Skip to content
Qualcomm Qca7500 vulnerabilities
-
qualcomm ar9380 firmware, csr8811 firmware, fastconnect 6200 firmware +244 more +246 more
Missing Authentication for Critical Function in Boot
CVE-2026-24088
Public exploitFix available
8.2 High
-
qualcomm ar8035 firmware, ar9380 firmware, csr8811 firmware +183 more +185 more
Use After Free in HLOS
CVE-2025-47339
7.8 High
-
qualcomm ar8035 firmware, ar9380 firmware, csr8811 firmware +279 more +281 more
Buffer Over-read in WLAN Host Communication
CVE-2024-33050
Fix available
7.5 High
-
qualcomm 315 5g iot modem firmware, 860 mobile platform firmware, apq8064au firmware +323 more +325 more
Buffer Over-read in WLAN Host
CVE-2024-33014
Fix available
7.5 High
-
qualcomm ar8035 firmware, ar9380 firmware, csr8811 firmware +247 more +249 more
Buffer Over-read in WLAN Host
CVE-2024-33012
Fix available
7.5 High
-
qualcomm ar8035 firmware, ar9380 firmware, csr8811 firmware +247 more +249 more
Buffer Over-read in WLAN Host
CVE-2024-33011
Fix available
7.5 High
-
qualcomm ar8035 firmware, ar9380 firmware, csr8811 firmware +246 more +248 more
Use After Free in WLAN Host
CVE-2024-33010
Fix available
7.5 High
-
qualcomm ar8035 firmware, ar9380 firmware, csr8811 firmware +173 more +175 more
Buffer Over-read in WLAN HOST
CVE-2024-21459
Fix available
6.5 Medium
-
qualcomm apq8064au firmware, aqt1000 firmware, ar8035 firmware +341 more +343 more
Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Qualcomm IPC
CVE-2024-23368
Fix available
7.8 High
-
qualcomm ar8035 firmware, ar9380 firmware, csr8811 firmware +130 more +132 more
Improper Input Validation in WIN SON
CVE-2024-21473
9.8 Critical
-
qualcomm ar8035 firmware, ar9380 firmware, csr8811 firmware +158 more +160 more
Configuration Issue in WLAN Host and Firmware
CVE-2023-33105
Public exploit
7.5 High
-
qualcomm ar8035 firmware, ar9380 firmware, csr8811 firmware +100 more +102 more
Buffer over-read without Checking Size of Input in WLAN Host
CVE-2023-33116
7.5 High
-
qualcomm ar8035 firmware, ar9380 firmware, csr8811 firmware +113 more +115 more
Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Host
CVE-2023-33083
9.8 Critical
-
qualcomm ar8035 firmware, ar9380 firmware, csr8811 firmware +113 more +115 more
Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Host
CVE-2023-33082
9.8 Critical
-
qualcomm 315 5g iot modem firmware, 8098 firmware, 8953pro firmware +313 more +315 more
Use After Free in DSP Services
CVE-2023-33063
In KEVFix available
7.8 High
-
qualcomm aqt1000 firmware, ar9380 firmware, csr8811 firmware +206 more +208 more
Buffer Over-read in WLAN HAL
CVE-2023-28569
6.1 Medium
-
qualcomm aqt1000 firmware, ar8031 firmware, ar8035 firmware +228 more +230 more
Buffer Over-read in IOE Firmware
CVE-2023-28563
6.1 Medium
-
qualcomm aqt1000 firmware, ar9380 firmware, c-v2x 9150 firmware +146 more +148 more
Buffer Over-read in Qualcomm IPC
CVE-2023-28554
Fix available
6.1 Medium
-
qualcomm ar8035 firmware, ar9380 firmware, csr8811 firmware +142 more +144 more
Buffer Over-read in WLAN Host
CVE-2023-28553
Fix available
6.1 Medium
-
qualcomm ar8035 firmware, ar9380 firmware, csr8811 firmware +155 more +157 more
Buffer Copy Without Checking Size of Input in WLAN Host
CVE-2023-28539
Fix available
6.6 Medium
-
qualcomm 315 5g iot firmware, aqt1000 firmware, ar8031 firmware +289 more +291 more
Improper Validation of Array Index in WLAN HAL
CVE-2023-28567
7.8 High
-
qualcomm 9205 lte firmware, apq8017 firmware, apq8064au firmware +292 more +294 more
Improper Validation of Array Index in WLAN HAL
CVE-2023-28565
7.8 High
-
qualcomm aqt1000 firmware, ar8031 firmware, ar9380 firmware +247 more +249 more
Use of Out-of-range Pointer Offset in WLAN HAL
CVE-2023-28564
7.8 High
-
qualcomm 8098 firmware, 8998 firmware, apq5053-aa firmware +265 more +267 more
Buffer Copy Without Checking Size of Input in WLAN HAL
CVE-2023-28560
7.8 High
-
qualcomm aqt1000 firmware, ar8031 firmware, ar9380 firmware +211 more +213 more
Buffer Copy Without Checking Size of Input in WLAN HAL
CVE-2023-28559
7.8 High
-
qualcomm 315 5g iot modem firmware, aqt1000 firmware, ar8035 firmware +223 more +225 more
Improper Restriction of Operations within the Bounds of a Memory Buffer in WLAN HAL
CVE-2023-28549
7.8 High
-
qualcomm aqt1000 firmware, ar9380 firmware, csr8811 firmware +204 more +206 more
Buffer Copy without Checking the Size of Input in WLAN Firmware
CVE-2023-28544
7.8 High
-
qualcomm aqt1000 firmware, ar8031 firmware, ar9380 firmware +223 more +225 more
Buffer Over-read in WLAN Host
CVE-2023-28541
Fix available
7.8 High
-
qualcomm 205 firmware, 215 firmware, 315 5g iot firmware +269 more +271 more
Use of Out-of-range Pointer Offset in Qualcomm IPC
CVE-2023-22387
Fix available
7.8 High
-
qualcomm apq8017 firmware, apq8064au firmware, apq8076 firmware +281 more +283 more
Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN HAL
CVE-2023-21628
8.4 High
-
qualcomm apq8009 firmware, apq8017 firmware, apq8076 firmware +236 more +238 more
Buffer copy without checking the size of input in WLAN HAL.
