Skip to content

RadicalNotion.AI

We do not sell or share your personal information

© 2026 RadicalNotion.AI

Security Data

CWE Directory
CAPEC Directory
CNA Directory
CNA Report Cards
Data Sources

Calculators

CVSS Calculator
CVSS 4.0
CVSS 3.1
CVSS 3.0
CVSS 2.0

Platform

My Vulnerabilities
Insights
Notifications
Account
Pricing

Learn

All guides
What is a CVE?
What is CVSS?
The CISA KEV catalog
What is EPSS?

Company

About us
Blog
Book a demo

Get Started

Sign up
Log in

Legal

Privacy
Terms

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities + report cards
VendorsVulnerabilities by vendor

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0

Resources

LearnPlain-English security guides
Data SourcesHow we source CVE data

About Us Blog Pricing Book a Demo

Log in

Home
Vendors
Qualcomm
Sdx20m Firmware

qualcomm sdx20m firmware Vulnerabilities: CVEs, CISA KEV & Security Advisories

95 CVEs

4 in CISA KEV

qualcomm sdx20m firmware Vulnerabilities

CVE security advisories and vulnerability history for sdx20m firmware by qualcomm.

95

Total CVEs

Published

4

In CISA KEV

Exploited in the wild

7

Public exploits

With known exploit

7.9

Avg CVSS

2020–2025

Last updated September 24, 2025

Overview

qualcomm sdx20m firmware has 95 published CVE records since 2020, of which 4 are in CISA's Known Exploited Vulnerabilities catalog and 7 have a known public exploit. The average CVSS base score across scored CVEs is 7.9.

This page aggregates every publicly disclosed vulnerability (CVE) affecting qualcomm sdx20m firmware, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of qualcomm sdx20m firmware's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical9

High60

Medium6

Low0

20 additional CVEs have no CVSS severity score.

In CISA’s Known Exploited Vulnerabilities catalog

4

4 of qualcomm sdx20m firmware's CVEs are confirmed exploited in the wild.

Public exploits

7

7 of qualcomm sdx20m firmware's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every qualcomm sdx20m firmware version named in a CVE, then pick one to see only the CVEs that affect it.

No specific affected versions are recorded for qualcomm sdx20m firmware; the CVEs below apply to the product without a version pin.

95 CVEs

Sort

Cryptographic Issues in Core
CVE-2025-21482CWE-310
High · CVSS 7.1
EPSS 0.0% (3th pct)2025-09-24
Buffer Over-read in WLAN Embedded SW
CVE-2025-21454CWE-126
High · CVSS 7.5
EPSS 0.4% (58th pct)2025-07-08
Buffer Over-read in WLAN Embedded SW
CVE-2025-21449CWE-126
High · CVSS 7.5
EPSS 0.4% (58th pct)2025-07-08
High vulnerability · 2024-12-02
CVE-2024-33056
Patch
CWE-126
High · CVSS 8.4
EPSS 0.1% (26th pct)2024-12-02
High vulnerability · 2024-11-04
CVE-2024-38423
Patch
CWE-120
High · CVSS 7.8
EPSS 0.2% (43th pct)2024-11-04
High vulnerability · 2024-11-04
CVE-2024-38422
Patch
CWE-680
High · CVSS 7.8
EPSS 0.2% (43th pct)2024-11-04
Use After Free in DSP Service
CVE-2024-33060
Patch
CWE-416
High · CVSS 8.4
EPSS 0.2% (42th pct)2024-09-02
High vulnerability · 2024-09-02
CVE-2024-33051
Patch
CWE-126
High · CVSS 7.5
EPSS 0.3% (53th pct)2024-09-02
Improper Restriction of Operations within the Bounds of a Memory Buffer in Storage
CVE-2024-33016
Patch
CWE-119
Medium · CVSS 6.8
EPSS 0.1% (30th pct)2024-09-02
Use After Free in Graphics Linux
CVE-2024-21471
Patch
CWE-416
High · CVSS 8.4
EPSS 0.1% (29th pct)2024-05-06
High vulnerability · 2024-04-01
CVE-2024-21468
Patch
CWE-416
High · CVSS 8.4
EPSS 0.1% (19th pct)2024-04-01
Loop with Unreachable Exit Condition (Infinite Loop) in WLAN Firmware
CVE-2023-43511CWE-835
High · CVSS 7.5
EPSS 0.3% (56th pct)2024-01-02
Use After Free in Audio
CVE-2023-33120CWE-416
High · CVSS 7.8
EPSS 0.1% (33th pct)2024-01-02
Integer Overflow or Wraparound in Graphics Linux
CVE-2023-33107
CISA KEV
Public exploit
Patch
CWE-190
Added to CISA KEV 2023-12-05
Critical · CVSS 9.4
EPSS 0.4% (62th pct)2023-12-05
High vulnerability · 2023-12-05
CVE-2023-33080CWE-126
High · CVSS 7.5
EPSS 0.2% (41th pct)2023-12-05
Buffer Copy Without Checking Size of Input in Audio
CVE-2023-33059CWE-191
High · CVSS 7.8
EPSS 0.1% (24th pct)2023-11-07
High vulnerability · 2023-09-05
CVE-2023-33020CWE-285
High · CVSS 7.5
EPSS 0.1% (23th pct)2023-09-05
High vulnerability · 2023-09-05
CVE-2023-33019CWE-285
High · CVSS 7.5
EPSS 0.1% (24th pct)2023-09-05
High vulnerability · 2023-09-05
CVE-2023-28565CWE-129
High · CVSS 7.8
EPSS 0.1% (19th pct)2023-09-05
High vulnerability · 2023-09-05
CVE-2023-28564CWE-823
High · CVSS 7.8
EPSS 0.0% (10th pct)2023-09-05
High vulnerability · 2023-07-04
CVE-2023-28542
Patch
CWE-126
High · CVSS 7.8
EPSS 0.1% (22th pct)2023-07-04
High vulnerability · 2023-07-04
CVE-2023-28541
Patch
CWE-126
High · CVSS 7.8
EPSS 0.1% (26th pct)2023-07-04
High vulnerability · 2023-06-06
CVE-2023-21628CWE-119
High · CVSS 8.4
EPSS 0.1% (20th pct)2023-06-06
High vulnerability · 2023-05-02
CVE-2023-21666
Public exploit
CWE-401
High · CVSS 8.4
EPSS 0.1% (24th pct)2023-05-02
High vulnerability · 2023-05-02
CVE-2023-21665
Public exploit
Patch
CWE-704
High · CVSS 8.4
EPSS 0.1% (27th pct)2023-05-02
High vulnerability · 2023-04-04
CVE-2022-40532CWE-190
High · CVSS 8.4
EPSS 0.1% (30th pct)2023-04-04
High vulnerability · 2023-04-04
CVE-2022-40503CWE-126
High · CVSS 8.2
EPSS 0.3% (54th pct)2023-04-04
Improper Validation of Array Index in Bluetooth HOST
CVE-2022-40537CWE-129
High · CVSS 7.3
EPSS 0.3% (54th pct)2023-03-07
Incorrect type conversion in WLAN
CVE-2022-40531CWE-704
High · CVSS 8.4
EPSS 0.1% (30th pct)2023-03-07
High vulnerability · 2023-03-07
CVE-2022-40515
Patch
CWE-415
High · CVSS 7.3
EPSS 0.3% (54th pct)2023-03-07

