Skip to content
Noroxi

qualcomm records

2,538 published records for vendor qualcomm.

Researcher profile

Entered KEV
13 · 0.5%
Weaponized
14 · 0.6%
Pre-auth RCE
23
With a fix record
0.2%
Median publish → KEV
1 days

Records by year

  1. 18
  2. 19
  3. 20
  4. 21
  5. 22
  6. 23
  7. 24
  8. 25
  9. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

2,538 records
  • CVE-2025-21479
    64This week

    Incorrect Authorization in Graphics

    HighCVSS 8.6KEVWeaponizedEPSS 1%

    qualcomm · aqt1000 firmwareJun 3, 2025

  • CVE-2025-21480
    64This week

    Incorrect Authorization in Graphics Windows

    HighCVSS 8.6KEVWeaponizedEPSS 0%

    qualcomm · aqt1000 firmwareJun 3, 2025

  • CVE-2013-2596
    62This week

    Integer overflow in the fb_mmap function in drivers/video/fbmem.c in the Linux kernel before 3.8.9, as used in a certain Motorola build of A

    HighCVSS 7.8KEVWeaponizedEPSS 3%

    linux · linux kernelApr 12, 2013

  • CVE-2020-11261
    61This week

    Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto,

    HighCVSS 7.8KEVWeaponizedEPSS 2%

    qualcomm · apq8009 firmwareJun 9, 2021

  • CVE-2021-1905
    61This week

    Possible use after free due to improper handling of memory mapping of multiple processes simultaneously.

    HighCVSS 7.8KEVWeaponizedEPSS 2%

    qualcomm · apq8009 firmwareMay 7, 2021

  • CVE-2026-21385
    61This week

    Integer Overflow or Wraparound in Graphics

    HighCVSS 7.8KEVWeaponizedEPSS 1%

    qualcomm · sm7675p firmwareMar 2, 2026

  • CVE-2023-33106
    61This week

    Use of Out-of-range Pointer Offset in Graphics

    HighCVSS 7.8KEVWeaponizedEPSS 1%

    qualcomm · ar8035 firmwareDec 4, 2023

  • CVE-2023-33107
    61This week

    Integer Overflow or Wraparound in Graphics Linux

    HighCVSS 7.8KEVWeaponizedEPSS 1%

    qualcomm · 315 5g iot modem firmwareDec 4, 2023

  • CVE-2023-33063
    61This week

    Use After Free in DSP Services

    HighCVSS 7.8KEVWeaponizedEPSS 1%

    qualcomm · 315 5g iot modem firmwareDec 4, 2023

  • CVE-2024-43047
    61This week

    Use After Free in DSP Service

    HighCVSS 7.8KEVWeaponizedEPSS 1%

    qualcomm · fastconnect 6700 firmwareOct 7, 2024

  • CVE-2022-22071
    61This week

    Possible use after free when process shell memory is freed using IOCTL munmap call and process initialization is in progress in Snapdragon A

    HighCVSS 7.8KEVWeaponizedEPSS 0%

    qualcomm · apq8053 firmwareJun 14, 2022

  • CVE-2025-27038
    60This week

    Use After Free in Graphics

    HighCVSS 7.5KEVWeaponizedEPSS 1%

    qualcomm · ar8031 firmwareJun 3, 2025

  • CVE-2021-1906
    52Plan

    Improper handling of address deregistration on failure can lead to new GPU address allocation failure.

    MediumCVSS 5.5KEVWeaponizedEPSS 1%

    qualcomm · apq8009 firmwareMay 7, 2021

  • CVE-2005-4267
    50Plan

    Stack-based buffer overflow in Qualcomm WorldMail 3.0 allows remote attackers to execute arbitrary code via a long IMAP command that ends wi

    HighCVSS 7.5WeaponizedEPSS 67%

    qualcomm · worldmailDec 21, 2005

  • CVE-2020-3657
    48Plan

    u'Remote code execution can happen by sending a carefully crafted POST query when Device configuration is accessed from a tethered client th

    CriticalCVSS 9.8No exploitEPSS 28%

    qualcomm · apq8009 firmwareNov 2, 2020

  • CVE-2020-11117
    45Plan

    u'In the lbd service, an external user can issue a specially crafted debug command to overwrite arbitrary files with arbitrary content resul

    CriticalCVSS 9.8No exploitEPSS 20%

    qualcomm · ipq4019 firmwareSep 8, 2020

  • CVE-2020-11264
    43Plan

    Improper authentication of Non-EAPOL/WAPI plaintext frames during four-way handshake can lead to arbitrary network packet injection in Snapd

    CriticalCVSS 9.8No exploitEPSS 13%

    qualcomm · apq8053 firmwareSep 8, 2021

  • CVE-1999-0006
    43Plan

    Buffer overflow in POP servers based on BSD/Qualcomm's qpopper allows remote attackers to gain root access using a long PASS command.

    CriticalCVSS 9.8Proof of conceptEPSS 12%

    qualcomm · qpopperJul 14, 1998

  • CVE-2003-0143
    43Plan

    The pop_msg function in qpopper 4.0.x before 4.0.5fc2 does not null terminate a message buffer after a call to Qvsnprintf, which could allow

    CriticalCVSS 10.0Proof of conceptEPSS 9%

    qualcomm · qpopperMar 18, 2003

  • CVE-1999-0822
    41Plan

    Buffer overflow in Qpopper (qpop) 3.0 allows remote root access via AUTH command.

    CriticalCVSS 10.0Proof of conceptEPSS 5%

    qualcomm · qpopperNov 30, 1999

  • CVE-2001-1046
    41Plan

    Buffer overflow in qpopper (aka qpop or popper) 4.0 through 4.0.2 allows remote attackers to gain privileges via a long username.

    CriticalCVSS 10.0No exploitEPSS 2%

    qualcomm · qpopperJun 2, 2001

  • CVE-2021-30351
    40Plan

    An out of bound memory access can occur due to improper validation of number of frames being passed during music playback in Snapdragon Auto

    CriticalCVSS 9.8No exploitEPSS 4%

    qualcomm · apq8009 firmwareJan 3, 2022

  • CVE-2021-1965
    40Plan

    Possible buffer overflow due to lack of parameter length check during MBSSID scan IE parse in Snapdragon Auto, Snapdragon Compute, Snapdrago

    CriticalCVSS 9.8Proof of conceptEPSS 3%

    qualcomm · aqt1000 firmwareJul 13, 2021

  • CVE-2020-11153
    40Plan

    u'Out of bound memory access while processing GATT data received due to lack of check of pdu data length and leads to remote code execution'

    CriticalCVSS 9.8No exploitEPSS 2%

    qualcomm · apq8053 firmwareNov 2, 2020

  • CVE-2017-14911
    40Plan

    In Android before 2018-01-05 on Qualcomm Snapdragon IoT, Snapdragon Mobile, Snapdragon Automobile APQ8096AU, MDM9206, MDM9650, MSM8996AU, SD

    CriticalCVSS 9.8No exploitEPSS 2%

    qualcomm · mdm9206 firmwareMar 30, 2018