qualcomm

Qualcomm, Inc.

CVEs, 365 days1763,757 all time, 678 rejected
Quality100%median 99%
CVSS by the CNA100%share of records
CWE100%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA0%lower is better
OrganisationQualcomm, Inc.
RoleCNA
TypeVendor
Reports tomitre
ScopeQualcomm and Snapdragon issues only.
Advisorieshttps://www.qualcomm.com/company/product-security/bulletins
  • CVE-2026-57559 2026-10-06 · CVSS 7.8
    Memory corruption while processing service requests.
  • CVE-2026-57555 2026-10-06 · CVSS 7.8
    Memory Corruption when executing system service routines due to improper handling of user input buffers.
  • CVE-2026-57554 2026-10-06 · CVSS 7.8
    Memory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC invocations.
  • CVE-2026-57546 2026-10-06 · CVSS 7.5
    Transient DOS when processing a continuous receive command with a zero-sized global configuration override.
  • CVE-2026-57545 2026-10-06 · CVSS 7.8
    Memory corruption when processing draw objects of incorrect type during graphics command list execution.
  • CVE-2026-57537 2026-10-06 · CVSS 7.8
    Memory Corruption when accessing and modifying geographic mapping data concurrently without proper synchronization.
  • CVE-2026-25302 2026-10-06 · CVSS 7.1
    Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted an
  • CVE-2026-25291 2026-10-06 · CVSS 7.8
    Memory corruption when performing concurrent operations on shared memory page lists due to lack of proper synchronization mechanisms.
  • CVE-2026-25274 2026-10-06 · CVSS 6.7
    Memory Corruption when processing concurrent DMA buffer allocation and deallocation commands without proper synchronization.
  • CVE-2026-25273 2026-10-06 · CVSS 6.7
    Memory Corruption when processing camera operations due to out-of-bounds write during driver updates.
  • CVE-2026-25272 2026-10-06 · CVSS 6.7
    Memory Corruption when processing camera CRE driver operations with improper handling of buffer limits during hardware update preparation.
  • CVE-2026-25270 2026-10-06 · CVSS 6.7
    Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver.
  • CVE-2026-25269 2026-10-06 · CVSS 6.7
    Memory corruption when processing camera requests with excessive batch and IO buffer configurations exceeds allocated memory size.
  • CVE-2026-25267 2026-10-06 · CVSS 7.8
    Memory corruption when non-secure loader rewrites page tables before secure memory initialization.
  • CVE-2026-25263 2026-10-06 · CVSS 6.6
    Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters.
  • CVE-2026-25265 2026-09-22 · CVSS 8.8
    Privilege escalation due to weak configuration while temporary file handling.
  • CVE-2026-25264 2026-09-22 · CVSS 8.8
    Privilege escalation due to weak configuration during package extraction process.
  • CVE-2026-25262 2026-09-22 · CVSS 6.9
    Memory corruption while processing a crafted ELF file in the Primary Bootloader.
  • CVE-2026-25255 2026-09-22 · CVSS 8.8
    Exposed dangerous function lead to privilege escalation via gRPC server.
  • CVE-2026-25254 2026-09-22 · CVSS 9.8
    Improper authorization leads to Remote Code Execution via SocketIO interface.
  • CVE-2026-25294 2026-09-17 · CVSS 7.4
    Transient DOS while parsing frame during channel usage.
  • CVE-2026-25290 2026-09-17 · CVSS 7.8
    Memory Corruption when validating large data buffers from external sources using addition to check buffer length.
  • CVE-2026-25284 2026-09-17 · CVSS 7.3
    Information Disclosure when a pointer is reused after being deallocated.
  • CVE-2026-25283 2026-09-17 · CVSS 8.8
    Memory Corruption when copying unverified data from an external source exceeds the allocated buffer size.
  • CVE-2026-25282 2026-09-17 · CVSS 7.9
    Transient DOS when processing unverified data from a neighboring system causes out of bound memory access.

All CVE Program partners