Qualcomm SD 8 GEN1 5g Firmware vulnerabilities

429 CVEs affecting Qualcomm SD 8 GEN1 5g Firmware, 2 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-24084, published 2026-08-04.

More from Qualcomm.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-33106: Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability, published 2023-12-05. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2023-12-05. EPSS: 0.8% chance of exploitation in the next 30 days. Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.
• CVE-2023-33107: Qualcomm Multiple Chipsets Integer Overflow Vulnerability, published 2023-12-05. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2023-12-05. EPSS: 0.7% chance of exploitation in the next 30 days. Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.
• CVE-2022-40507, published 2023-06-06. High severity, CVSS 7.8. EPSS: 1.3% chance of exploitation in the next 30 days. Memory corruption due to double free in Core while mapping HLOS address to the list.
• CVE-2022-40516, published 2023-01-09. High severity, CVSS 7.8. EPSS: 0.9% chance of exploitation in the next 30 days. Memory corruption in Core due to stack-based buffer overflow.
• CVE-2021-35088, published 2022-04-01. Critical severity, CVSS 9.1. EPSS: 0.9% chance of exploitation in the next 30 days. Possible out of bound read due to improper validation of IE length during SSID IE parse when channel is DFS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
• CVE-2021-35104, published 2022-06-14. Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days. Possible buffer overflow due to improper parsing of headers while playing the FLAC audio clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon…
• CVE-2021-30341, published 2022-06-14. Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days. Improper buffer size validation of DSM packet received can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity,…
• CVE-2022-25736, published 2022-10-19. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. Denial of service in WLAN due to out-of-bound read happens while processing VHT action frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics…
• CVE-2022-22065, published 2022-06-14. High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days. Out of bound read in WLAN HOST due to improper length check can lead to DOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon…
• CVE-2022-40520, published 2023-01-09. High severity, CVSS 7.8. EPSS: 0.7% chance of exploitation in the next 30 days. Memory corruption due to stack-based buffer overflow in Core

Latest

• CVE-2026-24084, published 2026-08-04. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Weak configuration when UE does not verify the consistency of its additional security capabilities with the replayed capabilities.
• CVE-2026-24079, published 2026-08-04. High severity, CVSS 8.1. EPSS: 0.2% chance of exploitation in the next 30 days. Cryptographic Issue while processing registration requests with malformed or missing authentication parameters.
• CVE-2026-24078, published 2026-08-04. Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days. Information Disclosure when IPSec negotiation fails or is not established properly during NG-eCall SIP signaling.
• CVE-2026-24077, published 2026-08-04. Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days. Information Disclosure when processing wireless network channel switch information with improperly formatted length fields.
• CVE-2026-21384, published 2026-07-06. Medium severity, CVSS 5.3. EPSS: 0.1% chance of exploitation in the next 30 days. Memory Corruption when updating prepared commands with invalid port indices based on user space input exceeds supported read client limits.
• CVE-2026-21370, published 2026-07-06. Medium severity, CVSS 5.3. EPSS: 0.1% chance of exploitation in the next 30 days. Memory Corruption when validating input batch size and buffer plane count exceeds maximum allowed values.
• CVE-2026-21368, published 2026-07-06. Medium severity, CVSS 5.3. EPSS: 0.1% chance of exploitation in the next 30 days. Memory Corruption when parsing jpeg commands due to unaccounted extra writes to the buffer during validation checks.
• CVE-2026-24091, published 2026-06-01. High severity, CVSS 7.2. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption while processing fastboot commands with improperly formatted input.
• CVE-2026-24088, published 2026-06-01. High severity, CVSS 8.2. EPSS: 0.1% chance of exploitation in the next 30 days. Cryptographic Issue while processing a specific partition which allows unauthorized write access to load a customized bootloader.
• CVE-2026-24085, published 2026-06-01. High severity, CVSS 7.2. EPSS: 0.1% chance of exploitation in the next 30 days. Memory Corruption when processing display command line information due to improper initialization of a variable.