CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 06:30 UTC )
What this means for you
This week: 5,437 CVEs published, 357 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,437 Show in the list Critical, last 7 days 357 Show in the list Healthcare-tagged, last 7 days 4 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product qualcomm:snapdragon . Show all products
43 CVEs, showing 1 to 43
CVE Severity Title Published CVE-2026-57559 High 7.8 Use After Free in DSP_Services Assigned by qualcomm
Oct 6, 2026 CVE-2026-57555 High 7.8 Use After Free in DSP Service Assigned by qualcomm
Oct 6, 2026 CVE-2026-57554 High 7.8 Use After Free in DSP Service Assigned by qualcomm
Oct 6, 2026 CVE-2026-57546 High 7.5 Buffer Over-read in WLAN HAL Assigned by qualcomm
Oct 6, 2026 CVE-2026-57545 High 7.8 Untrusted Pointer Dereference in Graphics Assigned by qualcomm
Oct 6, 2026 CVE-2026-57537 High 7.8 Use After Free in DSP Service Assigned by qualcomm
Oct 6, 2026 CVE-2026-25302 High 7.1 Improper Verification of Cryptographic Signature in Boot Assigned by qualcomm
Oct 6, 2026 CVE-2026-25291 High 7.8 Use After Free in Graphics Assigned by qualcomm
Oct 6, 2026 CVE-2026-25274 Medium 6.7 Use After Free in Windows WLAN Host Assigned by qualcomm
Oct 6, 2026 CVE-2026-25273 Medium 6.7 Out-of-bounds Write in Camera Driver Assigned by qualcomm
Oct 6, 2026 CVE-2026-25272 Medium 6.7 Out-of-bounds Write in Camera Driver Assigned by qualcomm
Oct 6, 2026 CVE-2026-25270 Medium 6.7 Out-of-bounds Write in Camera Driver Assigned by qualcomm
Oct 6, 2026 CVE-2026-25269 Medium 6.7 Out-of-bounds Write in Camera Driver Assigned by qualcomm
Oct 6, 2026 CVE-2026-25267 High 7.8 Missing Authorization in Core Assigned by qualcomm
Oct 6, 2026 CVE-2026-25263 Medium 6.6 Out of Bounds write in Linux Camera Assigned by qualcomm
Oct 6, 2026 CVE-2026-25265 High 8.8 Creation of Temporary File with Insecure Permissions in Qualcomm Software Center Assigned by qualcomm
Sep 22, 2026 CVE-2026-25264 High 8.8 Uncontrolled Search Path Element in Qualcomm Software Center Assigned by qualcomm
Sep 22, 2026 CVE-2026-25262 Medium 6.9 Write-what-where Condition in Primary Bootloader Assigned by qualcomm
Sep 22, 2026 CVE-2026-25255 High 8.8 Exposed function in Qualcomm Package Manager and Qualcomm Software Center. Assigned by qualcomm
Sep 22, 2026 CVE-2026-25254 Critical 9.8 Improper authorization in Qualcomm Software Center Assigned by qualcomm
Sep 22, 2026 CVE-2026-25294 High 7.4 Buffer Over-read in WLAN Firmware Assigned by qualcomm
Sep 17, 2026 CVE-2026-25290 High 7.8 Integer Overflow or Wraparound in OOBM Assigned by qualcomm
Sep 17, 2026 CVE-2026-25284 High 7.3 Buffer Over-read in OOBM Assigned by qualcomm
Sep 17, 2026 CVE-2026-25283 High 8.8 Stack-based Buffer Overflow in OOBM Assigned by qualcomm
Sep 17, 2026 CVE-2026-25282 High 7.9 Out-of-bounds Read in OOBM Assigned by qualcomm
Sep 17, 2026 CVE-2026-25281 High 7.4 Allocation of Resources Without Limits or Throttling in OOBM Assigned by qualcomm
Sep 17, 2026 CVE-2026-25280 High 7.8 Out-of-bounds Write in DSP Service Assigned by qualcomm
Sep 17, 2026 CVE-2026-25278 High 7.8 Time-of-check Time-of-use (TOCTOU) Race Condition in Automotive Software platform based on QNX Assigned by qualcomm
Sep 17, 2026 CVE-2026-25275 High 7.5 Buffer Over-read in WLAN Firmware Assigned by qualcomm
Sep 17, 2026 CVE-2026-25261 Medium 6.7 Untrusted Pointer Dereference in Camera Assigned by qualcomm
Sep 17, 2026 CVE-2026-24081 High 7.4 Buffer Over-read in BT Controller Assigned by qualcomm
Sep 17, 2026 CVE-2026-24075 High 7.8 Buffer Over-read in Qualcomm IPC Assigned by qualcomm
Sep 17, 2026 CVE-2026-24074 High 7.8 Out-of-bounds Write in Video Assigned by qualcomm
Sep 17, 2026 CVE-2026-24073 High 7.8 Out-of-bounds Write in Video Assigned by qualcomm
Sep 17, 2026 CVE-2025-59607 High 7.8 Untrusted Pointer Dereference in Windows Compute Assigned by qualcomm
Sep 17, 2026 CVE-2026-21385 Known exploited
High 7.8 Integer Overflow or Wraparound in Graphics Assigned by qualcomm
Mar 2, 2026 CVE-2025-21479 Known exploited
High 8.6 Incorrect Authorization in Graphics Assigned by qualcomm
Jun 3, 2025 CVE-2025-27038 Known exploited
High 7.5 Use After Free in Graphics Assigned by qualcomm
Jun 3, 2025 CVE-2025-21480 Known exploited
High 8.6 Incorrect Authorization in Graphics Windows Assigned by qualcomm
Jun 3, 2025 CVE-2024-43047 Known exploited
High 7.8 Use After Free in DSP Service Assigned by qualcomm
Oct 7, 2024 CVE-2023-33107 Known exploited
High 8.4 Integer Overflow or Wraparound in Graphics Linux Assigned by qualcomm
Dec 5, 2023 CVE-2023-33106 Known exploited
High 8.4 Use of Out-of-range Pointer Offset in Graphics Assigned by qualcomm
Dec 5, 2023 CVE-2023-33063 Known exploited
High 7.8 Use After Free in DSP Services Assigned by qualcomm
Dec 5, 2023
CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.