Qualcomm

Don't miss out!

Thousands of developers use stack.watch to stay informed.
Get an email whenever new security vulnerabilities are reported in any Qualcomm product.

RSS Feeds for Qualcomm security vulnerabilities

Create a CVE RSS feed including security vulnerabilities found in Qualcomm products with stack.watch. Just hit watch, then grab your custom RSS feed url.

Products by Qualcomm Sorted by Most Security Vulnerabilities since 2018

Qualcomm Snapdragon1046 vulnerabilities

Qualcomm Sa6155p Firmware8 vulnerabilities

Qualcomm Fastconnect 7800 Firmware8 vulnerabilities

Qualcomm Fastconnect 6900 Firmware7 vulnerabilities

Qualcomm Qca6391 Firmware7 vulnerabilities

Qualcomm Qca6574au Firmware7 vulnerabilities

Qualcomm Qca6698aq Firmware7 vulnerabilities

Qualcomm Qca6696 Firmware7 vulnerabilities

Qualcomm Qam8295p Firmware7 vulnerabilities

Qualcomm Ar8035 Firmware6 vulnerabilities

Qualcomm Fastconnect 6200 Firmware6 vulnerabilities

Qualcomm Fastconnect 6700 Firmware6 vulnerabilities

Qualcomm Fastconnect 6800 Firmware6 vulnerabilities

Qualcomm Qca6595 Firmware6 vulnerabilities

Qualcomm Qca6436 Firmware6 vulnerabilities

Qualcomm Wcd9380 Firmware6 vulnerabilities

Qualcomm Wcd9385 Firmware6 vulnerabilities

Qualcomm Sa8150p Firmware6 vulnerabilities

Qualcomm Sa6145p Firmware6 vulnerabilities

Qualcomm Video Collaboration Vc3 Platform Firmware6 vulnerabilities

Qualcomm Qca6426 Firmware6 vulnerabilities

Qualcomm Qam8775p Firmware6 vulnerabilities

Qualcomm Sa8155p Firmware6 vulnerabilities

Qualcomm Qca6595au Firmware6 vulnerabilities

Qualcomm Qam8650p Firmware6 vulnerabilities

Qualcomm Qca8337 Firmware6 vulnerabilities

Qualcomm Wcd9341 Firmware6 vulnerabilities

Qualcomm Qcs6490 Firmware6 vulnerabilities

Qualcomm Qam8255p Firmware6 vulnerabilities

Qualcomm Sxr2130 Firmware5 vulnerabilities

Qualcomm Qca6174a Firmware5 vulnerabilities

Qualcomm Wsa8810 Firmware5 vulnerabilities

Qualcomm Sa8145p Firmware5 vulnerabilities

Qualcomm Qca8081 Firmware5 vulnerabilities

Qualcomm Snapdragon X55 5g Modem Rf System Firmware5 vulnerabilities

Qualcomm Sa8195p Firmware5 vulnerabilities

Qualcomm Snapdragon Xr2 5g Platform Firmware5 vulnerabilities

Qualcomm Sa8255p Firmware5 vulnerabilities

Qualcomm Qca6797aq Firmware5 vulnerabilities

Qualcomm Wsa8815 Firmware5 vulnerabilities

Qualcomm Video Collaboration Vc1 Platform Firmware5 vulnerabilities

Qualcomm Qcs8550 Firmware5 vulnerabilities

Qualcomm Sa6150p Firmware5 vulnerabilities

Qualcomm Snapdragon 865 5g Mobile Platform Firmware5 vulnerabilities

Qualcomm Sa8295p Firmware5 vulnerabilities

Qualcomm Qca6574a Firmware5 vulnerabilities

Qualcomm Snapdragon 888 5g Mobile Platform Firmware5 vulnerabilities

