# Qualcomm WSA8845 vulnerabilities Source: https://junglewise.ai/threats/technologies/wsa8845 Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/wsa8845.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 45 vulnerabilities in Qualcomm WSA8845: 0 in the last 7 days and 11 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-25294, was published on 17 September 2026. Nothing in the last four weeks, down from 11 vulnerabilities in the four before. ## Counts - Last 7 days: 0 - Last 30 days: 0 - Last 90 days: 11 - All time: 45 (0 critical, 0 exploited in the wild) ## About Qualcomm WSA8845 A smart speaker amplifier hardware component designed for high-fidelity audio in mobile devices. ## Latest Qualcomm WSA8845 vulnerabilities - [CVE-2026-25294: Qualcomm transient denial of service while parsing frame during channel usage](https://junglewise.ai/threats/cve-2026-25294-qualcomm-transient-denial-of-service-while-parsing-frame-during) (high, CVSS 7.4, published 17 Sep 2026) - [CVE-2026-25290: Qualcomm component memory corruption in buffer validation](https://junglewise.ai/threats/cve-2026-25290-qualcomm-component-memory-corruption-in-buffer-validation) (high, CVSS 7.8, published 17 Sep 2026) - [CVE-2026-25284: Qualcomm component use-after-free information disclosure](https://junglewise.ai/threats/cve-2026-25284-qualcomm-component-use-after-free-information-disclosure) (high, CVSS 7.3, published 17 Sep 2026) - [CVE-2026-25283: Qualcomm buffer overflow in external data handling](https://junglewise.ai/threats/cve-2026-25283-qualcomm-buffer-overflow-in-external-data-handling) (high, CVSS 8.8, published 17 Sep 2026) - [CVE-2026-25282: Qualcomm component out-of-bounds memory access in data processing](https://junglewise.ai/threats/cve-2026-25282-qualcomm-component-out-of-bounds-memory-access-in-data-processing) (high, CVSS 7.9, published 17 Sep 2026) - [CVE-2026-25280: Qualcomm component memory corruption in escape handling](https://junglewise.ai/threats/cve-2026-25280-qualcomm-component-memory-corruption-in-escape-handling) (high, CVSS 7.8, published 17 Sep 2026) - [CVE-2026-25261: Qualcomm rear sensor driver memory corruption in IOCTL handling](https://junglewise.ai/threats/cve-2026-25261-qualcomm-rear-sensor-driver-memory-corruption-in-ioctl-handling) (medium, CVSS 6.7, published 17 Sep 2026) - [CVE-2026-24075: Qualcomm device control handler memory corruption via concurrent IOCTL requests](https://junglewise.ai/threats/cve-2026-24075-qualcomm-device-control-handler-memory-corruption-via-concurrent) (high, CVSS 7.8, published 17 Sep 2026) - [CVE-2026-24074: Qualcomm firmware memory corruption in data copy operations](https://junglewise.ai/threats/cve-2026-24074-qualcomm-firmware-memory-corruption-in-data-copy-operations) (high, CVSS 7.8, published 17 Sep 2026) - [CVE-2026-24073: Qualcomm decode statistics memory corruption](https://junglewise.ai/threats/cve-2026-24073-qualcomm-decode-statistics-memory-corruption) (high, CVSS 7.8, published 17 Sep 2026) - [CVE-2025-59607: Qualcomm component memory corruption on large input allocation](https://junglewise.ai/threats/cve-2025-59607-qualcomm-component-memory-corruption-on-large-input-allocation) (high, CVSS 7.8, published 17 Sep 2026) - [CVE-2026-24080: Qualcomm fingerprint TA memory corruption in request parameter handling](https://junglewise.ai/threats/cve-2026-24080-qualcomm-fingerprint-ta-memory-corruption-in-request-parameter) (high, CVSS 7.8, published 4 Aug 2026) - [CVE-2026-24076: Qualcomm memory corruption in registry value processing](https://junglewise.ai/threats/cve-2026-24076-qualcomm-memory-corruption-in-registry-value-processing) (medium, CVSS 