Qualcomm, Inc. Snapdragon
997 published vulnerabilities name this product. The 200 most recent are listed.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-57559 | Cologne ; FastConnect 6700 ; FastConnect 6900 ; … | Use After Free in DSP_Services | HIGH 7.8 | 0.1 % | ||
| CVE-2026-57555 | Cologne ; FastConnect 6700 ; FastConnect 6900 ; … | Use After Free in DSP Service | HIGH 7.8 | 0.1 % | ||
| CVE-2026-57554 | AR8035 ; CSRA6620 ; CSRA6640 ; … | Use After Free in DSP Service | HIGH 7.8 | 0.1 % | ||
| CVE-2026-57546 | Congo ; Qualcomm FastConnect 8800 Mobile Connectivity System | Buffer Over-read in WLAN HAL | HIGH 7.5 | 0.2 % | ||
| CVE-2026-57545 | Cologne ; CQ7790 ; CQ8725S ; … | Untrusted Pointer Dereference in Graphics | HIGH 7.8 | 0.1 % | ||
| CVE-2026-57537 | FastConnect 6900 ; FastConnect 7800 ; IQ10 Series ; … | Use After Free in DSP Service | HIGH 7.8 | 0.1 % | ||
| CVE-2026-25302 | 5G Fixed Wireless Access Platform ; AR8035 ; Cologne ; … | Improper Verification of Cryptographic Signature in Boot | HIGH 7.1 | 0.1 % | ||
| CVE-2026-25291 | FastConnect 6700 ; FastConnect 6900 ; FastConnect 7800 ; … | Use After Free in Graphics | HIGH 7.8 | 0.1 % | ||
| CVE-2026-25274 | AQT1000 ; Cologne ; Congo ; … | Use After Free in Windows WLAN Host | MEDIUM 6.7 | 0.1 % | ||
| CVE-2026-25273 | FastConnect 6900 ; FastConnect 7800 ; Pandeiro ; … | Out-of-bounds Write in Camera Driver | MEDIUM 6.7 | 0.1 % | ||
| CVE-2026-25272 | Cologne ; CQ7790 ; CQ8725S ; … | Out-of-bounds Write in Camera Driver | MEDIUM 6.7 | 0.1 % | ||
| CVE-2026-25270 | FastConnect 6700 ; FastConnect 6900 ; FastConnect 7800 ; … | Out-of-bounds Write in Camera Driver | MEDIUM 6.7 | 0.1 % | ||
| CVE-2026-25269 | Cologne ; CQ7790 ; CQ8725S ; … | Out-of-bounds Write in Camera Driver | MEDIUM 6.7 | 0.1 % | ||
| CVE-2026-25267 | 315 5G IoT Modem ; 5G Fixed Wireless Access Platform ; 9205 LTE Modem ; … | Missing Authorization in Core | HIGH 7.8 | 0.1 % | ||
| CVE-2026-25263 | 315 5G IoT Modem ; 5G Fixed Wireless Access Platform ; Cologne ; … | Out of Bounds write in Linux Camera | MEDIUM 6.6 | 0.1 % | ||
| CVE-2026-25265 | QSCv1.17.1 ; QSCv1.19.1 ; QSCv1.21.0 ; … | Creation of Temporary File with Insecure Permissions in Qualcomm Software Center | HIGH 8.8 | 0.1 % | ||
| CVE-2026-25264 | QSCv1.17.1 ; QSCv1.19.1 ; QSCv1.21.0 ; … | Uncontrolled Search Path Element in Qualcomm Software Center | HIGH 8.8 | 0.1 % | ||
| CVE-2026-25262 | MDM9x07 ; MDM9x45 ; MDM9x55 ; … | Write-what-where Condition in Primary Bootloader | MEDIUM 6.9 | 0.1 % | ||
| CVE-2026-25255 | QSCv1.17.1 ; QSCv1.19.1 ; QSCv1.21.0 ; … | Exposed function in Qualcomm Package Manager and Qualcomm Software Center. | HIGH 8.8 | 0.1 % | ||
| CVE-2026-25254 | QSCv1.17.1 ; QSCv1.19.1 ; QSCv1.21.0 | Improper authorization in Qualcomm Software Center | CRITICAL 9.8 | 0.5 % | ||
| CVE-2026-25294 | Cologne ; Congo ; CQ7790 ; … | Buffer Over-read in WLAN Firmware | HIGH 7.4 | 0.2 % | ||
| CVE-2026-25290 | Cologne ; FastConnect 7800 ; Snapdragon X2 Elite ; … | Integer Overflow or Wraparound in OOBM | HIGH 7.8 | 0.1 % | ||
| CVE-2026-25284 | Cologne ; FastConnect 7800 ; Snapdragon X2 Elite ; … | Buffer Over-read in OOBM | HIGH 7.3 | 0.1 % | ||
| CVE-2026-25283 | Cologne ; FastConnect 7800 ; Snapdragon X2 Elite ; … | Stack-based Buffer Overflow in OOBM | HIGH 8.8 | 0.1 % | ||
| CVE-2026-25282 | Cologne ; FastConnect 7800 ; Snapdragon X2 Elite ; … | Out-of-bounds Read in OOBM | HIGH 7.9 | 0.1 % | ||
