Vulnerability feed
CVE and vendor PSIRT advisories from 13 sources, last 30 days. Updated hourly, last run
| Expand | Severity |
Score |
Advisory |
Title |
Source |
Flags |
Published |
|---|---|---|---|---|---|---|---|
| Unknown | n/a | CVE-2026-98936 |
In the Linux kernel, the following vulnerability has been resolved:
wifi: ath11k: reset ar->num_stations on hardware start
When (multiple) hw restart occurs, we end up in a...
Linux, Qualcomm, Inc.Linux, Linux kernel, Qualcomm, Inc. ath11k
|
NVD | |||
|
CVE-2026-98936In the Linux kernel, the following vulnerability has been resolved:
wifi: ath11k: reset ar->num_stations on hardware start
When (multiple) hw restart occurs, we end up in a...
Executive summaryThis advisory concerns a Linux kernel fix in the ath11k Wi-Fi driver for Qualcomm devices. After repeated hardware restarts, the driver could wrongly refuse new Wi-Fi station or mesh peer connections, and the fix resets the affected counter on hardware start. The advisory does not state a severity rating, and the fix is a kernel stable tree patch. Technical summaryThe flaw is a state-reset bug in the ath11k driver where the num_stations counter in struct ath11k was not cleared in ath11k_mac_op_start() during hardware restart, causing the driver to refuse new station associations with a 'too many connected already' error. The advisory describes the trigger as multiple hardware restarts, with no remote attack vector or privilege requirements stated. The patch adds a single line setting ar->num_stations to 0 in drivers/net/wireless/ath/ath11k/mac.c, and the commit references the Fixes tag d5c65159f289. No affected or fixed kernel version ranges, CVSS score, workaround, or exploitation status are stated in the advisory. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from git.kernel.org/stable/c/60142eb2afda345…0a3ff2a54c90e51525cc ScoreNo CVSS score published. Affects
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| High | 7.8 | CVE-2026-57559 |
Memory corruption while processing service requests.
Qualcomm, Inc.Qualcomm, Inc. Snapdragon, Qualcomm, Inc. Qcm5430 Firmware, Qualcomm, Inc. Qcm6490 Firmware, Qualcomm, Inc. Cologne Firmware, Qualcomm, Inc. Fastconnect 6700 Firmware, Qualcomm, Inc. Fastconnect 6900 Firmware, Qualcomm, Inc. Fastconnect 7800 Firmware, Qualcomm, Inc. Sc8380Xp Firmware, Qualcomm, Inc. Iqx5121 Firmware, Qualcomm, Inc. Iqx7181 Firmware, Qualcomm, Inc. Qca0000 Firmware, Qualcomm, Inc. Video Collaboration Vc3 Platform Firmware
|
NVD | |||
|
CVE-2026-57559Memory corruption while processing service requests.
From the advisoryMemory corruption while processing service requests. Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H AffectsQualcomm, Inc.Qualcomm, Inc. SnapdragonQualcomm, Inc. Qcm5430 FirmwareQualcomm, Inc. Qcm6490 FirmwareQualcomm, Inc. Cologne FirmwareQualcomm, Inc. Fastconnect 6700 FirmwareQualcomm, Inc. Fastconnect 6900 FirmwareQualcomm, Inc. Fastconnect 7800 FirmwareQualcomm, Inc. Sc8380Xp FirmwareQualcomm, Inc. Iqx5121 FirmwareQualcomm, Inc. Iqx7181 FirmwareQualcomm, Inc. Qca0000 FirmwareQualcomm, Inc. Video Collaboration Vc3 Platform Firmware
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| High | 7.8 | CVE-2026-57555 |
Memory Corruption when executing system service routines due to improper handling of user input buffers.
Qualcomm, Inc.Qualcomm, Inc. Snapdragon, Qualcomm, Inc. Qcm5430 Firmware, Qualcomm, Inc. Qcm6490 Firmware, Qualcomm, Inc. Cologne Firmware, Qualcomm, Inc. Fastconnect 6700 Firmware, Qualcomm, Inc. Fastconnect 6900 Firmware, Qualcomm, Inc. Fastconnect 7800 Firmware, Qualcomm, Inc. Sc8380Xp Firmware, Qualcomm, Inc. Iqx5121 Firmware, Qualcomm, Inc. Iqx7181 Firmware, Qualcomm, Inc. Qca0000 Firmware, Qualcomm, Inc. Video Collaboration Vc3 Platform Firmware
|
NVD | |||
|
CVE-2026-57555Memory Corruption when executing system service routines due to improper handling of user input buffers.