Qualcomm Qca6574 Firmware5 vulnerabilities

Qualcomm Qcm6490 Firmware5 vulnerabilities

Qualcomm Qcm5430 Firmware5 vulnerabilities

Qualcomm Wcd9375 Firmware5 vulnerabilities

Qualcomm Sd865 5g Firmware5 vulnerabilities

Qualcomm Wsa8835 Firmware5 vulnerabilities

Qualcomm Wsa8830 Firmware5 vulnerabilities

Qualcomm Qcs5430 Firmware5 vulnerabilities

Qualcomm Sg4150p Firmware4 vulnerabilities

Qualcomm Sa8770p Firmware4 vulnerabilities

Qualcomm Sa6155 Firmware4 vulnerabilities

Qualcomm Qcm4325 Firmware4 vulnerabilities

Qualcomm Qca9377 Firmware4 vulnerabilities

Qualcomm Aqt1000 Firmware4 vulnerabilities

Qualcomm Robotics Rb5 Platform Firmware4 vulnerabilities

Qualcomm Wcd9390 Firmware4 vulnerabilities

Qualcomm Snapdragon 8 Gen 1 Mobile Platform Firmware4 vulnerabilities

Qualcomm Wcd9335 Firmware4 vulnerabilities

Qualcomm Qca6421 Firmware4 vulnerabilities

Qualcomm Sd660 Firmware4 vulnerabilities

Qualcomm Flight Rb5 5g Platform Firmware4 vulnerabilities

Qualcomm Wsa8845 Firmware4 vulnerabilities

Qualcomm Sw5100 Firmware4 vulnerabilities

Qualcomm Qcm4490 Firmware4 vulnerabilities

Qualcomm Snapdragon 660 Mobile Platform Firmware4 vulnerabilities

Qualcomm Snapdragon 680 4g Mobile Platform Firmware4 vulnerabilities

Qualcomm Sa9000p Firmware4 vulnerabilities

Qualcomm Sw5100p Firmware4 vulnerabilities

Qualcomm Qcs7230 Firmware4 vulnerabilities

Qualcomm Wsa8840 Firmware4 vulnerabilities

Qualcomm Qrb5165n Firmware4 vulnerabilities

Qualcomm Sa4155p Firmware4 vulnerabilities

Qualcomm Sa4150p Firmware4 vulnerabilities

Qualcomm Video Collaboration Vc5 Platform Firmware4 vulnerabilities

Qualcomm Wcn3990 Firmware4 vulnerabilities

Qualcomm Qcs8250 Firmware4 vulnerabilities

Qualcomm Qca6420 Firmware4 vulnerabilities

Qualcomm Snapdragon Auto 5g Modem Rf Firmware4 vulnerabilities

Qualcomm Wcd9340 Firmware4 vulnerabilities

Qualcomm Qca6431 Firmware4 vulnerabilities

Qualcomm Qca6430 Firmware4 vulnerabilities

Qualcomm Wcd9370 Firmware4 vulnerabilities

Qualcomm Wcn3988 Firmware4 vulnerabilities

Qualcomm Wcn3980 Firmware4 vulnerabilities

Qualcomm Qcs4490 Firmware4 vulnerabilities

Qualcomm Qcs410 Firmware4 vulnerabilities

Qualcomm Wcn3950 Firmware4 vulnerabilities

Qualcomm Qcm8550 Firmware4 vulnerabilities

Qualcomm Sa8775p Firmware4 vulnerabilities

Qualcomm Wsa8845h Firmware4 vulnerabilities

Qualcomm Qcs610 Firmware4 vulnerabilities

Qualcomm Robotics Rb3 Platform Firmware3 vulnerabilities

Qualcomm 215 Mobile Platform Firmware3 vulnerabilities

Known Exploited Qualcomm Vulnerabilities

The following Qualcomm vulnerabilities have been marked by CISA as Known to be Exploited by threat actors.