| CVE-2026-25281 | Cologne ; FastConnect 7800 ; Snapdragon X2 Elite ; … | Allocation of Resources Without Limits or Throttling in OOBM | HIGH 7.4 | 0.2 % | ||
| CVE-2026-25280 | Cologne ; FastConnect 6700 ; FastConnect 6900 ; … | Out-of-bounds Write in DSP Service | HIGH 7.8 | 0.1 % | ||
| CVE-2026-25278 | LeMans_AU_LGIT ; LeMansAU ; QAM8255P ; … | Time-of-check Time-of-use (TOCTOU) Race Condition in Automotive Software platform based on QNX | HIGH 7.8 | 0.1 % | ||
| CVE-2026-25275 | Snapdragon G1 Gen 2 Gaming Platform ; 5G Fixed Wireless Access Platform ; AQT1000 ; … | Buffer Over-read in WLAN Firmware | HIGH 7.5 | 0.3 % | ||
| CVE-2026-25261 | Cologne ; FastConnect 6700 ; FastConnect 6900 ; … | Untrusted Pointer Dereference in Camera | HIGH 7.8 | 0.1 % | ||
| CVE-2026-24081 | AR8035 ; C110100 ; Cologne ; … | Buffer Over-read in BT Controller | HIGH 7.4 | 0.2 % | ||
| CVE-2026-24075 | AQT1000 ; Cologne ; FastConnect 6200 ; … | Buffer Over-read in Qualcomm IPC | HIGH 7.8 | 0.1 % | ||
| CVE-2026-24074 | Cologne ; FastConnect 6200 ; FastConnect 6700 ; … | Out-of-bounds Write in Video | HIGH 7.8 | 0.1 % | ||
| CVE-2026-24073 | Cologne ; FastConnect 6900 ; FastConnect 7800 ; … | Out-of-bounds Write in Video | HIGH 7.8 | 0.1 % | ||
| CVE-2025-59607 | Cologne ; FastConnect 6900 ; FastConnect 7800 ; … | Untrusted Pointer Dereference in Windows Compute | HIGH 7.8 | 0.1 % | ||
| CVE-2026-25292 | AR8035 ; CQ7790 ; CQ8725S ; … | Improper Validation of Syntactic Correctness of Input in Automotive Linux OS | HIGH 7.6 | 0.2 % | ||
| CVE-2026-25289 | AR8035 ; Cologne ; CQ7790 ; … | Stack-based Buffer Overflow in WLAN Firmware | CRITICAL 9.6 | 0.2 % | ||
| CVE-2026-25288 | Cologne ; CQ7790 ; FastConnect 6900 ; … | Buffer Over-read in WLAN Firmware | HIGH 7.4 | 0.2 % | ||
| CVE-2026-24084 | 5G Fixed Wireless Access Platform ; AQT1000 ; AR8035 ; … | Insecure Security Identifier Mechanism in Multi-Mode Call Processor | HIGH 7.5 | 0.3 % | ||
| CVE-2026-24083 | QAM8295P ; QCA6696 ; SA8295P | Untrusted Pointer Dereference in Automotive Security | HIGH 7.8 | 0.1 % | ||
| CVE-2026-24080 | Cologne ; FastConnect 6700 ; FastConnect 6900 ; … | Buffer Copy Without Checking Size of Input in Biometrics | HIGH 7.8 | 0.1 % | ||
| CVE-2026-24079 | AR8035 ; CSRA6620 ; CSRA6640 ; … | Missing Authentication for Critical Function in Data Modem | HIGH 8.1 | 0.2 % | ||
| CVE-2026-24078 | 5G Fixed Wireless Access Platform ; AR8035 ; CSRA6620 ; … | Exposure of Private Personal Information to an Unauthorized Actor in Data Modem | MEDIUM 6.5 | 0.2 % | ||
| CVE-2026-24077 | AQT1000 ; AR8035 ; CSRA6620 ; … | Integer Underflow (Wrap or Wraparound) in WLAN Host | MEDIUM 6.5 | 0.2 % | ||
| CVE-2026-24076 | AQT1000 ; Cologne ; FastConnect 6200 ; … | Buffer Copy Without Checking Size of Input in Bluetooth HOST | MEDIUM 6.7 | 0.1 % | ||
| CVE-2026-21366 | LeMans_AU_LGIT ; LeMansAU ; QAM8255P ; … | Integer Overflow or Wraparound in Data Network Stack & Connectivity | HIGH 7.8 | 0.1 % | ||
| CVE-2026-25271 | Cologne ; FastConnect 6900 ; FastConnect 7800 ; … | Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service | HIGH 7.8 | 0.1 % | ||
| CVE-2026-25268 | 5G Fixed Wireless Access Platform ; AR8035 ; CQ7790 ; … | Stack-based Buffer Overflow in WLAN Host | HIGH 8.8 | 0.1 % | ||
| CVE-2026-21384 | FastConnect 6700 ; FastConnect 6900 ; FastConnect 7800 ; … | Out-of-bounds Write in Camera Driver | MEDIUM 5.3 | 0.1 % | ||