From the advisoryMemory Corruption when executing system service routines due to improper handling of user input buffers. Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H AffectsQualcomm, Inc.Qualcomm, Inc. SnapdragonQualcomm, Inc. Qcm5430 FirmwareQualcomm, Inc. Qcm6490 FirmwareQualcomm, Inc. Cologne FirmwareQualcomm, Inc. Fastconnect 6700 FirmwareQualcomm, Inc. Fastconnect 6900 FirmwareQualcomm, Inc. Fastconnect 7800 FirmwareQualcomm, Inc. Sc8380Xp FirmwareQualcomm, Inc. Iqx5121 FirmwareQualcomm, Inc. Iqx7181 FirmwareQualcomm, Inc. Qca0000 FirmwareQualcomm, Inc. Video Collaboration Vc3 Platform Firmware
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| High | 7.8 | CVE-2026-57554 |
Memory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC invocations.
Qualcomm, Inc.Qualcomm, Inc. Snapdragon, Qualcomm, Inc. Snapdragon G1 Gen 2 Gaming Platform Firmware, Qualcomm, Inc. Sm7675 Firmware, Qualcomm, Inc. Ar8035 Firmware, Qualcomm, Inc. Ar8031 Firmware, Qualcomm, Inc. Csra6620 Firmware, Qualcomm, Inc. Csra6640 Firmware, Qualcomm, Inc. Sm7435P Firmware, Qualcomm, Inc. Sm7525 Firmware, Qualcomm, Inc. Sm7550 Firmware, Qualcomm, Inc. Sm7550P Firmware, Qualcomm, Inc. Sm7635P Firmware
|
NVD | |||
|
CVE-2026-57554Memory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC invocations.
From the advisoryMemory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC invocations. Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H AffectsQualcomm, Inc.Qualcomm, Inc. SnapdragonQualcomm, Inc. Snapdragon G1 Gen 2 Gaming Platform FirmwareQualcomm, Inc. Sm7675 FirmwareQualcomm, Inc. Ar8035 FirmwareQualcomm, Inc. Ar8031 FirmwareQualcomm, Inc. Csra6620 FirmwareQualcomm, Inc. Csra6640 FirmwareQualcomm, Inc. Sm7435P FirmwareQualcomm, Inc. Sm7525 FirmwareQualcomm, Inc. Sm7550 FirmwareQualcomm, Inc. Sm7550P FirmwareQualcomm, Inc. Sm7635P Firmware
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| High | 7.5 | CVE-2026-57546 |
Transient DOS when processing a continuous receive command with a zero-sized global configuration override.
Qualcomm, Inc.Qualcomm, Inc. Snapdragon, Qualcomm, Inc. Fastconnect 7800 Firmware, Qualcomm, Inc. Congo Firmware, Qualcomm, Inc. Orne Firmware, Qualcomm, Inc. Pandeiro Firmware, Qualcomm, Inc. Fastconnect 8800 Mobile Connectivity System Firmware, Qualcomm, Inc. Sm8950 Firmware, Qualcomm, Inc. Sm8950P Firmware, Qualcomm, Inc. Sm8975 Firmware, Qualcomm, Inc. Sm8975P Firmware, Qualcomm, Inc. Wcd9378 Firmware, Qualcomm, Inc. Wcd9395 Firmware
|
NVD | |||
|
CVE-2026-57546Transient DOS when processing a continuous receive command with a zero-sized global configuration override.
