Qualcomm X2000094 vulnerabilities, page 2
54 vulnerabilities
Known vulnerabilities in Qualcomm X2000094, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2025-47355qualcomm, inc. · snapdragon +27 moreOut-of-bounds Write in DSP ServiceMemory corruption while invoking remote procedure IOCTL calls.EPSS0.09%HighCVE-2025-47373qualcomm, inc. · snapdragon +184 moreOut-of-bounds Write in AutomotiveMemory Corruption when accessing buffers with invalid length during TA invocation.EPSS0.07%HighCVE-2025-47403qualcomm, inc. · snapdragon +254 moreBuffer Over-read in WLAN FirmwareTransient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming.EPSS0.22%HighCVE-2025-47349qualcomm, inc. · snapdragon +18 moreUse of Out-of-range Pointer Offset in DSP ServiceMemory corruption while processing an escape call.EPSS0.09%HighCVE-2025-47338qualcomm, inc. · snapdragon +18 moreUntrusted Pointer Dereference in DSP ServiceMemory corruption while processing escape commands from userspace.EPSS0.09%HighCVE-2025-47399qualcomm, inc. · snapdragon +14 moreBuffer Copy Without Checking Size of Input in CameraMemory Corruption while processing IOCTL call to update sensor property settings with invalid input parameters.EPSS0.10%HighCVE-2025-47367qualcomm, inc. · snapdragon +31 moreOut-of-bounds Write in WinBlast DriverMemory corruption while accessing a buffer during IOCTL processing.EPSS0.09%HighCVE-2025-47340qualcomm, inc. · snapdragon +18 moreOut-of-bounds Write in DSP ServiceMemory corruption while processing IOCTL call to get the mapping.EPSS0.09%MediumCVE-2025-47406qualcomm, inc. · snapdragon +31 moreBuffer Over-read in DSP ServiceInformation Disclosure while processing IOCTL handler callbacks without verifying buffer size.EPSS0.07%MediumCVE-2025-27045qualcomm, inc. · snapdragon +18 moreBuffer Over-read in VideoInformation disclosure while processing batch command execution in Video driver.EPSS0.10%HighCVE-2025-27048qualcomm, inc. · snapdragon +18 moreUntrusted Pointer Dereference in CameraMemory corruption while processing camera platform driver IOCTL calls.EPSS0.09%HighCVE-2025-27054qualcomm, inc. · snapdragon +297 moreOut-of-bounds Write in DisplayMemory corruption while processing a malformed license file during reboot.EPSS0.09%MediumCVE-2025-27049qualcomm, inc. · snapdragon +31 moreBuffer Over-read in CameraTransient DOS while processing IOCTL call for image encoding.EPSS0.08%HighCVE-2026-21373qualcomm, inc. · snapdragon +54 moreBuffer Over-read in CameraMemory Corruption when accessing an output buffer without validating its size during IOCTL processing.EPSS0.08%HighCVE-2026-21380qualcomm, inc. · snapdragon +23 moreUse After Free in DSP ServiceMemory Corruption when using deprecated DMABUF IOCTL calls to manage video memory.EPSS0.07%HighCVE-2026-21381qualcomm, inc. · snapdragon +102 moreBuffer Over-read in WLAN FirmwareTransient DOS when receiving a service data frame with excessive length during device matching over a neighborhood awareness network protocol connection.EPSS0.15%HighCVE-2026-21376qualcomm, inc. · snapdragon +54 moreBuffer Over-read in CameraMemory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver.EPSS0.10%HighCVE-2026-21372qualcomm, inc. · snapdragon +28 moreHeap-Based Buffer Overflow in Power Management ICMemory Corruption when sending IOCTL requests with invalid buffer sizes during memcpy operations.EPSS0.10%HighCVE-2026-21378qualcomm, inc. · snapdragon +51 moreBuffer Over-read in CameraMemory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver.EPSS0.07%HighCVE-2026-21374qualcomm, inc. · snapdragon +54 moreBuffer Over-read in CameraMemory Corruption when processing auxiliary sensor input/output control commands with insufficient buffer size validation.EPSS0.11%