Vulnerabilities > Qualcomm
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2025-05-06 | CVE-2025-21467 | Out-of-bounds Write vulnerability in Qualcomm products Memory corruption while reading the FW response from the shared queue. | 7.8 |
| 2025-05-06 | CVE-2025-21468 | Out-of-bounds Write vulnerability in Qualcomm products Memory corruption while reading response from FW, when buffer size is changed by FW while driver is using this size to write null character at the end of buffer. | 7.8 |
| 2025-05-06 | CVE-2025-21469 | Improper Access Control vulnerability in Qualcomm products Memory corruption while processing image encoding, when input buffer length is 0 in IOCTL call. | 7.8 |
| 2025-05-06 | CVE-2025-21470 | Improper Access Control vulnerability in Qualcomm products Memory corruption while processing image encoding, when configuration is NULL in IOCTL parameter. | 7.8 |
| 2025-05-06 | CVE-2025-21475 | Buffer Over-read vulnerability in Qualcomm products Memory corruption while processing escape code, when DisplayId is passed with large unsigned value. | 7.8 |
| 2025-03-03 | CVE-2024-38426 | Improper Authentication vulnerability in Qualcomm products While processing the authentication message in UE, improper authentication may lead to information disclosure. | 5.3 |
| 2025-03-03 | CVE-2024-43051 | Improper Authorization vulnerability in Qualcomm products Information disclosure while deriving keys for a session for any Widevine use case. | 5.5 |
| 2025-03-03 | CVE-2024-43055 | Classic Buffer Overflow vulnerability in Qualcomm products Memory corruption while processing camera use case IOCTL call. | 7.8 |
| 2025-03-03 | CVE-2024-43056 | Buffer Over-read vulnerability in Qualcomm products Transient DOS during hypervisor virtual I/O operation in a virtual machine. | 6.5 |
| 2025-03-03 | CVE-2024-43057 | Use After Free vulnerability in Qualcomm products Memory corruption while processing command in Glink linux. | 7.8 |