6.7, published 4 Aug 2026) - [CVE-2026-25271: Qualcomm Snapdragon memory corruption via TOCTOU race condition](https://junglewise.ai/threats/cve-2026-25271-qualcomm-snapdragon-memory-corruption-via-toctou-race-condition) (high, CVSS 7.8, published 6 Jul 2026) - [CVE-2026-25266: Memory corruption while processing IOCTL command when device is in power-save state.](https://junglewise.ai/threats/cve-2026-25266-memory-corruption-while-processing-ioctl-command-when-device-is) (medium, CVSS 5.5, published 4 May 2026) - [CVE-2025-47408: Memory corruption when another driver calls an IOCTL with invalid input/output buffer.](https://junglewise.ai/threats/cve-2025-47408-memory-corruption-when-another-driver-calls-an-ioctl-with-invalid) (high, CVSS 7.8, published 4 May 2026) - [CVE-2025-47406: Information Disclosure while processing IOCTL handler callbacks without verifying buffer size.](https://junglewise.ai/threats/cve-2025-47406-information-disclosure-while-processing-ioctl-handler-callbacks) (medium, CVSS 6.1, published 4 May 2026) - [CVE-2025-47405: Memory corruption when processing camera sensor input/output control codes with invalid output buffers.](https://junglewise.ai/threats/cve-2025-47405-memory-corruption-when-processing-camera-sensor-input-output) (high, CVSS 7.8, published 4 May 2026) - [CVE-2026-21382: Memory Corruption when handling power management requests with improperly sized input/output buffers.](https://junglewise.ai/threats/cve-2026-21382-memory-corruption-when-handling-power-management-requests-with) (high, CVSS 7.8, published 6 Apr 2026) - [CVE-2026-21381: Transient DOS when receiving a service data frame with excessive length during device matching over a neighborhood…](https://junglewise.ai/threats/cve-2026-21381-transient-dos-when-receiving-a-service-data-frame-with-excessive) (high, CVSS 7.6, published 6 Apr 2026) - [CVE-2026-21380: Memory Corruption when using deprecated DMABUF IOCTL calls to manage video memory.](https://junglewise.ai/threats/cve-2026-21380-memory-corruption-when-using-deprecated-dmabuf-ioctl-calls-to) (high, CVSS 7.8, published 6 Apr 2026) - [CVE-2026-21378: Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor…](https://junglewise.ai/threats/cve-2026-21378-memory-corruption-when-accessing-an-output-buffer-without) (high, CVSS 7.8, published 6 Apr 2026) - [CVE-2026-21376: Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor…](https://junglewise.ai/threats/cve-2026-21376-memory-corruption-when-accessing-an-output-buffer-without) (high, CVSS 7.8, published 6 Apr 2026) - [CVE-2026-21375: Memory Corruption when accessing an output buffer without validating its size during IOCTL processing.](https://junglewise.ai/threats/cve-2026-21375-memory-corruption-when-accessing-an-output-buffer-without) (high, CVSS 7.8, published 6 Apr 2026) - [CVE-2026-21372: Memory Corruption when sending IOCTL requests with invalid buffer sizes during memcpy operations.](https://junglewise.ai/threats/cve-2026-21372-memory-corruption-when-sending-ioctl-requests-with-invalid-buffer) (high, CVSS 7.8, published 6 Apr 2026) ## Most severe Qualcomm WSA8845 vulnerabilities - [CVE-2026-25283: Qualcomm buffer overflow in external data handling](https://junglewise.ai/threats/cve-2026-25283-qualcomm-buffer-overflow-in-external-data-handling) (high, CVSS 8.8, published 17 Sep 2026) - [CVE-2025-47345: Cryptographic issue may occur while encrypting license data.](https://junglewise.ai/threats/cve-2025-47345-cryptographic-issue-may-occur-while-encrypting-license-data) (high, CVSS 8.4, published 7 Jan 2026) - [CVE-2026-25282: Qualcomm component out-of-bounds