Title	Description	Added
Qualcomm Multiple Chipsets Memory Corruption Vulnerability	Multiple Qualcomm chipsets contain a memory corruption vulnerability while using alignments for memory allocation. CVE-2026-21385 Exploit Probability: 1.2%	March 3, 2026
Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability	Multiple Qualcomm chipsets contain an incorrect authorization vulnerability. This vulnerability allows for memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands. CVE-2025-21479 Exploit Probability: 0.8%	June 3, 2025
Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability	Multiple Qualcomm chipsets contain an incorrect authorization vulnerability. This vulnerability allows for memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands. CVE-2025-21480 Exploit Probability: 0.5%	June 3, 2025
Qualcomm Multiple Chipsets Use-After-Free Vulnerability	Multiple Qualcomm chipsets contain a use-after-free vulnerability. This vulnerability allows for memory corruption while rendering graphics using Adreno GPU drivers in Chrome. CVE-2025-27038 Exploit Probability: 1.0%	June 3, 2025
Qualcomm Multiple Chipsets Use-After-Free Vulnerability	Multiple Qualcomm chipsets contain a use-after-free vulnerability due to memory corruption in DSP Services while maintaining memory maps of HLOS memory. CVE-2024-43047 Exploit Probability: 0.7%	October 8, 2024
Qualcomm Multiple Chipsets Integer Overflow Vulnerability	Multiple Qualcomm chipsets contain an integer overflow vulnerability due to memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call. CVE-2023-33107 Exploit Probability: 0.7%	December 5, 2023
Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability	Multiple Qualcomm chipsets contain a use of out-of-range pointer offset vulnerability due to memory corruption in Graphics while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND. CVE-2023-33106 Exploit Probability: 0.8%	December 5, 2023
Qualcomm Multiple Chipsets Use-After-Free Vulnerability	Multiple Qualcomm chipsets contain a use-after-free vulnerability due to memory corruption in DSP Services during a remote call from HLOS to DSP. CVE-2023-33063 Exploit Probability: 0.7%	December 5, 2023
Qualcomm Multiple Chipsets Use-After-Free Vulnerability	Multiple Qualcomm chipsets contain a use-after-free vulnerability when process shell memory is freed using IOCTL munmap call and process initialization is in progress. CVE-2022-22071 Exploit Probability: 0.4%	December 5, 2023
Qualcomm Multiple Chipsets Improper Input Validation Vulnerability	Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables CVE-2020-11261 Exploit Probability: 1.6%	December 1, 2021
Qualcomm Improper Error Handling Vulnerability	Improper handling of address deregistration on failure can lead to new GPU address allocation failure. CVE-2021-1906 Exploit Probability: 0.5%	November 3, 2021
Qualcomm Use-After-Free Vulnerability	Possible use after free due to improper handling of memory mapping of multiple processes simultaneously CVE-2021-1905 Exploit Probability: 1.5%	November 3, 2021

By the Year

In 2026 there have been 152 vulnerabilities in Qualcomm with an average score of 7.4 out of ten. Last year, in 2025 Qualcomm had 122 security vulnerabilities published. That is, 30 more vulnerabilities have already been reported in 2026 as compared to last year. Last year, the average CVE base score was greater by 0.24

Year	Vulnerabilities	Average Score
2026	152	7.39
2025	122	7.63
2024	6	7.82
2023	9	8.22
2022	52	7.58
2021	227	7.67
2020	170	7.10
2019	150	9.80
2018	227	0.00

It may take a day or so for new Qualcomm vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.

