Qualcomm vulnerabilities
2,991 CVEs and advisories name Qualcomm as an affected vendor, 12 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-21436Use After Free in DSP Service
- CVE-2025-21435Buffer Over-read in WLAN Host Communication
- CVE-2025-21434Buffer Over-read in WLAN Host
- CVE-2025-21431Time-of-check Time-of-use (TOCTOU) Race Condition in Automotive OS Platform
- CVE-2025-21430Buffer Over-read in WLAN Host
- CVE-2025-21429Buffer Over-read in WLAN Host
- CVE-2025-21428Buffer Over-read in WLAN Host
- CVE-2025-21425Improper Access Control in Automotive Linux OS
- CVE-2025-21423Improper Validation of Array Index in Display
- CVE-2025-21421Buffer Over-read in Display
- CVE-2024-49848Use After Free in DSP Service
- CVE-2024-45557Use of Out-of-range Pointer Offset in Trust Management Engine
- CVE-2024-45556Improper Access Control for Register Interface in TZ Firmware
- CVE-2024-45552Buffer Over-read in Data Network Stack & Connectivity
- CVE-2024-45551Weak Authentication in HLOS
- CVE-2024-45549Exposure of Sensitive System Information to an Unauthorized Control Sphere in KERNEL
- CVE-2024-45544Use After Free in Data Network Stack & Connectivity
- CVE-2024-45543Out-of-bounds Write in Audio
- CVE-2024-45540Use After Free in HLOS
- CVE-2024-43067Time-of-check Time-of-use (TOCTOU) Race Condition in Camera
- CVE-2024-43066Use After Free in HLOS
- CVE-2024-43065Exposed Dangerous Method or Function in HLOS
- CVE-2024-43058Incorrect Type Conversion or Cast in Multimedia Frameworks
- CVE-2024-43046Information Exposure in TZ Secure OS
- CVE-2024-33058Insufficient Granularity of Access Control in Core
- CVE-2025-21424Use After Free in NPU
- CVE-2024-53034Untrusted Pointer Dereference in DSP_Services
- CVE-2024-53033Untrusted Pointer Dereference in DSP_Services
- CVE-2024-53032Time-of-check Time-of-use (TOCTOU) Race Condition in Automotive OS Platform
- CVE-2024-53031Improper Input Validation in Automotive OS Platform