From the advisoryTransient DOS when processing a continuous receive command with a zero-sized global configuration override. Impact if exploitedConfidentialityNone IntegrityNone AvailabilityHigh
How it is exploited
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H AffectsQualcomm, Inc.Qualcomm, Inc. SnapdragonQualcomm, Inc. Fastconnect 7800 FirmwareQualcomm, Inc. Congo FirmwareQualcomm, Inc. Orne FirmwareQualcomm, Inc. Pandeiro FirmwareQualcomm, Inc. Fastconnect 8800 Mobile Connectivity System FirmwareQualcomm, Inc. Sm8950 FirmwareQualcomm, Inc. Sm8950P FirmwareQualcomm, Inc. Sm8975 FirmwareQualcomm, Inc. Sm8975P FirmwareQualcomm, Inc. Wcd9378 FirmwareQualcomm, Inc. Wcd9395 Firmware
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| High | 7.8 | CVE-2026-57545 |
Memory corruption when processing draw objects of incorrect type during graphics command list execution.
Qualcomm, Inc.Qualcomm, Inc. Snapdragon, Qualcomm, Inc. Snapdragon G1 Gen 2 Gaming Platform Firmware, Qualcomm, Inc. Cologne Firmware, Qualcomm, Inc. Cq2390M Firmware, Qualcomm, Inc. Cq2390S Firmware, Qualcomm, Inc. Cq8750M Firmware, Qualcomm, Inc. Cq8845S Firmware, Qualcomm, Inc. Congo Firmware, Qualcomm, Inc. Ar8031 Firmware, Qualcomm, Inc. Cq7790 Firmware, Qualcomm, Inc. Cq7790M Firmware, Qualcomm, Inc. Cq8725S Firmware
|
NVD | |||
|
CVE-2026-57545Memory corruption when processing draw objects of incorrect type during graphics command list execution.
From the advisoryMemory corruption when processing draw objects of incorrect type during graphics command list execution. Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H AffectsQualcomm, Inc.Qualcomm, Inc. SnapdragonQualcomm, Inc. Snapdragon G1 Gen 2 Gaming Platform FirmwareQualcomm, Inc. Cologne FirmwareQualcomm, Inc. Cq2390M FirmwareQualcomm, Inc. Cq2390S FirmwareQualcomm, Inc. Cq8750M FirmwareQualcomm, Inc. Cq8845S FirmwareQualcomm, Inc. Congo FirmwareQualcomm, Inc. Ar8031 FirmwareQualcomm, Inc. Cq7790 FirmwareQualcomm, Inc. Cq7790M FirmwareQualcomm, Inc. Cq8725S Firmware
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| High | 7.8 | CVE-2026-57537 |
Memory Corruption when accessing and modifying geographic mapping data concurrently without proper synchronization.
Qualcomm, Inc.Qualcomm, Inc. Snapdragon, Qualcomm, Inc. Qca6797Aq Firmware, Qualcomm, Inc. Fastconnect 6200 Firmware, Qualcomm, Inc. Fastconnect 6900 Firmware, Qualcomm, Inc. Fastconnect 7800 Firmware, Qualcomm, Inc. Congo Firmware, Qualcomm, Inc. Orne Firmware, Qualcomm, Inc. Pandeiro Firmware, Qualcomm, Inc. Qca6595Au Firmware, Qualcomm, Inc. Qca6698Aq Firmware, Qualcomm, Inc. Qca8695Au Firmware, Qualcomm, Inc. Qcm8838 Firmware
|
NVD | |||
|
CVE-2026-57537Memory Corruption when accessing and modifying geographic mapping data concurrently without proper synchronization.
From the advisoryMemory Corruption when accessing and modifying geographic mapping data concurrently without proper synchronization. Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H AffectsQualcomm, Inc.Qualcomm, Inc. SnapdragonQualcomm, Inc. Qca6797Aq FirmwareQualcomm, Inc. Fastconnect 6200 FirmwareQualcomm, Inc. Fastconnect 6900 FirmwareQualcomm, Inc. Fastconnect 7800 FirmwareQualcomm, Inc. Congo FirmwareQualcomm, Inc. Orne FirmwareQualcomm, Inc. Pandeiro FirmwareQualcomm, Inc. Qca6595Au FirmwareQualcomm, Inc. Qca6698Aq FirmwareQualcomm, Inc. Qca8695Au FirmwareQualcomm, Inc. Qcm8838 Firmware
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| High | 7.1 | CVE-2026-25302 |
Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed.
