27033: Information disclosure while running video usecase having rogue firmware. Information disclosure while running video usecase having rogue firmware.

nvd

CVE-2022-33270P4MEDIUMCVSS 5.9vAR8035vFastConnect 6200+38 more2023-04-13

CVE-2022-33270 [MEDIUM] CWE-367 CVE-2022-33270: Transient DOS due to time-of-check time-of-use race condition in Modem while processing RRC Reconfig Transient DOS due to time-of-check time-of-use race condition in Modem while processing RRC Reconfiguration message.

nvd

CVE-2024-23366P4MEDIUMCVSS 5.5vQAM8255PvQAM8295P+15 more2025-01-06

CVE-2024-23366 [MEDIUM] CWE-126 CVE-2024-23366: Information Disclosure while invoking the mailbox write API when message received from user is large Information Disclosure while invoking the mailbox write API when message received from user is larger than mailbox size.

nvd

CVE-2023-33078P4MEDIUMCVSS 5.5vFastConnect 6700vFastConnect 6900+11 more2024-03-04

CVE-2023-33078 [MEDIUM] CWE-126 CVE-2023-33078: Information Disclosure while processing IOCTL request in FastRPC. Information Disclosure while processing IOCTL request in FastRPC.

nvd

CVE-2023-21667P4MEDIUMCVSS 6.5vQCA6390vQCA6391+41 more2023-09-05

CVE-2023-21667 [MEDIUM] CWE-126 CVE-2023-21667: Transient DOS in Bluetooth HOST while passing descriptor to validate the blacklisted BT keyboard. Transient DOS in Bluetooth HOST while passing descriptor to validate the blacklisted BT keyboard.

nvd

CVE-2018-11922P4MEDIUMCVSS 5.5vMDM9206vMDM9607+16 more2024-11-26

CVE-2018-11922 [MEDIUM] CWE-16 CVE-2018-11922: Wrong configuration in Touch Pal application can collect user behavior data without awareness by the Wrong configuration in Touch Pal application can collect user behavior data without awareness by the user.

nvd

CVE-2023-28553P4MEDIUMCVSS 5.5vAR8035vAR9380+142 more2023-11-07

CVE-2023-28553 [MEDIUM] CWE-126 CVE-2023-28553: Information Disclosure in WLAN Host when processing WMI event command. Information Disclosure in WLAN Host when processing WMI event command.

nvd

← Previous46 / 50Next →