| CVE-2026-21383 | FastConnect 6900 ; FastConnect 7800 ; LeMans_AU_LGIT ; … | Reusing a Nonce, Key Pair in Encryption in HLOS | HIGH 7.1 | 0.1 % | ||
| CVE-2026-21379 | AQT1000 ; Cologne ; FastConnect 6200 ; … | Buffer Over-read in Windows Compute | HIGH 7.8 | 0.1 % | ||
| CVE-2026-21370 | FastConnect 6700 ; FastConnect 6900 ; FastConnect 7800 ; … | Out-of-bounds Write in Camera Driver | MEDIUM 5.3 | 0.1 % | ||
| CVE-2026-21369 | FastConnect 6200 ; FastConnect 6700 ; FastConnect 6900 ; … | Out-of-bounds Write in Camera Driver | MEDIUM 5.3 | 0.1 % | ||
| CVE-2026-21368 | FastConnect 6700 ; FastConnect 6900 ; FastConnect 7800 ; … | Out-of-bounds Write in Camera Driver | MEDIUM 5.3 | 0.1 % | ||
| CVE-2025-59617 | FastConnect 6700 ; FastConnect 6900 ; FastConnect 7800 ; … | Use After Free in Computer Vision | HIGH 7.3 | 0.1 % | ||
| CVE-2025-59616 | FastConnect 6700 ; FastConnect 6900 ; FastConnect 7800 ; … | Use After Free in Computer Vision | HIGH 7.8 | 0.1 % | ||
| CVE-2025-59615 | FastConnect 6700 ; FastConnect 6900 ; FastConnect 7800 ; … | Use After Free in Computer Vision | HIGH 7.8 | 0.1 % | ||
| CVE-2026-25277 | Snapdragon 8 Gen 2 Mobile Platform ; Snapdragon 8+ Gen 2 Mobile Platform ; Snapdragon 8 Gen 3 Mobile Platform ; … | Buffer Copy Without Checking Size of Input in Secure Processor | HIGH 8.8 | 0.1 % | ||
| CVE-2026-25276 | Snapdragon 8 Gen 2 Mobile Platform ; Snapdragon 8+ Gen 2 Mobile Platform ; Snapdragon 8 Gen 3 Mobile Platform ; … | Improper Validation of Array Index in Secure Processor | HIGH 8.8 | 0.1 % | ||
| CVE-2026-25260 | Cologne ; FastConnect 6900 ; FastConnect 7800 ; … | Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service | HIGH 7.8 | 0.1 % | ||
| CVE-2026-25259 | Cologne ; FastConnect 6900 ; FastConnect 7800 ; … | Out-of-bounds Write in DSP Service | HIGH 7.8 | 0.1 % | ||
| CVE-2026-25258 | Cologne ; FastConnect 6900 ; FastConnect 7800 ; … | Out-of-bounds Read in DSP Service | HIGH 7.8 | 0.1 % | ||
| CVE-2026-24092 | XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX | Improper Validation of Syntactic Correctness of Input in Display | HIGH 7.2 | 0.1 % | ||
| CVE-2026-24091 | XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX | Improper Validation of Syntactic Correctness of Input in Display | HIGH 7.2 | 0.1 % | ||
| CVE-2026-24090 | XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX | Missing Authentication for Critical Function in HLOS | HIGH 7.1 | 0.1 % | ||
| CVE-2026-24089 | XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX | Improper Validation of Syntactic Correctness of Input in Kernel | HIGH 7.2 | 0.1 % | ||
| CVE-2026-24088 | XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX | Missing Authentication for Critical Function in Boot | HIGH 8.2 | 0.1 % | ||
| CVE-2026-24087 | XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX | Improper Validation of Syntactic Correctness of Input in Kernel | HIGH 7.2 | 0.1 % | ||
| CVE-2026-24085 | XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX | Stack-based Buffer Overflow in Display | HIGH 7.2 | 0.1 % | ||
| CVE-2025-59614 | Cologne ; FastConnect 6900 ; FastConnect 7800 ; … | Out-of-bounds Write in Windows Compute | MEDIUM 6.7 | 0.1 % | ||
| CVE-2025-59613 | Cologne ; FastConnect 6700 ; FastConnect 6900 ; … | Stack-based Buffer Overflow in Windows Compute | MEDIUM 6.7 | 0.1 % | ||