Qualcomm, Inc.Qualcomm, Inc. Snapdragon, Qualcomm, Inc. Snapdragon G1 Gen 2 Gaming Platform Firmware, Qualcomm, Inc. Cologne Firmware, Qualcomm, Inc. Cq2390M Firmware, Qualcomm, Inc. Qmp2001 Firmware, Qualcomm, Inc. Xrv9209 Firmware, Qualcomm, Inc. Ar8035 Firmware, Qualcomm, Inc. Qmx82L Firmware, Qualcomm, Inc. Qmx85L Firmware, Qualcomm, Inc. Qna715 Firmware, Qualcomm, Inc. Qpa1083Bd Firmware, Qualcomm, Inc. Qpa1086Bd Firmware
|
NVD | |||
|
CVE-2026-25302Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed.
From the advisoryCryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed. Impact if exploitedConfidentialityHigh IntegrityNone AvailabilityHigh
How it is exploited
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H AffectsQualcomm, Inc.Qualcomm, Inc. SnapdragonQualcomm, Inc. Snapdragon G1 Gen 2 Gaming Platform FirmwareQualcomm, Inc. Cologne FirmwareQualcomm, Inc. Cq2390M FirmwareQualcomm, Inc. Qmp2001 FirmwareQualcomm, Inc. Xrv9209 FirmwareQualcomm, Inc. Ar8035 FirmwareQualcomm, Inc. Qmx82L FirmwareQualcomm, Inc. Qmx85L FirmwareQualcomm, Inc. Qna715 FirmwareQualcomm, Inc. Qpa1083Bd FirmwareQualcomm, Inc. Qpa1086Bd Firmware
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| High | 7.8 | CVE-2026-25291 |
Memory corruption when performing concurrent operations on shared memory page lists due to lack of proper synchronization mechanisms.
Qualcomm, Inc.Qualcomm, Inc. Snapdragon, Qualcomm, Inc. Sc8380Xp Firmware, Qualcomm, Inc. Snapdragon 662 Mobile Platform Firmware, Qualcomm, Inc. Sar1165P Firmware, Qualcomm, Inc. Sm4875 Firmware, Qualcomm, Inc. Sm6225P Firmware, Qualcomm, Inc. Sm6850 Firmware, Qualcomm, Inc. Sm7325P Firmware, Qualcomm, Inc. Sm7435 Firmware, Qualcomm, Inc. Sm8845P Firmware, Qualcomm, Inc. Snapdragon 4 Gen 1 Mobile Platform Firmware, Qualcomm, Inc. Snapdragon 460 Mobile Platform Firmware
|
NVD | |||
|
CVE-2026-25291Memory corruption when performing concurrent operations on shared memory page lists due to lack of proper synchronization mechanisms.
From the advisoryMemory corruption when performing concurrent operations on shared memory page lists due to lack of proper synchronization mechanisms. Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H AffectsQualcomm, Inc.Qualcomm, Inc. SnapdragonQualcomm, Inc. Sc8380Xp FirmwareQualcomm, Inc. Snapdragon 662 Mobile Platform FirmwareQualcomm, Inc. Sar1165P FirmwareQualcomm, Inc. Sm4875 FirmwareQualcomm, Inc. Sm6225P FirmwareQualcomm, Inc. Sm6850 FirmwareQualcomm, Inc. Sm7325P FirmwareQualcomm, Inc. Sm7435 FirmwareQualcomm, Inc. Sm8845P FirmwareQualcomm, Inc. Snapdragon 4 Gen 1 Mobile Platform FirmwareQualcomm, Inc. Snapdragon 460 Mobile Platform Firmware
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| Medium | 6.7 | CVE-2026-25274 |
Memory Corruption when processing concurrent DMA buffer allocation and deallocation commands without proper synchronization.
Qualcomm, Inc.Qualcomm, Inc. Snapdragon, Qualcomm, Inc. Aqt1000 Firmware, Qualcomm, Inc. Cologne Firmware, Qualcomm, Inc. Fastconnect 6200 Firmware, Qualcomm, Inc. Fastconnect 6700 Firmware, Qualcomm, Inc. Fastconnect 6900 Firmware, Qualcomm, Inc. Fastconnect 7800 Firmware, Qualcomm, Inc. Congo Firmware, Qualcomm, Inc. Fastconnect 6800 Firmware, Qualcomm, Inc. Iqx5121 Firmware, Qualcomm, Inc. Iqx7181 Firmware, Qualcomm, Inc. Qca0000 Firmware
|
NVD | |||
|
CVE-2026-25274Memory Corruption when processing concurrent DMA buffer allocation and deallocation commands without proper synchronization.
