Vulnerability feed
CVE and vendor PSIRT advisories from 13 sources, last 30 days. Updated hourly, last run
| Expand | Severity |
Score |
Advisory |
Title |
Source |
Flags |
Published |
|---|---|---|---|---|---|---|---|
| High | 7.8 | CVE-2026-57554 |
Memory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC invocations.
Qualcomm, Inc.Qualcomm, Inc. Snapdragon, Qualcomm, Inc. Snapdragon G1 Gen 2 Gaming Platform Firmware, Qualcomm, Inc. Sm7675 Firmware, Qualcomm, Inc. Ar8035 Firmware, Qualcomm, Inc. Ar8031 Firmware, Qualcomm, Inc. Csra6620 Firmware, Qualcomm, Inc. Csra6640 Firmware, Qualcomm, Inc. Sm7435P Firmware, Qualcomm, Inc. Sm7525 Firmware, Qualcomm, Inc. Sm7550 Firmware, Qualcomm, Inc. Sm7550P Firmware, Qualcomm, Inc. Sm7635P Firmware
|
NVD | |||
|
CVE-2026-57554Memory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC invocations.
From the advisoryMemory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC invocations. Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H AffectsQualcomm, Inc.Qualcomm, Inc. SnapdragonQualcomm, Inc. Snapdragon G1 Gen 2 Gaming Platform FirmwareQualcomm, Inc. Sm7675 FirmwareQualcomm, Inc. Ar8035 FirmwareQualcomm, Inc. Ar8031 FirmwareQualcomm, Inc. Csra6620 FirmwareQualcomm, Inc. Csra6640 FirmwareQualcomm, Inc. Sm7435P FirmwareQualcomm, Inc. Sm7525 FirmwareQualcomm, Inc. Sm7550 FirmwareQualcomm, Inc. Sm7550P FirmwareQualcomm, Inc. Sm7635P Firmware
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| High | 7.8 | CVE-2026-57545 |
Memory corruption when processing draw objects of incorrect type during graphics command list execution.
Qualcomm, Inc.Qualcomm, Inc. Snapdragon, Qualcomm, Inc. Snapdragon G1 Gen 2 Gaming Platform Firmware, Qualcomm, Inc. Cologne Firmware, Qualcomm, Inc. Cq2390M Firmware, Qualcomm, Inc. Cq2390S Firmware, Qualcomm, Inc. Cq8750M Firmware, Qualcomm, Inc. Cq8845S Firmware, Qualcomm, Inc. Congo Firmware, Qualcomm, Inc. Ar8031 Firmware, Qualcomm, Inc. Cq7790 Firmware, Qualcomm, Inc. Cq7790M Firmware, Qualcomm, Inc. Cq8725S Firmware
|
NVD | |||
|
CVE-2026-57545Memory corruption when processing draw objects of incorrect type during graphics command list execution.
From the advisoryMemory corruption when processing draw objects of incorrect type during graphics command list execution. Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H AffectsQualcomm, Inc.Qualcomm, Inc. SnapdragonQualcomm, Inc. Snapdragon G1 Gen 2 Gaming Platform FirmwareQualcomm, Inc. Cologne FirmwareQualcomm, Inc. Cq2390M FirmwareQualcomm, Inc. Cq2390S FirmwareQualcomm, Inc. Cq8750M FirmwareQualcomm, Inc. Cq8845S FirmwareQualcomm, Inc. Congo FirmwareQualcomm, Inc. Ar8031 FirmwareQualcomm, Inc. Cq7790 FirmwareQualcomm, Inc. Cq7790M FirmwareQualcomm, Inc. Cq8725S Firmware
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| High | 7.1 | CVE-2026-25302 |
Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed.
Qualcomm, Inc.Qualcomm, Inc. Snapdragon, Qualcomm, Inc. Snapdragon G1 Gen 2 Gaming Platform Firmware, Qualcomm, Inc. Cologne Firmware, Qualcomm, Inc. Cq2390M Firmware, Qualcomm, Inc. Qmp2001 Firmware, Qualcomm, Inc. Xrv9209 Firmware, Qualcomm, Inc. Ar8035 Firmware, Qualcomm, Inc. Qmx82L Firmware, Qualcomm, Inc. Qmx85L Firmware, Qualcomm, Inc. Qna715 Firmware, Qualcomm, Inc. Qpa1083Bd Firmware, Qualcomm, Inc. Qpa1086Bd Firmware
|
NVD | |||
|
CVE-2026-25302Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed.