| CVE-2025-59612 | Cologne ; FastConnect 6700 ; FastConnect 6900 ; … | Stack-based Buffer Overflow in Windows Compute | MEDIUM 6.7 | 0.1 % | ||
| CVE-2025-59611 | AQT1000 ; Cologne ; FastConnect 6200 ; … | Out-of-bounds Write in Core Services | MEDIUM 6.7 | 0.1 % | ||
| CVE-2025-59610 | 5G Fixed Wireless Access Platform ; C-V2X 9150 ; CSRA6620 ; … | Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver | MEDIUM 6.4 | 0.1 % | ||
| CVE-2025-59609 | AR8035 ; CSR8811 ; CSRA6620 ; … | Buffer Over-read in WLAN Host Communication | MEDIUM 5.5 | 0.1 % | ||
| CVE-2025-59606 | Cologne ; FastConnect 6200 ; FastConnect 6700 ; … | NULL Pointer Dereference in HLOS | HIGH 7.8 | 0.1 % | ||
| CVE-2025-59605 | AR8035 ; CSRA6620 ; CSRA6640 ; … | Out-of-bounds Write in HLOS | HIGH 7.8 | 0.1 % | ||
| CVE-2025-59604 | AR8035 ; Cologne ; CSRA6620 ; … | NULL Pointer Dereference in SPS Applications | HIGH 7.8 | 0.1 % | ||
| CVE-2025-59601 | QCA7005 | Exposure of Sensitive Information Through Metadata in Powerline Communication Firmware | MEDIUM 6.5 | 0.1 % | ||
| CVE-2026-25293 | QCA7005 | Incorrect authorization in PLC FW | CRITICAL 9.8 | 0.2 % | ||
| CVE-2026-25266 | Cologne ; FastConnect 6900 ; FastConnect 7800 ; … | Exposed dangerous function in windows host | HIGH 7.8 | 0.1 % | ||
| CVE-2026-24082 | AR8031 ; AR8035 ; CSRA6620 ; … | Use After Free in Automotive GPU | HIGH 7.8 | 0.1 % | ||
| CVE-2025-47408 | FastConnect 6200 ; FastConnect 6900 ; FastConnect 7800 ; … | Untrusted Pointer Dereference in Power Optimization Firmware | HIGH 7.8 | 0.1 % | ||
| CVE-2025-47407 | CQ7790 ; CQ8725S ; FastConnect 6200 ; … | Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service | HIGH 7.8 | 0.1 % | ||
| CVE-2025-47406 | Cologne ; FastConnect 6700 ; FastConnect 6900 ; … | Buffer Over-read in DSP Service | MEDIUM 6.1 | 0.1 % | ||
| CVE-2025-47405 | FastConnect 6900 ; FastConnect 7800 ; IQX5121 ; … | Untrusted Pointer Dereference in Camera | HIGH 7.8 | 0.1 % | ||
| CVE-2025-47404 | 5G Fixed Wireless Access Platform ; AR8031 ; AR8035 ; … | Buffer Copy Without Checking Size of Input in Automotive Audio | HIGH 7.8 | 0.1 % | ||
| CVE-2025-47403 | AR8035 ; Cologne ; CQ7790 ; … | Buffer Over-read in WLAN Firmware | HIGH 7.5 | 0.2 % | ||
| CVE-2025-47401 | AR8035 ; Cologne ; CQ7790 ; … | Buffer Over-read in WLAN HAL | HIGH 7.5 | 0.2 % | ||
| CVE-2026-21382 | Cologne ; FastConnect 6900 ; FastConnect 7800 ; … | Buffer Copy Without Checking Size of Input in Power Management IC | HIGH 7.8 | 0.1 % | ||
| CVE-2026-21381 | AR8035 ; Cologne ; FastConnect 6200 ; … | Buffer Over-read in WLAN Firmware | HIGH 7.6 | 0.1 % | ||
| CVE-2026-21380 | Cologne ; FastConnect 6900 ; FastConnect 7800 ; … | Use After Free in DSP Service | HIGH 7.8 | 0.1 % | ||
| CVE-2026-21378 | AQT1000 ; Cologne ; FastConnect 6200 ; … | Buffer Over-read in Camera | HIGH 7.8 | 0.1 % | ||
| CVE-2026-21376 | AQT1000 ; Cologne ; FastConnect 6200 ; … | Buffer Over-read in Camera | HIGH 7.8 | 0.1 % | ||
| CVE-2026-21375 | Cologne ; FastConnect 6700 ; FastConnect 6900 ; … | Buffer Over-read in Camera | HIGH 7.8 | 0.1 % | ||
| CVE-2026-21374 | AQT1000 ; Cologne ; FastConnect 6200 ; … | Buffer Over-read in Camera | HIGH 7.8 | 0.1 % | ||
| CVE-2026-21373 | AQT1000 ; Cologne ; FastConnect 6200 ; … | Buffer Over-read in Camera | HIGH 7.8 | 0.1 % | ||
| CVE-2026-21372 | Cologne ; FastConnect 6700 ; FastConnect 6900 ; … | Heap-Based Buffer Overflow in Power Management IC | HIGH 7.8 | 0.1 % | ||