From the advisoryMemory Corruption when processing concurrent DMA buffer allocation and deallocation commands without proper synchronization. Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H AffectsQualcomm, Inc.Qualcomm, Inc. SnapdragonQualcomm, Inc. Aqt1000 FirmwareQualcomm, Inc. Cologne FirmwareQualcomm, Inc. Fastconnect 6200 FirmwareQualcomm, Inc. Fastconnect 6700 FirmwareQualcomm, Inc. Fastconnect 6900 FirmwareQualcomm, Inc. Fastconnect 7800 FirmwareQualcomm, Inc. Congo FirmwareQualcomm, Inc. Fastconnect 6800 FirmwareQualcomm, Inc. Iqx5121 FirmwareQualcomm, Inc. Iqx7181 FirmwareQualcomm, Inc. Qca0000 Firmware
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| Medium | 6.7 | CVE-2026-25273 |
Memory Corruption when processing camera operations due to out-of-bounds write during driver updates.
Qualcomm, Inc.Qualcomm, Inc. Snapdragon, Qualcomm, Inc. Cq8845S Firmware, Qualcomm, Inc. Cq8850Ns Firmware, Qualcomm, Inc. Fastconnect 6200 Firmware, Qualcomm, Inc. Fastconnect 6900 Firmware, Qualcomm, Inc. Fastconnect 7800 Firmware, Qualcomm, Inc. Congo Firmware, Qualcomm, Inc. Orne Firmware, Qualcomm, Inc. Pandeiro Firmware, Qualcomm, Inc. Qmp1000 Firmware, Qualcomm, Inc. Qmp2001 Firmware, Qualcomm, Inc. Fastconnect 8800 Mobile Connectivity System Firmware
|
NVD | |||
|
CVE-2026-25273Memory Corruption when processing camera operations due to out-of-bounds write during driver updates.
From the advisoryMemory Corruption when processing camera operations due to out-of-bounds write during driver updates. Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H AffectsQualcomm, Inc.Qualcomm, Inc. SnapdragonQualcomm, Inc. Cq8845S FirmwareQualcomm, Inc. Cq8850Ns FirmwareQualcomm, Inc. Fastconnect 6200 FirmwareQualcomm, Inc. Fastconnect 6900 FirmwareQualcomm, Inc. Fastconnect 7800 FirmwareQualcomm, Inc. Congo FirmwareQualcomm, Inc. Orne FirmwareQualcomm, Inc. Pandeiro FirmwareQualcomm, Inc. Qmp1000 FirmwareQualcomm, Inc. Qmp2001 FirmwareQualcomm, Inc. Fastconnect 8800 Mobile Connectivity System Firmware
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| Medium | 6.7 | CVE-2026-25272 |
Memory Corruption when processing camera CRE driver operations with improper handling of buffer limits during hardware update preparation.
Qualcomm, Inc.Qualcomm, Inc. Snapdragon, Qualcomm, Inc. Snapdragon G1 Gen 2 Gaming Platform Firmware, Qualcomm, Inc. Cologne Firmware, Qualcomm, Inc. Cq2390M Firmware, Qualcomm, Inc. Cq2390S Firmware, Qualcomm, Inc. Cq8750M Firmware, Qualcomm, Inc. Sm7675 Firmware, Qualcomm, Inc. Sm7675P Firmware, Qualcomm, Inc. Sm7750P Firmware, Qualcomm, Inc. Sm8475P Firmware, Qualcomm, Inc. Sm8550P Firmware, Qualcomm, Inc. Sm8635 Firmware
|
NVD | |||
|
CVE-2026-25272Memory Corruption when processing camera CRE driver operations with improper handling of buffer limits during hardware update preparation.
