CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (Oct 26, 2026, 3:30 AM ET )
This week: 4,063 CVEs published, 327 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,063 Show in the list Critical, last 7 days 327 Show in the list Healthcare-tagged, last 7 days 9 Show in the list Known exploited (CISA KEV) 1,756 Show in the list Showing CVEs that name the product qualcomm:wcd9341_firmware . Show all products
50 CVEs, showing 1 to 50
CVE Severity Title Published CVE-2026-25274 Medium 6.7 Use After Free in Windows WLAN Host Assigned by qualcomm
Oct 6, 2026 CVE-2026-25267 High 7.8 Missing Authorization in Core Assigned by qualcomm
Oct 6, 2026 CVE-2026-25263 Medium 6.6 Out of Bounds write in Linux Camera Assigned by qualcomm
Oct 6, 2026 CVE-2026-25275 High 7.5 Buffer Over-read in WLAN Firmware Assigned by qualcomm
Sep 17, 2026 CVE-2026-24075 High 7.8 Buffer Over-read in Qualcomm IPC Assigned by qualcomm
Sep 17, 2026 CVE-2026-24084 High 7.5 Insecure Security Identifier Mechanism in Multi-Mode Call Processor Assigned by qualcomm
Aug 4, 2026 CVE-2026-24077 Medium 6.5 Integer Underflow (Wrap or Wraparound) in WLAN Host Assigned by qualcomm
Aug 4, 2026 CVE-2026-24076 Medium 6.7 Buffer Copy Without Checking Size of Input in Bluetooth HOST Assigned by qualcomm
Aug 4, 2026 CVE-2026-21379 High 7.8 Buffer Over-read in Windows Compute Assigned by qualcomm
Jul 6, 2026 CVE-2026-24091 High 7.2 Improper Validation of Syntactic Correctness of Input in Display Assigned by qualcomm
Jun 1, 2026 CVE-2026-24085 High 7.2 Stack-based Buffer Overflow in Display Assigned by qualcomm
Jun 1, 2026 CVE-2025-59611 Medium 6.7 Out-of-bounds Write in Core Services Assigned by qualcomm
Jun 1, 2026 CVE-2025-59610 Medium 6.4 Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver Assigned by qualcomm
Jun 1, 2026 CVE-2025-47404 Medium 6.5 Buffer Copy Without Checking Size of Input in Automotive Audio Assigned by qualcomm
May 4, 2026 CVE-2026-21378 High 7.8 Buffer Over-read in Camera Assigned by qualcomm
Apr 6, 2026 CVE-2026-21376 High 7.8 Buffer Over-read in Camera Assigned by qualcomm
Apr 6, 2026 CVE-2026-21374 High 7.8 Buffer Over-read in Camera Assigned by qualcomm
Apr 6, 2026 CVE-2026-21373 High 7.8 Buffer Over-read in Camera Assigned by qualcomm
Apr 6, 2026 CVE-2026-21371 High 7.8 Buffer Over-read in WinBlast Driver Assigned by qualcomm
Apr 6, 2026 CVE-2025-47392 High 8.8 Integer Overflow or Wraparound in GPS Assigned by qualcomm
Apr 6, 2026 CVE-2026-21385 Known exploited
High 7.8 Integer Overflow or Wraparound in Graphics Assigned by qualcomm
Mar 2, 2026 CVE-2025-47386 High 7.8 Use After Free in Automotive Audio Assigned by qualcomm
Mar 2, 2026 CVE-2025-47384 Medium 6.5 Reachable Assertion in FW Assigned by qualcomm
Mar 2, 2026 CVE-2025-47383 High 7.2 Missing Cryptographic Step in Data Modem Assigned by qualcomm
Mar 2, 2026 CVE-2025-47379 High 7.8 Use After Free in Automotive Audio Assigned by qualcomm
Mar 2, 2026 CVE-2025-47376 High 7.8 Use After Free in Automotive Audio Assigned by qualcomm
Mar 2, 2026 CVE-2025-47375 High 7.8 Use After Free in Automotive Audio Assigned by qualcomm
Mar 2, 2026 CVE-2025-47371 Medium 6.5 Reachable Assertion in Modem Assigned by qualcomm
Mar 2, 2026 CVE-2025-47398 High 7.8 Use After Free in Graphics Assigned by qualcomm
Feb 2, 2026 CVE-2025-47359 High 7.8 Use After Free in Secure Processor Assigned by qualcomm
Feb 2, 2026 CVE-2025-47369 Medium 5.5 Information Exposure in Computer Vision Assigned by qualcomm
Jan 6, 2026 CVE-2025-47348 High 7.8 Use of Uninitialized Variable in HLOS Assigned by qualcomm
Jan 6, 2026 CVE-2025-47333 Medium 6.6 Use After Free in HLOS Assigned by qualcomm
Jan 6, 2026 CVE-2025-47331 Medium 6.1 Buffer Over-read in Video Assigned by qualcomm
Jan 6, 2026 CVE-2025-47330 Medium 5.5 Buffer Over-read in Video Assigned by qualcomm
Jan 6, 2026 CVE-2025-47387 High 7.8 Untrusted Pointer Dereference in Camera Assigned by qualcomm
Dec 18, 2025 CVE-2025-47320 High 7.8 Out-of-bounds Write in Audio Assigned by qualcomm
Dec 18, 2025 CVE-2025-27063 High 7.8 Use After Free in Video Assigned by qualcomm
Dec 18, 2025 CVE-2025-27054 High 7.8 Out-of-bounds Write in Display Assigned by qualcomm
Oct 8, 2025 CVE-2025-27041 Medium 5.5 Buffer Over-read in Video Assigned by qualcomm
Oct 8, 2025 CVE-2025-21479 Known exploited
High 8.6 Incorrect Authorization in Graphics Assigned by qualcomm
Jun 3, 2025 CVE-2025-21480 Known exploited
High 8.6 Incorrect Authorization in Graphics Windows Assigned by qualcomm
Jun 3, 2025 CVE-2024-43047 Known exploited
High 7.8 Use After Free in DSP Service Assigned by qualcomm
Oct 7, 2024 CVE-2023-33107 Known exploited
High 8.4 Integer Overflow or Wraparound in Graphics Linux Assigned by qualcomm
Dec 4, 2023 CVE-2023-33106 Known exploited
High 8.4 Use of Out-of-range Pointer Offset in Graphics Assigned by qualcomm
Dec 4, 2023 CVE-2023-33063 Known exploited
High 7.8 Use After Free in DSP Services Assigned by qualcomm
Dec 4, 2023 CVE-2022-22071 Known exploited
High 8.4 Possible use after free when process shell memory is freed using IOCTL munmap call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdrago… Assigned by qualcomm
Jun 14, 2022 CVE-2020-11261 Known exploited
High 7.8 Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Con… Assigned by qualcomm
Jun 9, 2021 CVE-2021-1906 Known exploited
Medium 6.2 Improper handling of address deregistration on failure can lead to new GPU address allocation failure. Assigned by qualcomm
May 7, 2021 CVE-2021-1905 Known exploited
High 8.4 Possible use after free due to improper handling of memory mapping of multiple processes simultaneously. Assigned by qualcomm
May 7, 2021
CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosecsignals.com. Every record links back to the agency that published it.