| CVE-2026-21371 | AQT1000 ; Cologne ; FastConnect 6200 ; … | Buffer Over-read in WinBlast Driver | HIGH 7.8 | 0.1 % | ||
| CVE-2026-21367 | AR8035 ; Cologne ; CSR8811 ; … | Buffer Over-read in WLAN Firmware | HIGH 7.6 | 0.2 % | ||
| CVE-2025-47400 | Pandeiro ; Snapdragon 8 Elite Gen 5 ; SW6100 ; … | Buffer Over-read in Computer Vision | HIGH 7.1 | 0.1 % | ||
| CVE-2025-47392 | 5G Fixed Wireless Access Platform ; AR8035 ; CSRA6620 ; … | Integer Overflow or Wraparound in GPS | HIGH 8.8 | 0.2 % | ||
| CVE-2025-47391 | FastConnect 6200 ; FastConnect 6700 ; FastConnect 6900 ; … | Stack-based Buffer Overflow in Camera Driver | HIGH 7.8 | 0.1 % | ||
| CVE-2025-47390 | Cologne ; FastConnect 6700 ; FastConnect 6900 ; … | Buffer Over-read in Camera | HIGH 7.8 | 0.1 % | ||
| CVE-2025-47389 | AR8035 ; Cologne ; CSRA6620 ; … | Buffer Copy Without Checking Size of Input in Automotive Platform | HIGH 7.8 | 0.1 % | ||
| CVE-2025-47374 | FastConnect 6900 ; FastConnect 7800 ; Pandeiro ; … | Use After Free in Camera Driver | MEDIUM 6.5 | 0.1 % | ||
| CVE-2026-21385 | 5G Fixed Wireless Access Platform ; APQ8098 ; AR8031 ; … | Integer Overflow or Wraparound in Graphics | HIGH 7.8 | 1.3 % | KEV | |
| CVE-2025-59603 | Cologne ; FastConnect 6900 ; FastConnect 7800 ; … | Out-of-bounds Write in Computer Vision | HIGH 7.8 | 0.1 % | ||
| CVE-2025-59600 | AR8031 ; AR8035 ; CSRA6620 ; … | Buffer Over-read in Graphics | HIGH 7.8 | 0.1 % | ||
| CVE-2025-47386 | AR8031 ; AR8035 ; CSRA6620 ; … | Use After Free in Automotive Audio | HIGH 7.8 | 0.1 % | ||
| CVE-2025-47385 | FastConnect 6200 ; FastConnect 6700 ; FastConnect 6900 ; … | Improper Access Control for Register Interface in SCE-Mink | HIGH 7.8 | 0.1 % | ||
| CVE-2025-47384 | 5G Fixed Wireless Access Platform ; FastConnect 6200 ; FastConnect 6700 ; … | Reachable Assertion in FW | MEDIUM 6.5 | 0.1 % | ||
| CVE-2025-47383 | 5G Fixed Wireless Access Platform ; 9206 LTE Modem ; 9207 LTE Modem ; … | Missing Cryptographic Step in Data Modem | HIGH 7.2 | 0.1 % | ||
| CVE-2025-47381 | LeMans_AU_LGIT ; LeMansAU ; QAM8255P ; … | Use After Free in Automotive Audio | HIGH 7.8 | 0.1 % | ||
| CVE-2025-47379 | 5G Fixed Wireless Access Platform ; AR8031 ; AR8035 ; … | Use After Free in Automotive Audio | HIGH 7.8 | 0.1 % | ||
| CVE-2025-47378 | Cologne ; FastConnect 6700 ; FastConnect 6800 ; … | Exposure of Sensitive System Information to an Unauthorized Control Sphere in HLOS | HIGH 7.1 | 0.1 % | ||
| CVE-2025-47377 | AR8035 ; FastConnect 6200 ; FastConnect 6900 ; … | Use After Free in Automotive Audio | HIGH 7.8 | 0.1 % | ||
| CVE-2025-47376 | AR8031 ; AR8035 ; CSRA6620 ; … | Use After Free in Automotive Audio | HIGH 7.8 | 0.1 % | ||
| CVE-2025-47375 | AR8031 ; AR8035 ; CSRA6620 ; … | Use After Free in Automotive Audio | HIGH 7.8 | 0.1 % | ||
| CVE-2025-47373 | AR8035 ; Cologne ; FastConnect 6200 ; … | Out-of-bounds Write in Automotive | HIGH 7.8 | 0.1 % | ||
| CVE-2025-47371 | 5G Fixed Wireless Access Platform ; AR8035 ; CSRA6620 ; … | Reachable Assertion in Modem | MEDIUM 6.5 | 0.1 % | ||
| CVE-2025-47402 | AR8035 ; Cologne ; FastConnect 6900 ; … | Buffer Over-read in WLAN Firmware | MEDIUM 6.5 | 0.2 % | ||
| CVE-2025-47399 | Cologne ; FastConnect 7800 ; WCD9378C ; … | Buffer Copy Without Checking Size of Input in Camera | HIGH 7.8 | 0.1 % | ||
| CVE-2025-47398 | AR8031 ; CSRA6620 ; CSRA6640 ; … | Use After Free in Graphics | HIGH 7.8 | 0.1 % | ||
