Qualcomm Product
by Qualcomm
CVEs (35)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2024-49847 | Hig | 0.49 | 7.5 | 0.00 | May 6, 2025 | Transient DOS while processing of a registration acceptance OTA due to incorrect ciphering key data IE. | ||
| CVE-2024-33020 | Hig | 0.49 | 7.5 | 0.00 | Aug 5, 2024 | Transient DOS while processing TID-to-link mapping IE elements. | ||
| CVE-2025-47400 | Hig | 0.46 | 7.1 | 0.00 | Apr 6, 2026 | Cryptographic issue while copying data to a destination buffer without validating its size. | ||
| CVE-2026-25269 | Med | 0.44 | 6.7 | 0.00 | Oct 6, 2026 | Memory corruption when processing camera requests with excessive batch and IO buffer configurations exceeds allocated memory size. | ||
| CVE-2025-59613 | Med | 0.44 | 6.7 | 0.00 | Jun 1, 2026 | Memory Corruption when output buffer size is smaller than input buffer size during data copying operation. | ||
| CVE-2024-33059 | Med | 0.44 | 6.7 | 0.00 | Jan 6, 2025 | Memory corruption while processing frame command IOCTL calls. | ||
| CVE-2023-43544 | Med | 0.44 | 6.7 | 0.00 | Jun 3, 2024 | Memory corruption when IPC callback handle is used after it has been released during register callback by another thread. | ||
| CVE-2024-53015 | Med | 0.43 | 6.6 | 0.00 | Jun 3, 2025 | Memory corruption while processing IOCTL command to handle buffers associated with a session. | ||
| CVE-2024-38412 | Med | 0.43 | 6.6 | 0.00 | Feb 3, 2025 | Memory corruption while invoking IOCTL calls from user-space to kernel-space to handle session errors. | ||
| CVE-2024-23366 | Med | 0.43 | 6.6 | 0.00 | Jan 6, 2025 | Information Disclosure while invoking the mailbox write API when message received from user is larger than mailbox size. | ||
| CVE-2025-47401 | Med | 0.42 | 6.5 | 0.00 | May 4, 2026 | Transient DOS when processing target power rate tables during channel configuration. | ||
| CVE-2025-21464 | Med | 0.42 | 6.5 | 0.00 | Aug 6, 2025 | Information disclosure while reading data from an image using specified offset and size parameters. | ||
| CVE-2025-27030 | Med | 0.40 | 6.1 | 0.00 | Sep 24, 2025 | information disclosure while invoking calibration data from user space to update firmware size. | ||
| CVE-2024-43063 | Med | 0.40 | 6.1 | 0.00 | Jan 6, 2025 | information disclosure while invoking the mailbox read API. | ||
| CVE-2026-25271 | Hig | 0.00 | 7.8 | 0.00 | Jul 6, 2026 | Memory Corruption when processing asynchronous input parameters due to improper handling of modified values between check and use. |
- risk 0.49cvss 7.5epss 0.00
Transient DOS while processing of a registration acceptance OTA due to incorrect ciphering key data IE.
- risk 0.49cvss 7.5epss 0.00
Transient DOS while processing TID-to-link mapping IE elements.
- risk 0.46cvss 7.1epss 0.00
Cryptographic issue while copying data to a destination buffer without validating its size.
- risk 0.44cvss 6.7epss 0.00
Memory corruption when processing camera requests with excessive batch and IO buffer configurations exceeds allocated memory size.
- risk 0.44cvss 6.7epss 0.00
Memory Corruption when output buffer size is smaller than input buffer size during data copying operation.
- risk 0.44cvss 6.7epss 0.00
Memory corruption while processing frame command IOCTL calls.
- risk 0.44cvss 6.7epss 0.00
Memory corruption when IPC callback handle is used after it has been released during register callback by another thread.
- risk 0.43cvss 6.6epss 0.00
Memory corruption while processing IOCTL command to handle buffers associated with a session.
- risk 0.43cvss 6.6epss 0.00
Memory corruption while invoking IOCTL calls from user-space to kernel-space to handle session errors.
- risk 0.43cvss 6.6epss 0.00
Information Disclosure while invoking the mailbox write API when message received from user is larger than mailbox size.
- risk 0.42cvss 6.5epss 0.00
Transient DOS when processing target power rate tables during channel configuration.
- risk 0.42cvss 6.5epss 0.00
Information disclosure while reading data from an image using specified offset and size parameters.
- risk 0.40cvss 6.1epss 0.00
information disclosure while invoking calibration data from user space to update firmware size.
- risk 0.40cvss 6.1epss 0.00
information disclosure while invoking the mailbox read API.
- risk 0.00cvss 7.8epss 0.00
Memory Corruption when processing asynchronous input parameters due to improper handling of modified values between check and use.
Page 2 of 2