From the advisoryCryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed. Impact if exploitedConfidentialityHigh IntegrityNone AvailabilityHigh
How it is exploited
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H AffectsQualcomm, Inc.Qualcomm, Inc. SnapdragonQualcomm, Inc. Snapdragon G1 Gen 2 Gaming Platform FirmwareQualcomm, Inc. Cologne FirmwareQualcomm, Inc. Cq2390M FirmwareQualcomm, Inc. Qmp2001 FirmwareQualcomm, Inc. Xrv9209 FirmwareQualcomm, Inc. Ar8035 FirmwareQualcomm, Inc. Qmx82L FirmwareQualcomm, Inc. Qmx85L FirmwareQualcomm, Inc. Qna715 FirmwareQualcomm, Inc. Qpa1083Bd FirmwareQualcomm, Inc. Qpa1086Bd Firmware
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| Medium | 6.7 | CVE-2026-25272 |
Memory Corruption when processing camera CRE driver operations with improper handling of buffer limits during hardware update preparation.
Qualcomm, Inc.Qualcomm, Inc. Snapdragon, Qualcomm, Inc. Snapdragon G1 Gen 2 Gaming Platform Firmware, Qualcomm, Inc. Cologne Firmware, Qualcomm, Inc. Cq2390M Firmware, Qualcomm, Inc. Cq2390S Firmware, Qualcomm, Inc. Cq8750M Firmware, Qualcomm, Inc. Sm7675 Firmware, Qualcomm, Inc. Sm7675P Firmware, Qualcomm, Inc. Sm7750P Firmware, Qualcomm, Inc. Sm8475P Firmware, Qualcomm, Inc. Sm8550P Firmware, Qualcomm, Inc. Sm8635 Firmware
|
NVD | |||
|
CVE-2026-25272Memory Corruption when processing camera CRE driver operations with improper handling of buffer limits during hardware update preparation.
From the advisoryMemory Corruption when processing camera CRE driver operations with improper handling of buffer limits during hardware update preparation. Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H AffectsQualcomm, Inc.Qualcomm, Inc. SnapdragonQualcomm, Inc. Snapdragon G1 Gen 2 Gaming Platform FirmwareQualcomm, Inc. Cologne FirmwareQualcomm, Inc. Cq2390M FirmwareQualcomm, Inc. Cq2390S FirmwareQualcomm, Inc. Cq8750M FirmwareQualcomm, Inc. Sm7675 FirmwareQualcomm, Inc. Sm7675P FirmwareQualcomm, Inc. Sm7750P FirmwareQualcomm, Inc. Sm8475P FirmwareQualcomm, Inc. Sm8550P FirmwareQualcomm, Inc. Sm8635 Firmware
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| Medium | 6.7 | CVE-2026-25270 |
Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver.
Qualcomm, Inc.Qualcomm, Inc. Snapdragon, Qualcomm, Inc. Snapdragon G1 Gen 2 Gaming Platform Firmware, Qualcomm, Inc. Cologne Firmware, Qualcomm, Inc. Cq2390M Firmware, Qualcomm, Inc. Cq2390S Firmware, Qualcomm, Inc. Congo Firmware, Qualcomm, Inc. Sc8380Xp Firmware, Qualcomm, Inc. Snapdragon 8 Gen1 5G Firmware, Qualcomm, Inc. Snapdragon 662 Mobile Platform Firmware, Qualcomm, Inc. Snapdragon 865 5G Mobile Platform Firmware, Qualcomm, Inc. Sdr753 Firmware, Qualcomm, Inc. Sm4850 Firmware
|
NVD | |||
|
CVE-2026-25270Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver.
From the advisoryMemory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver. Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H AffectsQualcomm, Inc.Qualcomm, Inc. SnapdragonQualcomm, Inc. Snapdragon G1 Gen 2 Gaming Platform FirmwareQualcomm, Inc. Cologne FirmwareQualcomm, Inc. Cq2390M FirmwareQualcomm, Inc. Cq2390S FirmwareQualcomm, Inc. Congo FirmwareQualcomm, Inc. Sc8380Xp FirmwareQualcomm, Inc. Snapdragon 8 Gen1 5G FirmwareQualcomm, Inc. Snapdragon 662 Mobile Platform FirmwareQualcomm, Inc. Snapdragon 865 5G Mobile Platform FirmwareQualcomm, Inc. Sdr753 FirmwareQualcomm, Inc. Sm4850 Firmware
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| Medium | 6.7 | CVE-2026-25269 |
Memory corruption when processing camera requests with excessive batch and IO buffer configurations exceeds allocated memory size.