| CVE-2025-47397 | FastConnect 6200 ; FastConnect 6700 ; FastConnect 6900 ; … | Improper Release of Memory Before Removing Last Reference in Graphics | HIGH 7.8 | 0.1 % | ||
| CVE-2025-47366 | AR8035 ; FastConnect 6200 ; FastConnect 6700 ; … | Exposed Dangerous Method or Function in HLOS | HIGH 7.8 | 0.1 % | ||
| CVE-2025-47364 | QAM8255P ; QAM8295P ; QAM8620P ; … | Integer Overflow or Wraparound in Automotive | HIGH 7.8 | 0.1 % | ||
| CVE-2025-47363 | QAM8255P ; QAM8295P ; QAM8620P ; … | Integer Overflow or Wraparound in Automotive | HIGH 7.8 | 0.1 % | ||
| CVE-2025-47359 | AQT1000 ; FastConnect 6200 ; FastConnect 6800 ; … | Use After Free in Secure Processor | HIGH 7.8 | 0.1 % | ||
| CVE-2025-47358 | FastConnect 6900 ; FastConnect 7800 ; QCC2072 ; … | Use After Free in Secure Processor | HIGH 7.8 | 0.1 % | ||
| CVE-2025-47396 | FastConnect 6200 ; FastConnect 6700 ; FastConnect 6900 ; … | Double Free in Graphics | HIGH 7.8 | 0.1 % | ||
| CVE-2025-47395 | WCN7861 | Buffer Over-read in WLAN Firmware | MEDIUM 6.5 | 0.1 % | ||
| CVE-2025-47394 | FastConnect 6200 ; FastConnect 6700 ; FastConnect 6900 ; … | Buffer Copy Without Checking Size of Input in DSP Service | HIGH 7.8 | 0.1 % | ||
| CVE-2025-47393 | QAM8255P ; QAM8650P ; QAM8775P ; … | Improper Validation of Array Index in Automotive Linux OS | HIGH 7.8 | 0.1 % | ||
| CVE-2025-47388 | FastConnect 6200 ; FastConnect 6700 ; FastConnect 6900 ; … | Buffer Copy without Checking Size of Input in DSP Service | HIGH 7.8 | 0.1 % | ||
| CVE-2025-47380 | FastConnect 7800 ; QCC2072 ; WCD9378C ; … | Untrusted Pointer Dereference in Camera | HIGH 7.8 | 0.1 % | ||
| CVE-2025-47369 | AR8035 ; CSRA6620 ; CSRA6640 ; … | Information Exposure in Computer Vision | MEDIUM 5.5 | 0.1 % | ||
| CVE-2025-47356 | Cologne ; FastConnect 6900 ; FastConnect 7800 ; … | Double Free in Video | HIGH 7.8 | 0.1 % | ||
| CVE-2025-47348 | AQT1000 ; AR8035 ; CSRA6620 ; … | Use of Uninitialized Variable in HLOS | HIGH 7.8 | 0.1 % | ||
| CVE-2025-47346 | AR8035 ; FastConnect 6200 ; FastConnect 6700 ; … | Out-of-bounds Write in HLOS | HIGH 7.8 | 0.1 % | ||
| CVE-2025-47345 | AR8035 ; FastConnect 6200 ; FastConnect 6700 ; … | Reusing a Nonce, Key Pair in Encryption in Automotive Platform | HIGH 8.4 | 0.1 % | ||
| CVE-2025-47344 | CSRA6620 ; CSRA6640 ; FastConnect 6200 ; … | Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver | MEDIUM 6.7 | 0.1 % | ||
| CVE-2025-47343 | Cologne ; FastConnect 6700 ; FastConnect 6900 ; … | Untrusted Pointer Dereference in Video | HIGH 7.8 | 0.1 % | ||
| CVE-2025-47339 | AR8035 ; AR9380 ; CSR8811 ; … | Use After Free in HLOS | HIGH 7.8 | 0.1 % | ||
| CVE-2025-47337 | FastConnect 6700 ; FastConnect 6900 ; FastConnect 7800 ; … | Use After Free in Camera Driver | MEDIUM 6.7 | 0.1 % | ||
| CVE-2025-47336 | FastConnect 7800 ; QMP1000 ; SM8735 ; … | Use After Free in Camera Driver | MEDIUM 6.7 | 0.1 % | ||
| CVE-2025-47335 | FastConnect 6700 ; FastConnect 6900 ; FastConnect 7800 ; … | Buffer Copy Without Checking Size of Input in Camera Driver | MEDIUM 6.7 | 0.1 % | ||
| CVE-2025-47334 | CSRA6620 ; CSRA6640 ; FastConnect 6200 ; … | Buffer Copy Without Checking Size of Input in Camera Driver | MEDIUM 6.7 | 0.1 % | ||
| CVE-2025-47333 | AQT1000 ; AR8031 ; AR8035 ; … | Use After Free in HLOS | MEDIUM 6.6 | 0.1 % | ||
| CVE-2025-47332 | FastConnect 6200 ; FastConnect 6700 ; FastConnect 6900 ; … | Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver | MEDIUM 6.7 | 0.1 % | ||