Recent Qualcomm Security Vulnerabilities

CVE	Date	Vulnerability	Products
CVE-2026-57559	Oct 06, 2026	Memory corruption in Qualcomm service request processing Memory corruption while processing service requests.	Snapdragon
CVE-2026-57555	Oct 06, 2026	Qualcomm Memory Corruption in System Service Routines Memory Corruption when executing system service routines due to improper handling of user input buffers.	Snapdragon
CVE-2026-57554	Oct 06, 2026	Qualcomm FastRPC: Memory Corruption on Concurrent Perf Counter Access Memory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC invocations.	Snapdragon
CVE-2026-57546	Oct 06, 2026	Qualcomm Modem Firmware DOS via Zero-Sized Config Override Transient DOS when processing a continuous receive command with a zero-sized global configuration override.	Snapdragon
CVE-2026-57545	Oct 06, 2026	Qualcomm GPU Driver: Memory Corruption via Draw Object Inconsistency Memory corruption when processing draw objects of incorrect type during graphics command list execution.	Snapdragon
CVE-2026-57537	Oct 06, 2026	Memory Corruption in Qualcomm Mapping SDK via Concurrent Access Memory Corruption when accessing and modifying geographic mapping data concurrently without proper synchronization.	Snapdragon
CVE-2026-25302	Oct 06, 2026	Qualcomm: Auth Bypass for Unsigned Images on Non-ELF Partitions Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed.	Snapdragon
CVE-2026-25291	Oct 06, 2026	Qualcomm Memory corruption in shared memory page lists (CVE-2026-25291) Memory corruption when performing concurrent operations on shared memory page lists due to lack of proper synchronization mechanisms.	Snapdragon
CVE-2026-25274	Oct 06, 2026	Qualcomm Snapdragon SoC Memory Corruption via Un-Sync DMA Buffer Memory Corruption when processing concurrent DMA buffer allocation and deallocation commands without proper synchronization.	Snapdragon
CVE-2026-25273	Oct 06, 2026	Qualcomm Camera Driver OOB Write CVE-2026-25273 Memory Corruption when processing camera operations due to out-of-bounds write during driver updates.	Snapdragon
CVE-2026-25272	Oct 06, 2026	Memory Corruption in Qualcomm Camera CRE Driver via Buffer Overflow during HW Update Memory Corruption when processing camera CRE driver operations with improper handling of buffer limits during hardware update preparation.	Snapdragon
CVE-2026-25270	Oct 06, 2026	Android Camera Driver Memory Corruption via Invalid CmdBuffer Length Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver.	Snapdragon
CVE-2026-25269	Oct 06, 2026	Qualcomm Camera Driver Memory Corruption via Excessive Batch/IO Buffer Config Memory corruption when processing camera requests with excessive batch and IO buffer configurations exceeds allocated memory size.	Snapdragon
CVE-2026-25267	Oct 06, 2026	Qualcomm Secure Bootloader Mem Corruption via Page Table Rewrite Memory corruption when non-secure loader rewrites page tables before secure memory initialization.	Snapdragon
CVE-2026-25263	Oct 06, 2026	Qualcomm IOCTL Kernel Memory Corruption Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters.	Snapdragon
CVE-2026-25265	Sep 22, 2026	Priv Esc via Weak Temp File Handling in Qualcomm Device Privilege escalation due to weak configuration while temporary file handling.	Snapdragon
CVE-2026-25264	Sep 22, 2026	Qualcomm Android Priv Esc via Weak Config in Package Extraction Privilege escalation due to weak configuration during package extraction process.	Snapdragon
CVE-2026-25262	Sep 22, 2026	Qualcomm Primary Bootloader memory corruption via crafted ELF file Memory corruption while processing a crafted ELF file in the Primary Bootloader.	Snapdragon
CVE-2026-25255	Sep 22, 2026	Qualcomm gRPC Server Privilege Escalation via Dangerous Function Exposed dangerous function lead to privilege escalation via gRPC server.	Snapdragon
CVE-2026-25254	Sep 22, 2026	Qualcomm RCE via Improper Auth on SocketIO Improper authorization leads to Remote Code Execution via SocketIO interface.	Snapdragon
CVE-2026-25294	Sep 17, 2026	Qualcomm DOS via Transient Frame Parsing in Channel Usage Transient DOS while parsing frame during channel usage.	Snapdragon
CVE-2026-25290	Sep 17, 2026	Qualcomm buffer overflow via misused addition in length check Memory Corruption when validating large data buffers from external sources using addition to check buffer length.	Snapdragon
CVE-2026-25284	Sep 17, 2026	Qualcomm UAF Pointer Reuse Info Disclosure Information Disclosure when a pointer is reused after being deallocated.	Snapdragon
CVE-2026-25283	Sep 17, 2026	Qualcomm Buffer Overflow in External Data Copy Memory Corruption when copying unverified data from an external source exceeds the allocated buffer size.	Snapdragon
CVE-2026-25282	Sep 17, 2026	Qualcomm: Transient DOS via OOB Memory Access in Neighboring Data Processing Transient DOS when processing unverified data from a neighboring system causes out of bound memory access.	Snapdragon
CVE-2026-25281	Sep 17, 2026	Qualcomm Buffer Overflow Leads to Transient DoS Transient DOS when processing large or numerous request buffers without sufficient memory allocation validation.	Snapdragon
