[ Vendor · 27 CVEs ]
Qualcomm, Inc.
CVEs affecting Qualcomm, Inc. published in the last 30 days, plus any Qualcomm, Inc. CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-57559 | 6 Oct 2026 | CVSS 7.8 | Qualcomm, Inc. SnapdragonMemory corruption while processing service requests. | |
| CVE-2026-25302 | 6 Oct 2026 | CVSS 7.1 | Qualcomm, Inc. SnapdragonCryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be… | |
| CVE-2026-57537 | 6 Oct 2026 | CVSS 7.8 | Qualcomm, Inc. SnapdragonMemory Corruption when accessing and modifying geographic mapping data concurrently without proper synchronization. | Fix |
| CVE-2026-57545 | 6 Oct 2026 | CVSS 7.8 | Qualcomm, Inc. SnapdragonMemory corruption when processing draw objects of incorrect type during graphics command list execution. | Fix |
| CVE-2026-57546 | 6 Oct 2026 | CVSS 7.5 | Qualcomm, Inc. SnapdragonTransient DOS when processing a continuous receive command with a zero-sized global configuration override. | |
| CVE-2026-57554 | 6 Oct 2026 | CVSS 7.8 | Qualcomm, Inc. SnapdragonMemory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC invocations. | |
| CVE-2026-57555 | 6 Oct 2026 | CVSS 7.8 | Qualcomm, Inc. SnapdragonMemory Corruption when executing system service routines due to improper handling of user input buffers. | |
| CVE-2026-25269 | 6 Oct 2026 | CVSS 6.7 | Qualcomm, Inc. SnapdragonMemory corruption when processing camera requests with excessive batch and IO buffer configurations exceeds allocated memory size. | Fix |
| CVE-2026-25270 | 6 Oct 2026 | CVSS 6.7 | Qualcomm, Inc. SnapdragonMemory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver. | Fix |
| CVE-2026-25272 | 6 Oct 2026 | CVSS 6.7 | Qualcomm, Inc. SnapdragonMemory Corruption when processing camera CRE driver operations with improper handling of buffer limits during hardware update preparation. | Fix |
| CVE-2026-25273 | 6 Oct 2026 | CVSS 6.7 | Qualcomm, Inc. SnapdragonMemory Corruption when processing camera operations due to out-of-bounds write during driver updates. | Fix |
| CVE-2026-25274 | 6 Oct 2026 | CVSS 6.7 | Qualcomm, Inc. SnapdragonMemory Corruption when processing concurrent DMA buffer allocation and deallocation commands without proper synchronization. | |
| CVE-2026-25291 | 6 Oct 2026 | CVSS 7.8 | Qualcomm, Inc. SnapdragonMemory corruption when performing concurrent operations on shared memory page lists due to lack of proper synchronization mechanisms. | Fix |
| CVE-2026-25263 | 6 Oct 2026 | CVSS 6.6 | Qualcomm, Inc. SnapdragonMemory corruption while processing IOCTL command called from user space to the kernel with invalid parameters. | |
| CVE-2026-25267 | 6 Oct 2026 | CVSS 7.8 | Qualcomm, Inc. SnapdragonMemory corruption when non-secure loader rewrites page tables before secure memory initialization. | |
| CVE-2026-21385 | 2 Mar 2026 | CVSS 7.8 | Qualcomm Multiple Chipsets Memory CorruptionMemory corruption while using alignments for memory allocation. | ExploitedFix |
| CVE-2025-21479 | 3 Jun 2025 | CVSS 8.6 | Qualcomm Multiple Chipsets Incorrect AuthorizationMemory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands. | Exploited |
| CVE-2025-27038 | 3 Jun 2025 | CVSS 7.5 | Qualcomm Multiple Chipsets Use-After-FreeMemory corruption while rendering graphics using Adreno GPU drivers in Chrome. | Exploited |
| CVE-2025-21480 | 3 Jun 2025 | CVSS 8.6 | Qualcomm Multiple Chipsets Incorrect AuthorizationMemory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands. | Exploited |
| CVE-2024-43047 | 7 Oct 2024 | CVSS 7.8 | Qualcomm Multiple Chipsets Use-After-FreeMemory corruption while maintaining memory maps of HLOS memory. | ExploitedFix |
| CVE-2023-33106 | 5 Dec 2023 | CVSS 7.8 | Qualcomm Multiple Chipsets Use of Out-of-Range Pointer OffsetMemory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND. | ExploitedFix |
| CVE-2023-33107 | 5 Dec 2023 | CVSS 7.8 | Qualcomm Multiple Chipsets Integer OverflowMemory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call. | ExploitedFix |
| CVE-2023-33063 | 5 Dec 2023 | CVSS 7.8 | Qualcomm Multiple Chipsets Use-After-FreeMemory corruption in DSP Services during a remote call from HLOS to DSP. | ExploitedFix |
| CVE-2022-22071 | 14 Jun 2022 | CVSS 7.8 | Qualcomm Multiple Chipsets Use-After-FreePossible use after free when process shell memory is freed using IOCTL munmap call and process initialization is in progress in Snapdragon Auto… | ExploitedFix |
| CVE-2020-11261 | 9 Jun 2021 | CVSS 7.8 | Qualcomm Multiple Chipsets Improper Input ValidationMemory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto… | ExploitedFix |
| CVE-2021-1905 | 7 May 2021 | CVSS 7.8 | Qualcomm Multiple Chipsets Use-After-FreePossible use after free due to improper handling of memory mapping of multiple processes simultaneously. in Snapdragon Auto, Snapdragon Compute… | ExploitedFix |
| CVE-2021-1906 | 7 May 2021 | CVSS 5.5 | Qualcomm Multiple Chipsets Detection of Error Condition Without ActionImproper handling of address deregistration on failure can lead to new GPU address allocation failure. in Snapdragon Auto, Snapdragon Compute… | ExploitedFix |