| CVE-2025-47331 | AR8031 ; AR8035 ; CSR8811 ; … | Buffer Over-read in Video | MEDIUM 6.1 | 0.1 % | ||
| CVE-2025-47330 | AR8031 ; AR8035 ; CSRA6620 ; … | Buffer Over-read in Video | MEDIUM 5.5 | 0.1 % | ||
| CVE-2025-47387 | AQT1000 ; FastConnect 6200 ; FastConnect 6700 ; … | Untrusted Pointer Dereference in Camera | HIGH 7.8 | 0.1 % | ||
| CVE-2025-47382 | FastConnect 6200 ; FastConnect 6700 ; FastConnect 6900 ; … | Incorrect Authorization in Boot | HIGH 7.8 | 0.1 % | ||
| CVE-2025-47372 | QAM8255P ; QAM8620P ; QAM8650P ; … | Buffer Copy Without Checking Size of Input in Boot | CRITICAL 9.0 | 0.1 % | ||
| CVE-2025-47350 | Cologne ; FastConnect 6900 ; FastConnect 7800 ; … | Use After Free in DSP Service | HIGH 7.8 | 0.1 % | ||
| CVE-2025-47325 | CSR8811 ; IPQ8070 ; IPQ8070A ; … | Untrusted Pointer Dereference in TZ Firmware | MEDIUM 6.5 | 0.1 % | ||
| CVE-2025-47323 | AR8035 ; CSRA6620 ; CSRA6640 ; … | Integer Overflow or Wraparound in Audio | HIGH 7.8 | 0.1 % | ||
| CVE-2025-47322 | AR8031 ; AR8035 ; CSRA6620 ; … | Use After Free in Automotive Linux OS | HIGH 7.8 | 0.1 % | ||
| CVE-2025-47321 | AR8031 ; AR8035 ; CSRA6620 ; … | Buffer Copy Without Checking Size of Input in Core Services | HIGH 7.8 | 0.1 % | ||
| CVE-2025-47320 | 9206 LTE Modem ; APQ8017 ; AQT1000 ; … | Out-of-bounds Write in Audio | HIGH 7.8 | 0.1 % | ||
| CVE-2025-47319 | AR8035 ; FastConnect 6200 ; FastConnect 6700 ; … | Exposure of Sensitive System Information to an Unauthorized Control Sphere in HLOS | MEDIUM 6.7 | 0.1 % | ||
| CVE-2025-27063 | CSRA6620 ; CSRA6640 ; FastConnect 6200 ; … | Use After Free in Video | HIGH 7.8 | 0.1 % | ||
| CVE-2025-47370 | AR8035 ; CSRB31024 ; FastConnect 6700 ; … | Reachable Assertion in BT Controller | MEDIUM 6.5 | 0.1 % | ||
| CVE-2025-47368 | FastConnect 6900 ; FastConnect 7800 ; SC8380XP ; … | Buffer Over-read in DSP Service | HIGH 7.8 | 0.1 % | ||
| CVE-2025-47367 | FastConnect 6700 ; FastConnect 6900 ; FastConnect 7800 ; … | Out-of-bounds Write in WinBlast Driver | HIGH 7.8 | 0.1 % | ||
| CVE-2025-47365 | QAM8255P ; QAM8295P ; QAM8620P ; … | Integer Overflow or Wraparound in Automotive Platform | HIGH 7.8 | 0.1 % | ||
| CVE-2025-47362 | MSM8996AU ; QAM8255P ; QAM8295P ; … | Buffer Over-read in Automotive Software platform based on QNX | MEDIUM 6.1 | 0.1 % | ||
| CVE-2025-47361 | QAM8255P ; QAM8295P ; QAM8620P ; … | Improper Validation of Array Index in Automotive Software platform based on QNX | HIGH 7.8 | 0.1 % | ||
| CVE-2025-47360 | QAM8255P ; QAM8295P ; QAM8620P ; … | Stack-based Buffer Overflow in Automotive Software platform based on QNX | HIGH 7.8 | 0.1 % | ||
| CVE-2025-47357 | QAM8255P ; QAM8620P ; QAM8650P ; … | Missing Authentication for Critical Function in SMSS | HIGH 8.0 | 0.1 % | ||
| CVE-2025-47353 | QAM8255P ; QAM8650P ; QAM8775P ; … | Exposed Dangerous Method or Function in Automotive Software platform based on QNX | HIGH 7.8 | 0.1 % | ||
| CVE-2025-47352 | FastConnect 7800 ; QCC2072 ; WCD9378C ; … | Improper Validation of Array Index in Audio | HIGH 7.8 | 0.1 % | ||
| CVE-2025-27074 | APQ8064AU ; CSR8811 ; Immersive Home 214 Platform ; … | Incorrect Calculation of Buffer Size in SCE-Mink | HIGH 8.8 | 0.1 % | ||
| CVE-2025-27070 | AR8035 ; FastConnect 6200 ; FastConnect 6700 ; … | Out-of-bounds Write in Windows Compute | HIGH 7.8 | 0.1 % | ||
| CVE-2025-27064 | FastConnect 6900 ; FastConnect 7800 ; Immersive Home 3210 Platform ; … | Buffer Over-read in Core Services | MEDIUM 6.1 | 0.1 % | ||
