Qualcomm vulnerabilities and fixes

CVEs that mention Qualcomm, ranked by priority. 11 tracked.

Qualcomm has 11 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 2. Most recent: 2026-08-04. Highest priority: CVE-2026-25289 (score 36/100).

• CVE-2026-25289 CRITICAL 9.6 MITIGATE MITIGATE Memory Corruption when processing Device Capability Extended attributes in certain NAN Service Discovery Frame
• CVE-2026-24084 HIGH 7.5 MITIGATE MITIGATE Weak configuration when UE does not verify the consistency of its additional security capabilities with the re
• CVE-2026-24079 HIGH 8.1 MITIGATE MITIGATE Cryptographic Issue while processing registration requests with malformed or missing authentication parameters
• CVE-2026-21366 HIGH 7.8 MITIGATE MITIGATE Memory corruption while processing a packet with a size close to the maximum allowed value.
• CVE-2026-24080 HIGH 7.8 MITIGATE MITIGATE Memory Corruption when handling malformed request parameters in the fingerprint TA.
• CVE-2026-24083 HIGH 7.8 MITIGATE MITIGATE Memory Corruption while processing IOCTL device driver requests with invalid arguments.
• CVE-2026-25292 HIGH 7.6 MITIGATE MITIGATE Memory Corruption when processing untrusted user input in the fastboot command handler for audio framework con
• CVE-2026-25288 HIGH 7.4 MITIGATE MITIGATE Transient DOS when processing a short target wake time channel usage response frame with insufficient packet s
• CVE-2026-24076 MEDIUM 6.7 MITIGATE MITIGATE Memory Corruption when processing registry values with incorrect types using a direct query method.
• CVE-2026-24077 MEDIUM 6.5 MITIGATE MITIGATE Information Disclosure when processing wireless network channel switch information with improperly formatted l
• CVE-2026-24078 MEDIUM 6.5 MITIGATE MITIGATE Information Disclosure when IPSec negotiation fails or is not established properly during NG-eCall SIP signali

FAQ

How do I fix Qualcomm vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is Qualcomm being exploited right now?

None of the tracked Qualcomm CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which Qualcomm CVE should I patch first?

CVE-2026-25289 currently ranks highest (36/100): Memory Corruption when processing Device Capability Extended attributes in certain NAN Service Discovery Frame.

← Back to latest CVEs