From the advisoryMemory Corruption when processing camera CRE driver operations with improper handling of buffer limits during hardware update preparation. Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H AffectsQualcomm, Inc.Qualcomm, Inc. SnapdragonQualcomm, Inc. Snapdragon G1 Gen 2 Gaming Platform FirmwareQualcomm, Inc. Cologne FirmwareQualcomm, Inc. Cq2390M FirmwareQualcomm, Inc. Cq2390S FirmwareQualcomm, Inc. Cq8750M FirmwareQualcomm, Inc. Sm7675 FirmwareQualcomm, Inc. Sm7675P FirmwareQualcomm, Inc. Sm7750P FirmwareQualcomm, Inc. Sm8475P FirmwareQualcomm, Inc. Sm8550P FirmwareQualcomm, Inc. Sm8635 Firmware
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| Medium | 6.7 | CVE-2026-25270 |
Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver.
Qualcomm, Inc.Qualcomm, Inc. Snapdragon, Qualcomm, Inc. Snapdragon G1 Gen 2 Gaming Platform Firmware, Qualcomm, Inc. Cologne Firmware, Qualcomm, Inc. Cq2390M Firmware, Qualcomm, Inc. Cq2390S Firmware, Qualcomm, Inc. Congo Firmware, Qualcomm, Inc. Sc8380Xp Firmware, Qualcomm, Inc. Snapdragon 8 Gen1 5G Firmware, Qualcomm, Inc. Snapdragon 662 Mobile Platform Firmware, Qualcomm, Inc. Snapdragon 865 5G Mobile Platform Firmware, Qualcomm, Inc. Sdr753 Firmware, Qualcomm, Inc. Sm4850 Firmware
|
NVD | |||
|
CVE-2026-25270Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver.
From the advisoryMemory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver. Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H AffectsQualcomm, Inc.Qualcomm, Inc. SnapdragonQualcomm, Inc. Snapdragon G1 Gen 2 Gaming Platform FirmwareQualcomm, Inc. Cologne FirmwareQualcomm, Inc. Cq2390M FirmwareQualcomm, Inc. Cq2390S FirmwareQualcomm, Inc. Congo FirmwareQualcomm, Inc. Sc8380Xp FirmwareQualcomm, Inc. Snapdragon 8 Gen1 5G FirmwareQualcomm, Inc. Snapdragon 662 Mobile Platform FirmwareQualcomm, Inc. Snapdragon 865 5G Mobile Platform FirmwareQualcomm, Inc. Sdr753 FirmwareQualcomm, Inc. Sm4850 Firmware
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| Medium | 6.7 | CVE-2026-25269 |
Memory corruption when processing camera requests with excessive batch and IO buffer configurations exceeds allocated memory size.
Qualcomm, Inc.Qualcomm, Inc. Snapdragon, Qualcomm, Inc. Snapdragon G1 Gen 2 Gaming Platform Firmware, Qualcomm, Inc. Cologne Firmware, Qualcomm, Inc. Cq2390M Firmware, Qualcomm, Inc. Cq2390S Firmware, Qualcomm, Inc. Cq8750M Firmware, Qualcomm, Inc. Cq8845S Firmware, Qualcomm, Inc. Cq8850Ns Firmware, Qualcomm, Inc. Fastconnect 6200 Firmware, Qualcomm, Inc. Fastconnect 6700 Firmware, Qualcomm, Inc. Fastconnect 6900 Firmware, Qualcomm, Inc. Fastconnect 7800 Firmware
|
NVD | |||
|
CVE-2026-25269Memory corruption when processing camera requests with excessive batch and IO buffer configurations exceeds allocated memory size.
From the advisoryMemory corruption when processing camera requests with excessive batch and IO buffer configurations exceeds allocated memory size. Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H AffectsQualcomm, Inc.Qualcomm, Inc. SnapdragonQualcomm, Inc. Snapdragon G1 Gen 2 Gaming Platform FirmwareQualcomm, Inc. Cologne FirmwareQualcomm, Inc. Cq2390M FirmwareQualcomm, Inc. Cq2390S FirmwareQualcomm, Inc. Cq8750M FirmwareQualcomm, Inc. Cq8845S FirmwareQualcomm, Inc. Cq8850Ns FirmwareQualcomm, Inc. Fastconnect 6200 FirmwareQualcomm, Inc. Fastconnect 6700 FirmwareQualcomm, Inc. Fastconnect 6900 FirmwareQualcomm, Inc. Fastconnect 7800 Firmware
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| High | 7.8 | CVE-2026-25267 |
Memory corruption when non-secure loader rewrites page tables before secure memory initialization.