CVE-2022-25655
8.4 High
-
qualcomm ar9380 firmware, csr8811 firmware, ipq4019 firmware +72 more +74 more
Stack based buffer overflow in WLAN
CVE-2022-33279
9.8 Critical
-
qualcomm apq8096au firmware, aqt1000 firmware, ar9380 firmware +155 more +157 more
Improper access control in Qualcomm IPC
CVE-2022-33243
Fix available
8.4 High
-
qualcomm qca7500 firmware, qca7520 firmware, qca7550 firmware +1 more +3 more
Information exposure in Powerline Communication Firmware
CVE-2022-33265
7.3 High
-
qualcomm apq8096au firmware, ar9380 firmware, csr8811 firmware +76 more +78 more
Information Exposure in DSP Services
CVE-2022-25722
Fix available
6.0 Medium
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +282 more +284 more
Transient DOS due to loop with unreachable exit condition in WLAN while processing an incoming...
CVE-2022-33238
7.5 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8096au firmware, aqt1000 firmware +141 more +143 more
Memory corruption in diag due to use after free while processing dci packet in Snapdragon Auto,...
CVE-2022-25677
Fix available
6.7 Medium
-
qualcomm, inc. snapdragon wired infrastructure and networking, qualcomm ar9380 firmware, csr8811 firmware +67 more +69 more
Information disclosure in kernel due to improper handling of ICMP requests in Snapdragon Wired...
CVE-2022-25667
7.5 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8096au firmware, aqt1000 firmware +146 more +148 more
Memory corruption due to use after free in service while trying to access maps by different...
CVE-2022-25666
Fix available
6.7 Medium
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8035 firmware +169 more +171 more
Possible buffer over read due to lack of size validation while copying data from DBR buffer to RX...
CVE-2021-35071
Fix available
5.5 Medium
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ar8035 firmware, ar9380 firmware +147 more +149 more
Possible out of bound write due to improper validation of number of timer values received from...
CVE-2021-35103
Fix available
7.8 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8035 firmware +183 more +185 more
Possible out of bound read due to improper validation of IE length during SSID IE parse when...
CVE-2021-35088
Fix available
8.2 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8096au firmware, aqt1000 firmware +189 more +191 more
Improper validation of data length received from DMA buffer can lead to memory corruption. in...
CVE-2021-35069
Fix available
7.8 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8096au firmware, ar8031 firmware +157 more +159 more
Possible out of bound access of DCI resources due to lack of validation process and resource...
CVE-2021-30325
Fix available
6.7 Medium
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8096au firmware, ar8031 firmware +149 more +151 more
Possible out of bound write due to lack of boundary check for the maximum size of buffer when...
CVE-2021-30324
Fix available
6.7 Medium
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +194 more +196 more
An out of bound memory access can occur due to improper validation of number of frames being...
CVE-2021-30351
9.8 Critical
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +237 more +239 more
Possible buffer overflow due to lack of buffer length check when segmented WMI command is...
CVE-2021-30303
7.8 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8096au firmware, ar8031 firmware +178 more +180 more
Use after free condition can occur in wired connectivity due to a race condition while creating...
CVE-2021-30313
Fix available
6.7 Medium
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +208 more +210 more
Possible use after free when process shell memory is freed using IOCTL call and process...
CVE-2021-30337
Fix available
8.4 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009w firmware, aqt1000 firmware +172 more +174 more
Possible assertion in QOS request due to improper validation when multiple add or update request...
CVE-2021-30335
Fix available
8.4 High
- Show olderLoading…