Qualcomm Qmp1000 vulnerabilities, page 4

129 vulnerabilities

Known vulnerabilities in Qualcomm Qmp1000, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.5HighCVE-2025-47326qualcomm, inc. · snapdragon +120 moreBuffer Over-read in WLAN HALTransient DOS while handling command data during power control processing.EPSS0.24%7.8HighCVE-2025-47317qualcomm, inc. · snapdragon +53 moreBuffer Over-read in BT ControllerMemory corruption due to global buffer overflow when a test command uses an invalid payload type.EPSS0.09%5.5MediumCVE-2025-47330qualcomm, inc. · snapdragon +221 moreBuffer Over-read in VideoTransient DOS while parsing video packets received from the video firmware.EPSS0.07%7.8HighCVE-2025-47398qualcomm, inc. · snapdragon +150 moreUse After Free in GraphicsMemory Corruption while deallocating graphics processing unit memory buffers due to improper handling of memory pointers.EPSS0.11%6.5MediumCVE-2025-47371qualcomm, inc. · snapdragon +122 moreReachable Assertion in ModemTransient DOS when an LTE RLC packet with invalid TB is received by UE.EPSS0.10%7.8HighCVE-2025-27032qualcomm, inc. · snapdragon +191 moreImproper Access Control Applied to Mirrored or Aliased Memory Regions in Hypervisormemory corruption while loading a PIL authenticated VM, when authenticated VM image is loaded without maintaining cache coherency.EPSS0.08%7.8HighCVE-2025-27070qualcomm, inc. · snapdragon +174 moreOut-of-bounds Write in Windows ComputeMemory corruption while performing encryption and decryption commands.EPSS0.06%7.8HighCVE-2025-27061qualcomm, inc. · snapdragon +337 moreOut-of-bounds Write in VideoMemory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmware.EPSS0.10%7.8HighCVE-2025-27042qualcomm, inc. · snapdragon +337 moreIncorrect Calculation of Buffer Size in VideoMemory corruption while processing video packets received from video firmware.EPSS0.09%7.5HighCVE-2025-27073qualcomm, inc. · snapdragon +169 moreReachable Assertion in WLAN FirmwareTransient DOS while creating NDP instance.EPSS0.22%7.8HighCVE-2025-27054qualcomm, inc. · snapdragon +297 moreOut-of-bounds Write in DisplayMemory corruption while processing a malformed license file during reboot.EPSS0.09%7.8HighCVE-2025-27056qualcomm, inc. · snapdragon +25 moreUse After Free in DSP ServiceMemory corruption during sub-system restart while processing clean-up to free up resources.EPSS0.10%7.5HighCVE-2025-27057qualcomm, inc. · snapdragon +210 moreBuffer Over-read in WLAN HostTransient DOS while handling beacon frames with invalid IE header length.EPSS0.25%7.5HighCVE-2025-27029qualcomm, inc. · snapdragon +67 moreBuffer Over-read in WLAN HALTransient DOS while processing the tone measurement response buffer when the response buffer is out of range.EPSS0.24%7.5HighCVE-2025-27065qualcomm, inc. · snapdragon +149 moreBuffer Over-read in WLAN FirmwareTransient DOS while processing a frame with malformed shared-key descriptor.EPSS0.22%7.8HighCVE-2025-27052qualcomm, inc. · snapdragon +154 moreBuffer Copy Without Checking Size of Input in Core ServicesMemory corruption while processing data packets in diag received from Unix clients.EPSS0.10%7.8HighCVE-2025-27043qualcomm, inc. · snapdragon +203 moreBuffer Copy Without Checking Size of Input in VideoMemory corruption while processing manipulated payload in video firmware.EPSS0.10%7.8HighCVE-2025-27053qualcomm, inc. · snapdragon +317 moreIncorrect Calculation of Buffer Size in HLOSMemory corruption during PlayReady APP usecase while processing TA commands.EPSS0.09%7.5HighCVE-2025-27066qualcomm, inc. · snapdragon +370 moreReachable Assertion in WLAN FirmwareTransient DOS while processing an ANQP message.EPSS0.28%7.1HighCVE-2024-43065qualcomm, inc. · snapdragon +164 moreExposed Dangerous Method or Function in HLOSCryptographic issues while generating an asymmetric key pair for RKP use cases.EPSS0.11%