Qualcomm, Inc.Qualcomm, Inc. Snapdragon, Qualcomm, Inc. Qca6698Au Firmware, Qualcomm, Inc. Qca6797Aq Firmware, Qualcomm, Inc. Qcc710 Firmware, Qualcomm, Inc. Qcm2290 Firmware, Qualcomm, Inc. Qcm4290 Firmware, Qualcomm, Inc. Qcm4325 Firmware, Qualcomm, Inc. Qcm4490 Firmware, Qualcomm, Inc. Qcm5430 Firmware, Qualcomm, Inc. Qcm6125 Firmware, Qualcomm, Inc. Qcm6490 Firmware, Qualcomm, Inc. Qcn9011 Firmware
|
NVD | |||
|
CVE-2026-25267Memory corruption when non-secure loader rewrites page tables before secure memory initialization.
From the advisoryMemory corruption when non-secure loader rewrites page tables before secure memory initialization. Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H AffectsQualcomm, Inc.Qualcomm, Inc. SnapdragonQualcomm, Inc. Qca6698Au FirmwareQualcomm, Inc. Qca6797Aq FirmwareQualcomm, Inc. Qcc710 FirmwareQualcomm, Inc. Qcm2290 FirmwareQualcomm, Inc. Qcm4290 FirmwareQualcomm, Inc. Qcm4325 FirmwareQualcomm, Inc. Qcm4490 FirmwareQualcomm, Inc. Qcm5430 FirmwareQualcomm, Inc. Qcm6125 FirmwareQualcomm, Inc. Qcm6490 FirmwareQualcomm, Inc. Qcn9011 Firmware
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| Medium | 6.6 | CVE-2026-25263 |
Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters.
Qualcomm, Inc.Qualcomm, Inc. Snapdragon, Qualcomm, Inc. Snapdragon G1 Gen 2 Gaming Platform Firmware, Qualcomm, Inc. 5G Fixed Wireless Access Platform Firmware, Qualcomm, Inc. 9205 Lte Modem Firmware, Qualcomm, Inc. 9205S Modem Firmware, Qualcomm, Inc. Aqt1000 Firmware, Qualcomm, Inc. Snapdragon 8C Compute Platform (Sc8180Xp-Ad) Firmware, Qualcomm, Inc. Snapdragon 8Cx Compute Platform Firmware, Qualcomm, Inc. Snapdragon 8Cx Compute Platform "Poipu Pro" Firmware, Qualcomm, Inc. Snapdragon 8Cx Gen 2 5G Compute Platform Firmware, Qualcomm, Inc. Snapdragon 8Cx Gen 2 5G Compute Platform "Poipu Pro" Firmware, Qualcomm, Inc. Snapdragon Auto 5G Modem-Rf Firmware
|
NVD | |||
|
CVE-2026-25263Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters.
From the advisoryMemory corruption while processing IOCTL command called from user space to the kernel with invalid parameters. Impact if exploitedConfidentialityLow IntegrityHigh AvailabilityLow
How it is exploited
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:L AffectsQualcomm, Inc.Qualcomm, Inc. SnapdragonQualcomm, Inc. Snapdragon G1 Gen 2 Gaming Platform FirmwareQualcomm, Inc. 5G Fixed Wireless Access Platform FirmwareQualcomm, Inc. 9205 Lte Modem FirmwareQualcomm, Inc. 9205S Modem FirmwareQualcomm, Inc. Aqt1000 FirmwareQualcomm, Inc. Snapdragon 8C Compute Platform (Sc8180Xp-Ad) FirmwareQualcomm, Inc. Snapdragon 8Cx Compute Platform FirmwareQualcomm, Inc. Snapdragon 8Cx Compute Platform "Poipu Pro" FirmwareQualcomm, Inc. Snapdragon 8Cx Gen 2 5G Compute Platform FirmwareQualcomm, Inc. Snapdragon 8Cx Gen 2 5G Compute Platform "Poipu Pro" FirmwareQualcomm, Inc. Snapdragon Auto 5G Modem-Rf Firmware
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||