Qualcomm Qamsrv1H vulnerabilities, page 5
283 vulnerabilities
Known vulnerabilities in Qualcomm Qamsrv1H, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2025-27073qualcomm, inc. · snapdragon +169 moreReachable Assertion in WLAN FirmwareTransient DOS while creating NDP instance.EPSS0.22%HighCVE-2025-27054qualcomm, inc. · snapdragon +297 moreOut-of-bounds Write in DisplayMemory corruption while processing a malformed license file during reboot.EPSS0.09%MediumCVE-2025-27072qualcomm, inc. · snapdragon +36 moreBuffer Copy Without Checking Size of Input in Automotive Vehicle NetworksInformation disclosure while processing a packet at EAVB BE side with invalid header length.EPSS0.09%HighCVE-2025-27057qualcomm, inc. · snapdragon +210 moreBuffer Over-read in WLAN HostTransient DOS while handling beacon frames with invalid IE header length.EPSS0.25%HighCVE-2025-27065qualcomm, inc. · snapdragon +149 moreBuffer Over-read in WLAN FirmwareTransient DOS while processing a frame with malformed shared-key descriptor.EPSS0.22%HighCVE-2025-27062qualcomm, inc. · snapdragon +152 moreImproper Access Control in Automotive MultimediaMemory corruption while handling client exceptions, allowing unauthorized channel access.EPSS0.08%HighCVE-2025-27052qualcomm, inc. · snapdragon +154 moreBuffer Copy Without Checking Size of Input in Core ServicesMemory corruption while processing data packets in diag received from Unix clients.EPSS0.10%HighCVE-2025-27043qualcomm, inc. · snapdragon +203 moreBuffer Copy Without Checking Size of Input in VideoMemory corruption while processing manipulated payload in video firmware.EPSS0.10%HighCVE-2025-27053qualcomm, inc. · snapdragon +317 moreIncorrect Calculation of Buffer Size in HLOSMemory corruption during PlayReady APP usecase while processing TA commands.EPSS0.09%HighCVE-2025-27077qualcomm, inc. · snapdragon +27 moreUse After Free in Automotive Software platform based on QNXMemory corruption while processing message in guest VM.EPSS0.09%HighCVE-2025-27066qualcomm, inc. · snapdragon +370 moreReachable Assertion in WLAN FirmwareTransient DOS while processing an ANQP message.EPSS0.28%HighCVE-2024-21465qualcomm, inc. · snapdragon +257 moreBuffer Over-read in Trusted Execution EnvironmentMemory corruption while processing key blob passed by the user.EPSS0.10%CriticalCVE-2024-21480qualcomm, inc. · snapdragon +112 moreBuffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in AudioMemory corruption while playing audio file having large-sized input buffer.EPSS0.29%HighCVE-2024-21458qualcomm, inc. · snapdragon +111 moreBuffer Over-read in WLAN HOSTInformation disclosure while handling SA query action frame.EPSS0.21%HighCVE-2024-21466qualcomm, inc. · snapdragon +64 moreInteger Underflow (Wrap or Wraparound) in WLAN Host CommunicationInformation disclosure while parsing sub-IE length during new IE generation.EPSS0.21%HighCVE-2024-21461qualcomm, inc. · snapdragon +311 moreDouble Free in HLOSMemory corruption while performing finish HMAC operation when context is freed by keymaster.EPSS0.10%HighCVE-2024-21471qualcomm, inc. · snapdragon +169 moreUse After Free in Graphics LinuxMemory corruption when IOMMU unmap of a GPU buffer fails in Linux.EPSS0.11%HighCVE-2024-21479qualcomm, inc. · snapdragon +94 moreBuffer Over-read in AudioTransient DOS during music playback of ALAC content.EPSS0.32%CriticalCVE-2024-21463qualcomm, inc. · snapdragon +105 moreBuffer Copy Without Checking Size of Input in AudioMemory corruption while processing Codec2 during v13k decoder pitch synthesis.EPSS0.29%HighCVE-2024-21469qualcomm, inc. · snapdragon +222 morePermissions, Privileges, and Access Control issues in TZ Secure OSMemory corruption when an invoke call and a TEE call are bound for the same trusted application.EPSS0.10%