CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Free accounts get a daily email of the CVEs that match up to 3 of their products on My program; subscribers get each one the moment it is published. Where the data comes from: sources.

Updated under an hour ago (Oct 29, 2026, 4:00 PM ET)

What this means for you

This week: 3,234 CVEs published, 239 critical, and 5 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stackFree account, 3 products This week's critical CVEs Exploited in the last 30 days

Published in the last 7 days: 3,234; Show in the list
Critical, last 7 days: 239; Show in the list
Healthcare-tagged, last 7 days: 6; Show in the list
Known exploited (CISA KEV): 1,762; Show in the list

Showing CVEs that name the product qualcomm:qca9377_firmware. Show all products

36 CVEs

Showing 1 to 10.

CVE	Severity	Title	Published
CVE-2021-1906 Known exploited	Medium 6.2	Improper handling of address deregistration on failure can lead to new GPU address allocation failure. Assigned by qualcomm	May 7, 2021
CVE-2021-1905 Known exploited	High 8.4	Possible use after free due to improper handling of memory mapping of multiple processes simultaneously. Assigned by qualcomm	May 7, 2021
CVE-2020-11261 Known exploited	High 7.8	Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Con… Assigned by qualcomm	Jun 9, 2021
CVE-2022-22071 Known exploited	High 8.4	Possible use after free when process shell memory is freed using IOCTL munmap call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdrago… Assigned by qualcomm	Jun 14, 2022
CVE-2023-33063 Known exploited	High 7.8	Use After Free in DSP Services Assigned by qualcomm	Dec 4, 2023
CVE-2023-33106 Known exploited	High 8.4	Use of Out-of-range Pointer Offset in Graphics Assigned by qualcomm	Dec 4, 2023
CVE-2023-33107 Known exploited	High 8.4	Integer Overflow or Wraparound in Graphics Linux Assigned by qualcomm	Dec 4, 2023
CVE-2025-27041	Medium 5.5	Buffer Over-read in Video Assigned by qualcomm	Oct 8, 2025
CVE-2025-27053	High 7.8	Incorrect Calculation of Buffer Size in HLOS Assigned by qualcomm	Oct 8, 2025
CVE-2025-27064	Medium 6.1	Buffer Over-read in Core Services Assigned by qualcomm	Nov 3, 2025

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.