Qualcomm, Inc.Qualcomm, Inc. Snapdragon, Qualcomm, Inc. Snapdragon G1 Gen 2 Gaming Platform Firmware, Qualcomm, Inc. Cologne Firmware, Qualcomm, Inc. Cq2390M Firmware, Qualcomm, Inc. Cq2390S Firmware, Qualcomm, Inc. Cq8750M Firmware, Qualcomm, Inc. Cq8845S Firmware, Qualcomm, Inc. Cq8850Ns Firmware, Qualcomm, Inc. Fastconnect 6200 Firmware, Qualcomm, Inc. Fastconnect 6700 Firmware, Qualcomm, Inc. Fastconnect 6900 Firmware, Qualcomm, Inc. Fastconnect 7800 Firmware
|
NVD | |||
|
CVE-2026-25269Memory corruption when processing camera requests with excessive batch and IO buffer configurations exceeds allocated memory size.
From the advisoryMemory corruption when processing camera requests with excessive batch and IO buffer configurations exceeds allocated memory size. Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H AffectsQualcomm, Inc.Qualcomm, Inc. SnapdragonQualcomm, Inc. Snapdragon G1 Gen 2 Gaming Platform FirmwareQualcomm, Inc. Cologne FirmwareQualcomm, Inc. Cq2390M FirmwareQualcomm, Inc. Cq2390S FirmwareQualcomm, Inc. Cq8750M FirmwareQualcomm, Inc. Cq8845S FirmwareQualcomm, Inc. Cq8850Ns FirmwareQualcomm, Inc. Fastconnect 6200 FirmwareQualcomm, Inc. Fastconnect 6700 FirmwareQualcomm, Inc. Fastconnect 6900 FirmwareQualcomm, Inc. Fastconnect 7800 Firmware
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| Medium | 6.6 | CVE-2026-25263 |
Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters.
Qualcomm, Inc.Qualcomm, Inc. Snapdragon, Qualcomm, Inc. Snapdragon G1 Gen 2 Gaming Platform Firmware, Qualcomm, Inc. 5G Fixed Wireless Access Platform Firmware, Qualcomm, Inc. 9205 Lte Modem Firmware, Qualcomm, Inc. 9205S Modem Firmware, Qualcomm, Inc. Aqt1000 Firmware, Qualcomm, Inc. Snapdragon 8C Compute Platform (Sc8180Xp-Ad) Firmware, Qualcomm, Inc. Snapdragon 8Cx Compute Platform Firmware, Qualcomm, Inc. Snapdragon 8Cx Compute Platform "Poipu Pro" Firmware, Qualcomm, Inc. Snapdragon 8Cx Gen 2 5G Compute Platform Firmware, Qualcomm, Inc. Snapdragon 8Cx Gen 2 5G Compute Platform "Poipu Pro" Firmware, Qualcomm, Inc. Snapdragon Auto 5G Modem-Rf Firmware
|
NVD | |||
|
CVE-2026-25263Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters.
From the advisoryMemory corruption while processing IOCTL command called from user space to the kernel with invalid parameters. Impact if exploitedConfidentialityLow IntegrityHigh AvailabilityLow
How it is exploited
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:L AffectsQualcomm, Inc.Qualcomm, Inc. SnapdragonQualcomm, Inc. Snapdragon G1 Gen 2 Gaming Platform FirmwareQualcomm, Inc. 5G Fixed Wireless Access Platform FirmwareQualcomm, Inc. 9205 Lte Modem FirmwareQualcomm, Inc. 9205S Modem FirmwareQualcomm, Inc. Aqt1000 FirmwareQualcomm, Inc. Snapdragon 8C Compute Platform (Sc8180Xp-Ad) FirmwareQualcomm, Inc. Snapdragon 8Cx Compute Platform FirmwareQualcomm, Inc. Snapdragon 8Cx Compute Platform "Poipu Pro" FirmwareQualcomm, Inc. Snapdragon 8Cx Gen 2 5G Compute Platform FirmwareQualcomm, Inc. Snapdragon 8Cx Gen 2 5G Compute Platform "Poipu Pro" FirmwareQualcomm, Inc. Snapdragon Auto 5G Modem-Rf Firmware
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||