CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 08:30 UTC )
This week: 5,432 CVEs published, 355 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,432 Show in the list Critical, last 7 days 355 Show in the list Healthcare-tagged, last 7 days 4 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product qualcomm:snapdragon . Show all products
54 CVEs, showing 1 to 50 Page 1 of 2 Next CVE Severity Title Published CVE-2023-33063 Known exploited
High 7.8 Use After Free in DSP Services Assigned by qualcomm
Dec 5, 2023 CVE-2023-33106 Known exploited
High 8.4 Use of Out-of-range Pointer Offset in Graphics Assigned by qualcomm
Dec 5, 2023 CVE-2023-33107 Known exploited
High 8.4 Integer Overflow or Wraparound in Graphics Linux Assigned by qualcomm
Dec 5, 2023 CVE-2024-43047 Known exploited
High 7.8 Use After Free in DSP Service Assigned by qualcomm
Oct 7, 2024 CVE-2025-21480 Known exploited
High 8.6 Incorrect Authorization in Graphics Windows Assigned by qualcomm
Jun 3, 2025 CVE-2025-27038 Known exploited
High 7.5 Use After Free in Graphics Assigned by qualcomm
Jun 3, 2025 CVE-2025-21479 Known exploited
High 8.6 Incorrect Authorization in Graphics Assigned by qualcomm
Jun 3, 2025 CVE-2026-21385 Known exploited
High 7.8 Integer Overflow or Wraparound in Graphics Assigned by qualcomm
Mar 2, 2026 CVE-2026-21366 High 7.8 Integer Overflow or Wraparound in Data Network Stack & Connectivity Assigned by qualcomm
Aug 4, 2026 CVE-2026-24076 Medium 6.7 Buffer Copy Without Checking Size of Input in Bluetooth HOST Assigned by qualcomm
Aug 4, 2026 CVE-2026-24077 Medium 6.5 Integer Underflow (Wrap or Wraparound) in WLAN Host Assigned by qualcomm
Aug 4, 2026 CVE-2026-24078 Medium 6.5 Exposure of Private Personal Information to an Unauthorized Actor in Data Modem Assigned by qualcomm
Aug 4, 2026 CVE-2026-24079 High 8.1 Missing Authentication for Critical Function in Data Modem Assigned by qualcomm
Aug 4, 2026 CVE-2026-24080 High 7.8 Buffer Copy Without Checking Size of Input in Biometrics Assigned by qualcomm
Aug 4, 2026 CVE-2026-24083 High 7.8 Untrusted Pointer Dereference in Automotive Security Assigned by qualcomm
Aug 4, 2026 CVE-2026-24084 High 7.5 Insecure Security Identifier Mechanism in Multi-Mode Call Processor Assigned by qualcomm
Aug 4, 2026 CVE-2026-25288 High 7.4 Buffer Over-read in WLAN Firmware Assigned by qualcomm
Aug 4, 2026 CVE-2026-25289 Critical 9.6 Stack-based Buffer Overflow in WLAN Firmware Assigned by qualcomm
Aug 4, 2026 CVE-2026-25292 High 7.6 Improper Validation of Syntactic Correctness of Input in Automotive Linux OS Assigned by qualcomm
Aug 4, 2026 CVE-2025-59607 High 7.8 Untrusted Pointer Dereference in Windows Compute Assigned by qualcomm
Sep 17, 2026 CVE-2026-24073 High 7.8 Out-of-bounds Write in Video Assigned by qualcomm
Sep 17, 2026 CVE-2026-24074 High 7.8 Out-of-bounds Write in Video Assigned by qualcomm
Sep 17, 2026 CVE-2026-24075 High 7.8 Buffer Over-read in Qualcomm IPC Assigned by qualcomm
Sep 17, 2026 CVE-2026-24081 High 7.4 Buffer Over-read in BT Controller Assigned by qualcomm
Sep 17, 2026 CVE-2026-25261 Medium 6.7 Untrusted Pointer Dereference in Camera Assigned by qualcomm
Sep 17, 2026 CVE-2026-25275 High 7.5 Buffer Over-read in WLAN Firmware Assigned by qualcomm
Sep 17, 2026 CVE-2026-25278 High 7.8 Time-of-check Time-of-use (TOCTOU) Race Condition in Automotive Software platform based on QNX Assigned by qualcomm
Sep 17, 2026 CVE-2026-25280 High 7.8 Out-of-bounds Write in DSP Service Assigned by qualcomm
Sep 17, 2026 CVE-2026-25281 High 7.4 Allocation of Resources Without Limits or Throttling in OOBM Assigned by qualcomm
Sep 17, 2026 CVE-2026-25282 High 7.9 Out-of-bounds Read in OOBM Assigned by qualcomm
Sep 17, 2026 CVE-2026-25283 High 8.8 Stack-based Buffer Overflow in OOBM Assigned by qualcomm
Sep 17, 2026 CVE-2026-25284 High 7.3 Buffer Over-read in OOBM Assigned by qualcomm
Sep 17, 2026 CVE-2026-25290 High 7.8 Integer Overflow or Wraparound in OOBM Assigned by qualcomm
Sep 17, 2026 CVE-2026-25294 High 7.4 Buffer Over-read in WLAN Firmware Assigned by qualcomm
Sep 17, 2026 CVE-2026-25254 Critical 9.8 Improper authorization in Qualcomm Software Center Assigned by qualcomm
Sep 22, 2026 CVE-2026-25255 High 8.8 Exposed function in Qualcomm Package Manager and Qualcomm Software Center. Assigned by qualcomm
Sep 22, 2026 CVE-2026-25262 Medium 6.9 Write-what-where Condition in Primary Bootloader Assigned by qualcomm
Sep 22, 2026 CVE-2026-25264 High 8.8 Uncontrolled Search Path Element in Qualcomm Software Center Assigned by qualcomm
Sep 22, 2026 CVE-2026-25265 High 8.8 Creation of Temporary File with Insecure Permissions in Qualcomm Software Center Assigned by qualcomm
Sep 22, 2026 CVE-2026-25263 Medium 6.6 Out of Bounds write in Linux Camera Assigned by qualcomm
Oct 6, 2026 CVE-2026-25267 High 7.8 Missing Authorization in Core Assigned by qualcomm
Oct 6, 2026 CVE-2026-25269 Medium 6.7 Out-of-bounds Write in Camera Driver Assigned by qualcomm
Oct 6, 2026 CVE-2026-25270 Medium 6.7 Out-of-bounds Write in Camera Driver Assigned by qualcomm
Oct 6, 2026 CVE-2026-25272 Medium 6.7 Out-of-bounds Write in Camera Driver Assigned by qualcomm
Oct 6, 2026 CVE-2026-25273 Medium 6.7 Out-of-bounds Write in Camera Driver Assigned by qualcomm
Oct 6, 2026 CVE-2026-25274 Medium 6.7 Use After Free in Windows WLAN Host Assigned by qualcomm
Oct 6, 2026 CVE-2026-25291 High 7.8 Use After Free in Graphics Assigned by qualcomm
Oct 6, 2026 CVE-2026-25302 High 7.1 Improper Verification of Cryptographic Signature in Boot Assigned by qualcomm
Oct 6, 2026 CVE-2026-57537 High 7.8 Use After Free in DSP Service Assigned by qualcomm
Oct 6, 2026 CVE-2026-57545 High 7.8 Untrusted Pointer Dereference in Graphics Assigned by qualcomm
Oct 6, 2026
CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
