Skip to content

RadicalNotion.AI

We do not sell or share your personal information

© 2026 RadicalNotion.AI

Security Data

CWE Directory
CAPEC Directory
CNA Directory
CNA Report Cards
Data Sources

Calculators

CVSS Calculator
CVSS 4.0
CVSS 3.1
CVSS 3.0
CVSS 2.0

Platform

My Vulnerabilities
Insights
Notifications
Account
Pricing

Learn

All guides
What is a CVE?
What is CVSS?
The CISA KEV catalog
What is EPSS?

Company

About us
Blog
Book a demo

Get Started

Sign up
Log in

Legal

Privacy
Terms

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities + report cards
VendorsVulnerabilities by vendor

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0

Resources

LearnPlain-English security guides
Data SourcesHow we source CVE data

About Us Blog Pricing Book a Demo

Log in

Home
Vendors
Qualcomm
Pm8937 Firmware

qualcomm pm8937 firmware Vulnerabilities: CVEs, CISA KEV & Security Advisories

95 CVEs

3 in CISA KEV

qualcomm pm8937 firmware Vulnerabilities

CVE security advisories and vulnerability history for pm8937 firmware by qualcomm.

95

Total CVEs

Published

3

In CISA KEV

Exploited in the wild

3

Public exploits

With known exploit

7.9

Avg CVSS

2021–2025

Last updated October 9, 2025

Overview

qualcomm pm8937 firmware has 95 published CVE records since 2021, of which 3 are in CISA's Known Exploited Vulnerabilities catalog and 3 have a known public exploit. The average CVSS base score across scored CVEs is 7.9.

This page aggregates every publicly disclosed vulnerability (CVE) affecting qualcomm pm8937 firmware, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of qualcomm pm8937 firmware's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical5

High50

Medium7

Low0

33 additional CVEs have no CVSS severity score.

In CISA’s Known Exploited Vulnerabilities catalog

3

3 of qualcomm pm8937 firmware's CVEs are confirmed exploited in the wild.

Public exploits

3

3 of qualcomm pm8937 firmware's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every qualcomm pm8937 firmware version named in a CVE, then pick one to see only the CVEs that affect it.

No specific affected versions are recorded for qualcomm pm8937 firmware; the CVEs below apply to the product without a version pin.

95 CVEs

Sort

Incorrect Calculation of Buffer Size in HLOS
CVE-2025-27053CWE-131
High · CVSS 7.8
EPSS 0.0% (5th pct)2025-10-09
Cryptographic Issues in Core
CVE-2025-21482CWE-310
High · CVSS 7.1
EPSS 0.0% (3th pct)2025-09-24
NULL Pointer Dereference in SPS-HLOS
CVE-2025-21433CWE-476
Medium · CVSS 6.2
EPSS 0.1% (20th pct)2025-07-08
High vulnerability · 2024-12-02
CVE-2024-43052
Patch
CWE-20
High · CVSS 7.8
EPSS 0.1% (29th pct)2024-12-02
Medium vulnerability · 2024-08-05
CVE-2024-23357CWE-476
Medium · CVSS 6.2
EPSS 0.1% (30th pct)2024-08-05
High vulnerability · 2024-07-01
CVE-2024-21461
Patch
CWE-415
High · CVSS 8.4
EPSS 0.1% (29th pct)2024-07-01
Buffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in SPS-Applications
CVE-2023-33023
Patch
CWE-120
High · CVSS 8.4
EPSS 0.1% (19th pct)2024-04-01
Buffer Copy Without Checking Size of Input in SPS Applications
CVE-2023-28547
Patch
CWE-120
High · CVSS 8.4
EPSS 0.1% (24th pct)2024-04-01
High vulnerability · 2024-03-04
CVE-2023-33066
Patch
CWE-823
High · CVSS 8.4
EPSS 0.1% (22th pct)2024-03-04
High vulnerability · 2024-01-02
CVE-2023-33033CWE-823
High · CVSS 8.4
EPSS 0.1% (19th pct)2024-01-02
Buffer Copy without Checking Size of Input in HLOS
CVE-2023-33030CWE-120
Critical · CVSS 9.3
EPSS 0.1% (19th pct)2024-01-02
High vulnerability · 2023-12-05
CVE-2023-28546CWE-120
High · CVSS 7.8
EPSS 0.1% (19th pct)2023-12-05
Improper Validation of Array Index in HLOS
CVE-2023-24850CWE-129
High · CVSS 7.8
EPSS 0.0% (9th pct)2023-10-03
High vulnerability · 2023-08-08
CVE-2023-21626CWE-320
High · CVSS 7.1
EPSS 0.1% (19th pct)2023-08-08
Critical vulnerability · 2023-08-08
CVE-2022-40510
Patch
CWE-457
Critical · CVSS 9.8
EPSS 0.2% (37th pct)2023-08-08
High vulnerability · 2023-06-06
CVE-2022-22076CWE-310
High · CVSS 7.1
EPSS 0.1% (20th pct)2023-06-06
High vulnerability · 2023-04-04
CVE-2022-40532CWE-190
High · CVSS 8.4
EPSS 0.1% (30th pct)2023-04-04
High vulnerability · 2022-10-19
CVE-2022-25719CWE-125
High · CVSS 8.2
EPSS 0.4% (59th pct)2022-10-19
Critical vulnerability · 2022-10-19
CVE-2022-25718CWE-252
Critical · CVSS 9.1
EPSS 0.2% (46th pct)2022-10-19
High vulnerability · 2022-09-26
CVE-2022-22058CWE-416
High · CVSS 8.4
EPSS 0.1% (18th pct)2022-09-26
High vulnerability · 2022-09-16
CVE-2022-25670
High · CVSS 7.5
EPSS 0.4% (60th pct)2022-09-16
High vulnerability · 2022-09-16
CVE-2022-22074
High · CVSS 8.4
EPSS 0.1% (30th pct)2022-09-16
High vulnerability · 2022-09-02
CVE-2022-25668
High · CVSS 7.3
EPSS 0.4% (61th pct)2022-09-02
High vulnerability · 2022-09-02
CVE-2022-25659
High · CVSS 7.3
EPSS 0.4% (60th pct)2022-09-02
High vulnerability · 2022-09-02
CVE-2022-22062
High · CVSS 8.2
EPSS 0.2% (42th pct)2022-09-02
Medium vulnerability · 2022-09-02
CVE-2021-35135
Medium · CVSS 6.2
EPSS 0.0% (12th pct)2022-09-02
High vulnerability · 2022-06-14
CVE-2022-22072
High · CVSS 7.8
EPSS 0.0% (11th pct)2022-06-14
High vulnerability · 2022-06-14
CVE-2022-22064
High · CVSS 7.5
EPSS 0.4% (59th pct)2022-06-14
High vulnerability · 2022-06-14
CVE-2021-35116
High · CVSS 7.7
EPSS 0.1% (27th pct)2022-06-14
High vulnerability · 2022-06-14
CVE-2022-22087
High · CVSS 7.3
EPSS 0.3% (54th pct)2022-06-14

