Qualcomm Inc. - vulnerabilities (CVEs)

2990 CVEs in 33 products, 15 in the last 30 days, newest from 2026-10-06.

Products

• Snapdragon Mobile - 1382 CVEs
• Snapdragon - 997 CVEs
• Snapdragon Industrial Iot - 944 CVEs
• Snapdragon Auto - 925 CVEs
• Snapdragon Consumer Iot - 880 CVEs
• Snapdragon Compute - 831 CVEs
• Snapdragon Voice Music - 658 CVEs
• Snapdragon Connectivity - 607 CVEs
• Snapdragon Wearables - 559 CVEs
• Snapdragon Wired Infrastructure And Networking - 336 CVEs
• Android For Msm - 306 CVEs
• Firefox Os For Msm - 306 CVEs
• Qrd Android - 306 CVEs
• Snapdragon Wear - 274 CVEs
• Snapdragon Consumer Electronics Connectivity - 268 CVEs
• Snapdragon Iot - 236 CVEs
• All Qualcomm Products - 194 CVEs
• Snapdragon Automobile - 172 CVEs
• Small Cell Soc - 18 CVEs
• 200 - 1 CVEs
• 400 - 1 CVEs
• 600 - 1 CVEs
• Bluecore - 1 CVEs
• Ips Pdf Releases Prior To Ips System 2020.2 - 1 CVEs
• Postscript And Pdf Printers That Use Ips Versions Prior To 2019.2 - 1 CVEs
• Qca6174 9377.win.1.0 - 1 CVEs
• Qualcomm Snapdragon 800 - 1 CVEs
• Snapdragon Mobilesmall Cell Soc - 1 CVEs
• Snapdragon Mobilesnapdragon Wear - 1 CVEs
• Snapdragon Wearable - 1 CVEs
• Ssnapdragon Automobile - 1 CVEs
• Telephony - 1 CVEs
• Unspecified - 1 CVEs

Newest CVEs of Qualcomm Inc.

• CVE-2026-57559 - CVSS 7.8 (high), 2026-10-06: Memory corruption while processing service requests.
• CVE-2026-57555 - CVSS 7.8 (high), 2026-10-06: Memory Corruption when executing system service routines due to improper handling of user input buffers.
• CVE-2026-57554 - CVSS 7.8 (high), 2026-10-06: Memory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC invocations.
• CVE-2026-57546 - CVSS 7.5 (high), 2026-10-06: Transient DOS when processing a continuous receive command with a zero-sized global configuration override.
• CVE-2026-57545 - CVSS 7.8 (high), 2026-10-06: Memory corruption when processing draw objects of incorrect type during graphics command list execution.
• CVE-2026-57537 - CVSS 7.8 (high), 2026-10-06: Memory Corruption when accessing and modifying geographic mapping data concurrently without proper synchronization.
• CVE-2026-25302 - CVSS 7.1 (high), 2026-10-06: Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted…
• CVE-2026-25291 - CVSS 7.8 (high), 2026-10-06: Memory corruption when performing concurrent operations on shared memory page lists due to lack of proper synchronization mechanisms.
• CVE-2026-25274 - CVSS 6.7 (medium), 2026-10-06: Memory Corruption when processing concurrent DMA buffer allocation and deallocation commands without proper synchronization.
• CVE-2026-25273 - CVSS 6.7 (medium), 2026-10-06: Memory Corruption when processing camera operations due to out-of-bounds write during driver updates.
• CVE-2026-25272 - CVSS 6.7 (medium), 2026-10-06: Memory Corruption when processing camera CRE driver operations with improper handling of buffer limits during hardware update preparation.
• CVE-2026-25270 - CVSS 6.7 (medium), 2026-10-06: Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver.
• CVE-2026-25269 - CVSS 6.7 (medium), 2026-10-06: Memory corruption when processing camera requests with excessive batch and IO buffer configurations exceeds allocated memory size.
• CVE-2026-25267 - CVSS 7.8 (high), 2026-10-06: Memory corruption when non-secure loader rewrites page tables before secure memory initialization.
• CVE-2026-25263 - CVSS 6.6 (medium), 2026-10-06: Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters.
• CVE-2026-25265 - CVSS 8.8 (high), 2026-09-22: Privilege escalation due to weak configuration while temporary file handling.
• CVE-2026-25264 - CVSS 8.8 (high), 2026-09-22: Privilege escalation due to weak configuration during package extraction process.
• CVE-2026-25262 - CVSS 6.9 (medium), 2026-09-22: Memory corruption while processing a crafted ELF file in the Primary Bootloader.
• CVE-2026-25255 - CVSS 8.8 (high), 2026-09-22: Exposed dangerous function lead to privilege escalation via gRPC server.
• CVE-2026-25254 - CVSS 9.8 (critical), 2026-09-22: Improper authorization leads to Remote Code Execution via SocketIO interface.
• CVE-2026-25294 - CVSS 7.4 (high), 2026-09-17: Transient DOS while parsing frame during channel usage.
• CVE-2026-25290 - CVSS 7.8 (high), 2026-09-17: Memory Corruption when validating large data buffers from external sources using addition to check buffer length.
• CVE-2026-25284 - CVSS 7.3 (high), 2026-09-17: Information Disclosure when a pointer is reused after being deallocated.
• CVE-2026-25283 - CVSS 8.8 (high), 2026-09-17: Memory Corruption when copying unverified data from an external source exceeds the allocated buffer size.
• CVE-2026-25282 - CVSS 7.9 (high), 2026-09-17: Transient DOS when processing unverified data from a neighboring system causes out of bound memory access.
• CVE-2026-25281 - CVSS 7.4 (high), 2026-09-17: Transient DOS when processing large or numerous request buffers without sufficient memory allocation validation.
• CVE-2026-25280 - CVSS 7.8 (high), 2026-09-17: Memory corruption when processing escape handling flow with insufficient user buffer sizes.
• CVE-2026-25278 - CVSS 7.8 (high), 2026-09-17: Memory Corruption when processing I2C transfer requests due to a race condition between memory allocation and data copying.
• CVE-2026-25275 - CVSS 7.5 (high), 2026-09-17: Transient DOS when processing authentication frames with invalid FILS information element header lengths.
• CVE-2026-25261 - CVSS 7.8 (high), 2026-09-17: Memory corruption while processing rear sensor IOCTL calls.