Showing 30 of 95

Common weakness types

The CWE weakness categories most often found in qualcomm sdx20m firmware CVEs. Follow any weakness for its full explanation.

CWE-126Buffer Over-read10 CVEs
CWE-416Use After Free6 CVEs
CWE-125Out-of-bounds Read4 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')4 CVEs
CWE-190Integer Overflow or Wraparound4 CVEs
CWE-476NULL Pointer Dereference3 CVEs
CWE-129Improper Validation of Array Index3 CVEs
CWE-835Loop with Unreachable Exit Condition ('Infinite Loop')3 CVEs

Disclosure activity by year

How many qualcomm sdx20m firmware CVEs were published each year.

2020

4

2021

38

2022

12

2023

28

2024

10

2025

3

Other qualcomm products

Browse vulnerabilities for other products by qualcomm.

wcd93801,205 CVEs wcd9380 firmware1,171 CVEs wsa88301,137 CVEs wsa88351,136 CVEs wcd93851,116 CVEs qca6574au1,105 CVEs wsa8830 firmware1,105 CVEs wsa8835 firmware1,104 CVEs

All qualcomm vulnerabilities

Frequently asked questions

Common questions about qualcomm sdx20m firmware vulnerabilities.

How many CVEs does qualcomm sdx20m firmware have?

qualcomm sdx20m firmware has 95 published CVE records since 2020.

How many qualcomm sdx20m firmware CVEs are in CISA KEV?

Yes — 4 of qualcomm sdx20m firmware's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Are there public exploits for qualcomm sdx20m firmware vulnerabilities?

Yes — 7 of qualcomm sdx20m firmware's CVEs have a known public exploit.

What are the most common weakness types in qualcomm sdx20m firmware CVEs?

qualcomm sdx20m firmware's CVEs most often map to these CWE weakness types: CWE-126 (Buffer Over-read), CWE-416 (Use After Free), CWE-125 (Out-of-bounds Read), CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')).

How many critical qualcomm sdx20m firmware vulnerabilities are there?

qualcomm sdx20m firmware has 9 critical and 60 high-severity CVEs.

What is the average severity of qualcomm sdx20m firmware CVEs?

The average CVSS base score across qualcomm sdx20m firmware's scored CVEs is 7.9.

References

All qualcomm vulnerabilities
The MITRE CVE Program (opens in a new tab)
Learn: What is a CVE?
CWE directory: the weakness types these CVEs map to

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track qualcomm sdx20m firmware vulnerabilities

Monitor new qualcomm sdx20m firmware vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing

On this page

Overview
Severity and exploitation
Affected versions and CVEs
Common weakness types
Disclosure activity
Other products
FAQ
References