Qualcomm Srv1H vulnerabilities, page 5
286 vulnerabilities
Known vulnerabilities in Qualcomm Srv1H, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2025-27070qualcomm, inc. · snapdragon +174 moreOut-of-bounds Write in Windows ComputeMemory corruption while performing encryption and decryption commands.EPSS0.06%HighCVE-2025-27061qualcomm, inc. · snapdragon +337 moreOut-of-bounds Write in VideoMemory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmware.EPSS0.10%HighCVE-2025-27042qualcomm, inc. · snapdragon +337 moreIncorrect Calculation of Buffer Size in VideoMemory corruption while processing video packets received from video firmware.EPSS0.09%HighCVE-2025-27073qualcomm, inc. · snapdragon +169 moreReachable Assertion in WLAN FirmwareTransient DOS while creating NDP instance.EPSS0.22%HighCVE-2025-27054qualcomm, inc. · snapdragon +297 moreOut-of-bounds Write in DisplayMemory corruption while processing a malformed license file during reboot.EPSS0.09%MediumCVE-2025-27072qualcomm, inc. · snapdragon +36 moreBuffer Copy Without Checking Size of Input in Automotive Vehicle NetworksInformation disclosure while processing a packet at EAVB BE side with invalid header length.EPSS0.09%HighCVE-2025-27057qualcomm, inc. · snapdragon +210 moreBuffer Over-read in WLAN HostTransient DOS while handling beacon frames with invalid IE header length.EPSS0.25%HighCVE-2025-27065qualcomm, inc. · snapdragon +149 moreBuffer Over-read in WLAN FirmwareTransient DOS while processing a frame with malformed shared-key descriptor.EPSS0.22%HighCVE-2025-27062qualcomm, inc. · snapdragon +152 moreImproper Access Control in Automotive MultimediaMemory corruption while handling client exceptions, allowing unauthorized channel access.EPSS0.08%HighCVE-2025-27052qualcomm, inc. · snapdragon +154 moreBuffer Copy Without Checking Size of Input in Core ServicesMemory corruption while processing data packets in diag received from Unix clients.EPSS0.10%HighCVE-2025-27043qualcomm, inc. · snapdragon +203 moreBuffer Copy Without Checking Size of Input in VideoMemory corruption while processing manipulated payload in video firmware.EPSS0.10%HighCVE-2025-27053qualcomm, inc. · snapdragon +317 moreIncorrect Calculation of Buffer Size in HLOSMemory corruption during PlayReady APP usecase while processing TA commands.EPSS0.09%HighCVE-2025-27077qualcomm, inc. · snapdragon +27 moreUse After Free in Automotive Software platform based on QNXMemory corruption while processing message in guest VM.EPSS0.09%HighCVE-2025-27066qualcomm, inc. · snapdragon +370 moreReachable Assertion in WLAN FirmwareTransient DOS while processing an ANQP message.EPSS0.28%HighCVE-2024-21465qualcomm, inc. · snapdragon +257 moreBuffer Over-read in Trusted Execution EnvironmentMemory corruption while processing key blob passed by the user.EPSS0.10%CriticalCVE-2024-21480qualcomm, inc. · snapdragon +112 moreBuffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in AudioMemory corruption while playing audio file having large-sized input buffer.EPSS0.29%HighCVE-2024-21458qualcomm, inc. · snapdragon +111 moreBuffer Over-read in WLAN HOSTInformation disclosure while handling SA query action frame.EPSS0.21%HighCVE-2024-21466qualcomm, inc. · snapdragon +64 moreInteger Underflow (Wrap or Wraparound) in WLAN Host CommunicationInformation disclosure while parsing sub-IE length during new IE generation.EPSS0.21%HighCVE-2024-21461qualcomm, inc. · snapdragon +311 moreDouble Free in HLOSMemory corruption while performing finish HMAC operation when context is freed by keymaster.EPSS0.10%HighCVE-2024-21471qualcomm, inc. · snapdragon +169 moreUse After Free in Graphics LinuxMemory corruption when IOMMU unmap of a GPU buffer fails in Linux.EPSS0.11%