| CVE-2025-47355 | FastConnect 6700 ; FastConnect 6900 ; FastConnect 7800 ; … | Out-of-bounds Write in DSP Service | HIGH 7.8 | 0.1 % | ||
| CVE-2025-47354 | FastConnect 6200 ; FastConnect 6700 ; FastConnect 7800 ; … | Use After Free in DSP Service | HIGH 7.8 | 0.1 % | ||
| CVE-2025-47351 | FastConnect 6200 ; FastConnect 6700 ; FastConnect 6900 ; … | Integer Overflow or Wraparound in DSP Service | HIGH 7.8 | 0.1 % | ||
| CVE-2025-47349 | FastConnect 6900 ; FastConnect 7800 ; QCC2072 ; … | Use of Out-of-range Pointer Offset in DSP Service | HIGH 7.8 | 0.1 % | ||
| CVE-2025-47347 | QAM8255P ; QAM8295P ; QAM8620P ; … | Stack-based Buffer Overflow in Automotive Software platform based on QNX | HIGH 7.8 | 0.1 % | ||
| CVE-2025-47342 | QCC5161 ; QCC7225 ; QCC7226 ; … | Use After Free in BT Controller | HIGH 7.1 | 0.2 % | ||
| CVE-2025-47341 | FastConnect 6700 ; FastConnect 6900 ; FastConnect 7800 ; … | Buffer Copy Without Checking Size of Input in Camera | HIGH 7.8 | 0.1 % | ||
| CVE-2025-47340 | FastConnect 6900 ; FastConnect 7800 ; QCC2072 ; … | Out-of-bounds Write in DSP Service | HIGH 7.8 | 0.1 % | ||
| CVE-2025-47338 | FastConnect 6900 ; FastConnect 7800 ; QCC2072 ; … | Untrusted Pointer Dereference in DSP Service | HIGH 7.8 | 0.1 % | ||
| CVE-2025-27060 | Immersive Home 214 Platform ; Immersive Home 216 Platform ; Immersive Home 316 Platform ; … | Untrusted Pointer Dereference in TZ Firmware | HIGH 8.8 | 0.1 % | ||
| CVE-2025-27059 | Immersive Home 214 Platform ; Immersive Home 216 Platform ; Immersive Home 316 Platform ; … | Use of Out-of-range Pointer Offset in TZ Firmware | HIGH 8.8 | 0.1 % | ||
| CVE-2025-27054 | 315 5G IoT Modem ; 9205 LTE Modem ; AQT1000 ; … | Out-of-bounds Write in Display | HIGH 7.8 | 0.1 % | ||
| CVE-2025-27053 | 315 5G IoT Modem ; 9205 LTE Modem ; 9206 LTE Modem ; … | Incorrect Calculation of Buffer Size in HLOS | HIGH 7.8 | 0.1 % | ||
| CVE-2025-27049 | FastConnect 6700 ; FastConnect 6900 ; FastConnect 7800 ; … | Buffer Over-read in Camera | MEDIUM 5.5 | 0.1 % | ||
| CVE-2025-27048 | FastConnect 6900 ; FastConnect 7800 ; QCC2072 ; … | Untrusted Pointer Dereference in Camera | HIGH 7.8 | 0.1 % | ||
| CVE-2025-27045 | FastConnect 6900 ; FastConnect 7800 ; QCC2072 ; … | Buffer Over-read in Video | MEDIUM 6.1 | 0.1 % | ||
| CVE-2025-27041 | AR8035 ; FastConnect 6900 ; FastConnect 7800 ; … | Buffer Over-read in Video | MEDIUM 5.5 | 0.1 % | ||
| CVE-2025-27040 | CSR8811 ; Immersive Home 214 Platform ; Immersive Home 216 Platform ; … | Improper Input Validation in TZ Firmware | MEDIUM 6.5 | 0.1 % | ||
| CVE-2025-27039 | FastConnect 6900 ; FastConnect 7800 ; SXR2230P ; … | Detection of Error Condition Without Action in Computer Vision | MEDIUM 6.6 | 0.1 % | ||
| CVE-2025-47329 | FastConnect 7800 ; QAM8255P ; QAM8775P ; … | Release of Invalid Pointer or Reference in Android Core | HIGH 7.8 | 0.1 % | ||
| CVE-2025-47328 | FastConnect 7800 ; Immersive Home 3210 Platform ; Immersive Home 326 Platform ; … | Buffer Over-read in WLAN HAL | HIGH 7.5 | 0.2 % | ||
| CVE-2025-47327 | AQT1000 ; FastConnect 6200 ; FastConnect 6700 ; … | Use After Free in Camera | HIGH 7.8 | 0.1 % | ||
| CVE-2025-47326 | AR8035 ; CSR8811 ; FastConnect 6900 ; … | Buffer Over-read in WLAN HAL | HIGH 7.5 | 0.2 % | ||
| CVE-2025-47318 | APQ8017 ; APQ8064AU ; AQT1000 ; … | Buffer Over-read in BT Controller | HIGH 7.5 | 0.2 % |