Showing 30 of 95

Common weakness types

The CWE weakness categories most often found in qualcomm pm8937 firmware CVEs. Follow any weakness for its full explanation.

CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')4 CVEs
CWE-823Use of Out-of-range Pointer Offset2 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-3102 CVEs
CWE-416Use After Free2 CVEs
CWE-476NULL Pointer Dereference2 CVEs
CWE-252Unchecked Return Value1 CVE
CWE-457Use of Uninitialized Variable1 CVE

Disclosure activity by year

How many qualcomm pm8937 firmware CVEs were published each year.

2021

61

2022

17

2023

6

2024

8

2025

3

Other qualcomm products

Browse vulnerabilities for other products by qualcomm.

wcd93801,205 CVEs wcd9380 firmware1,171 CVEs wsa88301,137 CVEs wsa88351,136 CVEs wcd93851,116 CVEs qca6574au1,105 CVEs wsa8830 firmware1,105 CVEs wsa8835 firmware1,104 CVEs

All qualcomm vulnerabilities

Frequently asked questions

Common questions about qualcomm pm8937 firmware vulnerabilities.

How many CVEs does qualcomm pm8937 firmware have?

qualcomm pm8937 firmware has 95 published CVE records since 2021.

How many qualcomm pm8937 firmware CVEs are in CISA KEV?

Yes — 3 of qualcomm pm8937 firmware's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Are there public exploits for qualcomm pm8937 firmware vulnerabilities?

Yes — 3 of qualcomm pm8937 firmware's CVEs have a known public exploit.

What are the most common weakness types in qualcomm pm8937 firmware CVEs?

qualcomm pm8937 firmware's CVEs most often map to these CWE weakness types: CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')), CWE-823 (Use of Out-of-range Pointer Offset), CWE-20 (Improper Input Validation), CWE-310.

How many critical qualcomm pm8937 firmware vulnerabilities are there?

qualcomm pm8937 firmware has 5 critical and 50 high-severity CVEs.

What is the average severity of qualcomm pm8937 firmware CVEs?

The average CVSS base score across qualcomm pm8937 firmware's scored CVEs is 7.9.

References

All qualcomm vulnerabilities
The MITRE CVE Program (opens in a new tab)
Learn: What is a CVE?
CWE directory: the weakness types these CVEs map to

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track qualcomm pm8937 firmware vulnerabilities

Monitor new qualcomm pm8937 firmware vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing

On this page

Overview
Severity and exploitation
Affected versions and CVEs
Common weakness types
Disclosure activity
Other products
FAQ
References