memory access in data processing](https://junglewise.ai/threats/cve-2026-25282-qualcomm-component-out-of-bounds-memory-access-in-data-processing) (high, CVSS 7.9, published 17 Sep 2026) - [CVE-2026-24080: Qualcomm fingerprint TA memory corruption in request parameter handling](https://junglewise.ai/threats/cve-2026-24080-qualcomm-fingerprint-ta-memory-corruption-in-request-parameter) (high, CVSS 7.8, published 4 Aug 2026) - [CVE-2026-21376: Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor…](https://junglewise.ai/threats/cve-2026-21376-memory-corruption-when-accessing-an-output-buffer-without) (high, CVSS 7.8, published 6 Apr 2026) - [CVE-2026-21372: Memory Corruption when sending IOCTL requests with invalid buffer sizes during memcpy operations.](https://junglewise.ai/threats/cve-2026-21372-memory-corruption-when-sending-ioctl-requests-with-invalid-buffer) (high, CVSS 7.8, published 6 Apr 2026) - [CVE-2026-21371: Memory Corruption when retrieving output buffer with insufficient size validation.](https://junglewise.ai/threats/cve-2026-21371-memory-corruption-when-retrieving-output-buffer-with-insufficient) (high, CVSS 7.8, published 6 Apr 2026) - [CVE-2025-47390: Memory corruption while preprocessing IOCTL request in JPEG driver.](https://junglewise.ai/threats/cve-2025-47390-memory-corruption-while-preprocessing-ioctl-request-in-jpeg) (high, CVSS 7.8, published 6 Apr 2026) - [CVE-2025-47396: Memory corruption occurs when a secure application is launched on a device with insufficient memory.](https://junglewise.ai/threats/cve-2025-47396-memory-corruption-occurs-when-a-secure-application-is-launched-on) (high, CVSS 7.8, published 7 Jan 2026) - [CVE-2025-47368: Memory corruption when dereferencing an invalid userspace address in a user buffer during MCDM IOCTL processing.](https://junglewise.ai/threats/cve-2025-47368-memory-corruption-when-dereferencing-an-invalid-userspace-address) (high, CVSS 7.8, published 4 Nov 2025) ## Vulnerabilities per week Nothing in the last four weeks, down from 11 vulnerabilities in the four before. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 11 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other Qualcomm technologies - [Qualcomm FastConnect 7800](https://junglewise.ai/threats/technologies/fastconnect-7800): 54 vulnerabilities - [Qualcomm FastConnect 7800 Firmware](https://junglewise.ai/threats/technologies/fastconnect-7800-firmware): 48 vulnerabilities - [Qualcomm FastConnect 6900](https://junglewise.ai/threats/technologies/fastconnect-6900): 47 vulnerabilities - [Qualcomm WSA8840](https://junglewise.ai/threats/technologies/wsa8840): 45 vulnerabilities - [Qualcomm WSA8845H](https://junglewise.ai/threats/technologies/wsa8845h): 45 vulnerabilities - [Qualcomm Wsa8840 Firmware](https://junglewise.ai/threats/technologies/wsa8840-firmware): 44 vulnerabilities - [Qualcomm Wsa8845 Firmware](https://junglewise.ai/threats/technologies/wsa8845-firmware): 44 vulnerabilities - [Qualcomm Wsa8845h Firmware](https://junglewise.ai/threats/technologies/wsa8845h-firmware): 44 vulnerabilities - [Qualcomm FastConnect 6900 Firmware](https://junglewise.ai/threats/technologies/fastconnect-6900-firmware): 41 vulnerabilities - [Qualcomm WCD9380](https://junglewise.ai/threats/technologies/wcd9380): 39 vulnerabilities - [Qualcomm Wcd9380 Firmware](https://junglewise.ai/threats/technologies/wcd9380-firmware): 38 vulnerabilities - [Qualcomm WCD9385](https://junglewise.ai/threats/technologies/wcd9385): 38 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Qualcomm WSA8845 vulnerabilities", https://junglewise.ai/threats/technologies/wsa8845, 9 November 2026.