1770
CVEs
269
Critical
1179
High
12
KEV
25
PoC
891
Unpatched C/H
41.5%
Patch Rate
0.3%
Avg EPSS
Severity Breakdown
CRITICAL
269
HIGH
1179
MEDIUM
318
LOW
2
Monthly CVE Trend
Affected Products (30)
Wcd9380 Firmware
706
Wsa8830 Firmware
684
Wsa8835 Firmware
684
Qca6574au Firmware
657
Wcd9385 Firmware
635
Wcd9370 Firmware
594
Wsa8810 Firmware
582
Wsa8815 Firmware
582
Qca6696 Firmware
579
Qca6595au Firmware
560
Sa6155p Firmware
557
Qca6391 Firmware
553
Wcd9375 Firmware
547
Sa8155p Firmware
540
Qca6574a Firmware
521
Wcn3988 Firmware
516
Sdx55 Firmware
511
Wcn3950 Firmware
498
Wcn3980 Firmware
495
Sa8195p Firmware
488
Wcd9341 Firmware
482
Wcd9340 Firmware
466
Qca6574 Firmware
450
Fastconnect 7800 Firmware
439
Fastconnect 6900 Firmware
436
Sa6145p Firmware
431
Qca6595 Firmware
422
Qca8081 Firmware
420
Sd865 5g Firmware
413
Qca8337 Firmware
408
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2013-2597 | Stack-based buffer overflow in the acdb_ioctl function in audio_acdb.c in the acdb audio driver for the Linux kernel 2.6.x and 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions. Rated high severity (CVSS 8.4), this vulnerability is no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and no vendor patch available. | HIGH | 8.4 | 6.7% | 99 |
KEV
No patch
|
| CVE-2014-10031 | Buffer overflow in the IMAPd service in Qualcomm Eudora WorldMail 9.0.333.0 allows remote attackers to execute arbitrary code via a long string in a UID command. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 39.4%. | HIGH | 7.5 | 39.4% | 97 |
PoC
No patch
|
| CVE-2025-21480 | Qualcomm GPU micronode contains a memory corruption vulnerability (CVE-2025-21480, CVSS 8.6) caused by unauthorized command execution during specific GPU command sequences. KEV-listed, this vulnerability enables privilege escalation from the GPU context, potentially allowing app-level attackers to gain kernel access through the GPU driver on Qualcomm-based Android devices. | HIGH | 8.6 | 1.5% | 95 |
KEV
No patch
|
| CVE-2025-21479 | A second Qualcomm GPU micronode memory corruption vulnerability (CVE-2025-21479, CVSS 8.6) exists in the unauthorized command execution path during specific GPU command sequences. KEV-listed alongside CVE-2025-21480, this indicates a systemic issue in Qualcomm's GPU micronode command validation that is being actively exploited in mobile attack chains. | HIGH | 8.6 | 0.1% | 93 |
KEV
No patch
|
| CVE-2026-21385 | A Qualcomm chipset vulnerability (CVE-2026-21385) causes memory corruption through improper integer handling during memory allocation, enabling local privilege escalation to kernel level. KEV-listed and patched, this vulnerability affects Qualcomm-based mobile devices and embedded systems, potentially impacting billions of Android devices globally. | HIGH | 7.8 | 0.4% | 89 |
KEV
PoC
|
| CVE-2025-27038 | Qualcomm Adreno GPU drivers in Chrome contain a use-after-free vulnerability (CVE-2025-27038, CVSS 7.5) enabling memory corruption during graphics rendering. KEV-listed, this vulnerability can be triggered through Chrome on Android devices with Qualcomm chipsets, providing a kernel-level exploitation path from web content. | HIGH | 7.5 | 1.1% | 89 |
KEV
No patch
|
| CVE-2020-11117 | u'In the lbd service, an external user can issue a specially crafted debug command to overwrite arbitrary files with arbitrary content resulting in remote code execution.' in Snapdragon Connectivity,. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | CRITICAL | 9.8 | 20.1% | 69 |
PoC
No patch
|
| CVE-2016-5348 | The GPS component in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allows man-in-the-middle attackers to cause a denial of service. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and EPSS exploitation probability 14.6%. | MEDIUM | 5.9 | 14.6% | 64 |
PoC
|
| CVE-2014-4322 | drivers/misc/qseecom.c in the QSEECOM driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not validate certain. Rated high severity (CVSS 7.2), this vulnerability is low attack complexity. Public exploit code available. | HIGH | 7.2 | 3.5% | 59 |
PoC
|
| CVE-2015-0569 | Heap-based buffer overflow in the private wireless extensions IOCTL implementation in wlan_hdd_wext.c in the WLAN (aka Wi-Fi) driver for the Linux kernel 3.x and 4.x, as used in Qualcomm Innovation. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | HIGH | 7.8 | 0.4% | 59 |
PoC
No patch
|
| CVE-2017-8260 | In all Qualcomm products with Android releases from CAF using the Linux kernel, due to a type downcast, a value may improperly pass validation and cause an out of bounds write later. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available. | HIGH | 7.8 | 0.2% | 59 |
PoC
|
| CVE-2016-3934 | drivers/media/platform/msm/camera_v2/sensor/io/msm_camera_cci_i2c.c in the Qualcomm camera driver in Android before 2016-10-05 on Nexus 5, Nexus 5X, Nexus 6, Nexus 6P, and Android One devices relies. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | HIGH | 7.8 | 0.1% | 59 |
PoC
No patch
|
| CVE-2020-11201 | Arbitrary access to DSP memory due to improper check in loaded library for data received from CPU side' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT,. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available. | HIGH | 7.8 | 1.8% | 59 |
PoC
No patch
|
| CVE-2020-11202 | Buffer overflow/underflow occurs when typecasting the buffer passed by CPU internally in the library which is not aligned with the actual size of the structure' in Snapdragon Auto, Snapdragon. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available. | HIGH | 7.8 | 1.5% | 59 |
PoC
No patch
|
| CVE-2020-11206 | Possible buffer overflow in Fastrpc while handling received parameters due to lack of validation on input parameters' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available. | HIGH | 7.8 | 1.8% | 59 |
PoC
No patch
|