Qualcomm, Inc. has 105 CVEs on record between 2024 and 2026. Disclosure cadence is accelerating: 35 in the last 90 days against 3 in the 90 before. The busiest recent month was January 2026 with 22. The median CVSS is 7.8 (high), with 1 rated critical. None have a confirmed exploitation report. The dominant weakness classes are CWE-126 (24) and CWE-416 (18). Most affected products: cologne_firmware (12), fastconnect_6200_firmware (9), fastconnect_6700_firmware (9).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 7.8
- Publish → KEV
- —
- Last 90 days
- 35 prev 3
Weakness classes
Products
- cologne_firmware 12
- fastconnect_6200_firmware 9
- fastconnect_6700_firmware 9
- fastconnect_6900_firmware 9
- snapdragon_g1_gen_2_gaming_platform_firmware 6
- Snapdragon 4
Worst active — by depth score
CVE-2026-25254Critical· 9.8Improper authorization leads to Remote Code Execution via SocketIO interface.54CVE-2026-25262Medium· 6.9Memory corruption while processing a crafted ELF file in the Primary Bootloader.50CVE-2026-25265High· 8.8Privilege escalation due to weak configuration while temporary file handling.48CVE-2026-25264High· 8.8Privilege escalation due to weak configuration during package extraction process.48CVE-2026-25255High· 8.8Exposed dangerous function lead to privilege escalation via gRPC server.48
qualcomm vulnerabilities
CVEs affecting qualcomm, newest first. Open any entry for full detail, references, and exploit status.
105 CVEsRSS
CVE-2025-47348High· 7.8Memory corruption while processing identity credential operations in the trusted application.
Memory corruption while processing identity credential operations in the trusted application.
CVE-2025-47346High· 7.8Memory corruption while processing a secure logging command in the trusted application.
Memory corruption while processing a secure logging command in the trusted application.
CVE-2025-47345High· 8.4Cryptographic issue may occur while encrypting license data.
Cryptographic issue may occur while encrypting license data.
CVE-2025-47344Medium· 6.7Memory corruption while handling sensor utility operations.
Memory corruption while handling sensor utility operations.
CVE-2025-47343High· 7.8Memory corruption while processing a video session to set video parameters.
Memory corruption while processing a video session to set video parameters.
CVE-2025-47337Medium· 6.7Memory corruption while accessing a synchronization object during concurrent operations.
Memory corruption while accessing a synchronization object during concurrent operations.
CVE-2025-47336Medium· 6.7Memory corruption while performing sensor register read operations.
Memory corruption while performing sensor register read operations.
CVE-2025-47335Medium· 6.7Memory corruption while parsing clock configuration data for a specific hardware type.
Memory corruption while parsing clock configuration data for a specific hardware type.
CVE-2025-47334Medium· 6.7Memory corruption while processing shared command buffer packet between camera userspace and kernel.
Memory corruption while processing shared command buffer packet between camera userspace and kernel.
CVE-2025-47333Medium· 6.6Memory corruption while handling buffer mapping operations in the cryptographic driver.
Memory corruption while handling buffer mapping operations in the cryptographic driver.
CVE-2025-47332Medium· 6.7Memory corruption while processing a config call from userspace.
Memory corruption while processing a config call from userspace.
CVE-2025-47331Medium· 6.1Information disclosure while processing a firmware event.
Information disclosure while processing a firmware event.
CVE-2025-47330Medium· 5.5Transient DOS while parsing video packets received from the video firmware.
Transient DOS while parsing video packets received from the video firmware.
CVE-2025-47323High· 7.8Memory corruption while routing GPR packets between user and root when handling large data packet.
Memory corruption while routing GPR packets between user and root when handling large data packet.
CVE-2025-47355High· 7.8Memory corruption while invoking remote procedure IOCTL calls.
Memory corruption while invoking remote procedure IOCTL calls.
CVE-2025-47354High· 7.8Memory corruption while allocating buffers in DSP service.
Memory corruption while allocating buffers in DSP service.
CVE-2025-47351High· 7.8Memory corruption while processing user buffers.
Memory corruption while processing user buffers.
CVE-2025-47349High· 7.8Memory corruption while processing an escape call.
Memory corruption while processing an escape call.
CVE-2025-47347High· 7.8Memory corruption while processing control commands in the virtual memory management interface.
Memory corruption while processing control commands in the virtual memory management interface.
CVE-2025-47342High· 7.1Transient DOS may occur when multi-profile concurrency arises with QHS enabled.
Transient DOS may occur when multi-profile concurrency arises with QHS enabled.
CVE-2025-47341High· 7.8memory corruption while processing an image encoding completion event.
memory corruption while processing an image encoding completion event.
CVE-2025-47340High· 7.8Memory corruption while processing IOCTL call to get the mapping.
Memory corruption while processing IOCTL call to get the mapping.
CVE-2025-47338High· 7.8Memory corruption while processing escape commands from userspace.
Memory corruption while processing escape commands from userspace.
CVE-2025-27060High· 8.8Memory corruption while performing SCM call with malformed inputs.
Memory corruption while performing SCM call with malformed inputs.
CVE-2025-27054High· 7.8Memory corruption while processing a malformed license file during reboot.
Memory corruption while processing a malformed license file during reboot.
CVE-2025-27053High· 7.8Memory corruption during PlayReady APP usecase while processing TA commands.
Memory corruption during PlayReady APP usecase while processing TA commands.
CVE-2025-27049Medium· 5.5Transient DOS while processing IOCTL call for image encoding.
Transient DOS while processing IOCTL call for image encoding.
CVE-2025-27048High· 7.8Memory corruption while processing camera platform driver IOCTL calls.
Memory corruption while processing camera platform driver IOCTL calls.
CVE-2025-27045Medium· 6.1Information disclosure while processing batch command execution in Video driver.
Information disclosure while processing batch command execution in Video driver.
CVE-2025-27041Medium· 5.5Transient DOS while processing video packets received from video firmware.
Transient DOS while processing video packets received from video firmware.