CVE-2026-25280	Sep 17, 2026	Qualcomm Escape Flow Buffer Overflow: Memory Corruption Memory corruption when processing escape handling flow with insufficient user buffer sizes.	Snapdragon
CVE-2026-25278	Sep 17, 2026	Qualcomm I2C Driver MemCorruption Race Condition Memory Corruption when processing I2C transfer requests due to a race condition between memory allocation and data copying.	Snapdragon
CVE-2026-25275	Sep 17, 2026	Qualcomm WLAN Driver Transient DoS via Invalid FILS IE Header Length Transient DOS when processing authentication frames with invalid FILS information element header lengths.	Snapdragon
CVE-2026-25261	Sep 17, 2026	CVE-2026-25261: Memory Corruption in Qualcomm Rear Sensor IOCTL Memory corruption while processing rear sensor IOCTL calls.	Snapdragon
CVE-2026-24081	Sep 17, 2026	Qualcomm Bluetooth Transient DOS via Insufficient Channel Map with AFH Enabled Transient DOS when processing a channel map with insufficient used channels and adaptive frequency hopping is fully enabled.	Snapdragon
CVE-2026-24075	Sep 17, 2026	Qualcomm IOCTL Race Causes Memory Corruption in Kernel Driver Memory Corruption when multiple threads issue concurrent IOCTL requests to the device control handler due to improper synchronization and race conditions.	Snapdragon
CVE-2026-24074	Sep 17, 2026	Qualcomm Data Copy Buffer Overflow in Handling Large Offsets Memory Corruption when processing data with large offset and length values exceeds buffer limits during data copy operations.	Snapdragon
CVE-2026-24073	Sep 17, 2026	Memory corruption in Qualcomm Snapdragon Media Codec decode stats Memory corruption when processing decode statistics due to insufficient validation of offset against structure size.	Snapdragon
CVE-2025-59607	Sep 17, 2026	Qualcomm Memory Corruption via Large Input Over-Allocation Memory Corruption when copying large input data exceeds normal allocation limits.	Snapdragon
CVE-2026-25292	Aug 04, 2026	Memory Corruption in QCOM Fastboot Audio Framework Memory Corruption when processing untrusted user input in the fastboot command handler for audio framework configuration.	Snapdragon
CVE-2026-25289	Aug 04, 2026	Qualcomm Wi-Fi Driver Memory Corruption via Invalid NAN Frame Length Memory Corruption when processing Device Capability Extended attributes in certain NAN Service Discovery Frames with invalid length values.	Snapdragon
CVE-2026-25288	Aug 04, 2026	Transient DOS: Short TWTA Frame Insufficient Packet - Qualcomm WiFi Subsystem Transient DOS when processing a short target wake time channel usage response frame with insufficient packet size.	Snapdragon
CVE-2026-24084	Aug 04, 2026	Qualcomm UE Config Weakness: Inconsistent Security Capabilities Replay Attacks Weak configuration when UE does not verify the consistency of its additional security capabilities with the replayed capabilities.	Snapdragon
CVE-2026-24083	Aug 04, 2026	Memory Corruption in Qualcomm Snapdragon IOCTL Device Driver Memory Corruption while processing IOCTL device driver requests with invalid arguments.	Snapdragon
CVE-2026-24080	Aug 04, 2026	CVE-2026-24080: Memory Corruption via Malformed Params in QCOM FP TA Memory Corruption when handling malformed request parameters in the fingerprint TA.	Snapdragon
CVE-2026-24079	Aug 04, 2026	Qualcomm Crypto Fault in Reg Auth \| Malformed Params CVE-2026-24079 Cryptographic Issue while processing registration requests with malformed or missing authentication parameters.	Snapdragon
CVE-2026-24078	Aug 04, 2026	Qualcomm NG-eCall IPSec Negotiation Info Disclosure Information Disclosure when IPSec negotiation fails or is not established properly during NG-eCall SIP signaling.	Snapdragon
CVE-2026-24077	Aug 04, 2026	Qualcomm Wi-Fi Driver INFO Disclosure via Bad Length Field Information Disclosure when processing wireless network channel switch information with improperly formatted length fields.	Snapdragon
CVE-2026-24076	Aug 04, 2026	Qualcomm Driver Mem Corruption via Bad Reg Query Memory Corruption when processing registry values with incorrect types using a direct query method.	Snapdragon
CVE-2026-21366	Aug 04, 2026	Qualcomm Packet Processing Buffer Overflow: CVE-2026-21366 Memory corruption while processing a packet with a size close to the maximum allowed value.	Snapdragon
CVE-2026-25271	Jul 06, 2026	Qualcomm Android Memory Corruption in Async Param Handling Memory Corruption when processing asynchronous input parameters due to improper handling of modified values between check and use.	Snapdragon
CVE-2026-25268	Jul 06, 2026	Qualcomm Wi-Fi Firmware HT40 Layout Memory Corruption Memory Corruption when processing invalid HT40 channel layouts during dynamic channel switching operations.	Snapdragon
CVE-2026-21384	Jul 06, 2026	Qualcomm Modem Firmware Memcorrupt via Invalid Port Index Memory Corruption when updating prepared commands with invalid port indices based on user space input exceeds supported read client limits.	Snapdragon
CVE-2026-21383	Jul 06, 2026	Qualcomm Static IV in AES-GCM Key Wrap Causes Crypto Flaw Cryptographic Issue when using a static initialization vector for AES-GCM key wrapping, which requires a unique value for each call to ensure security.	Snapdragon