Qualcomm Cologne Firmware vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Qualcomm Cologne Firmware: 67 record(s), with affected versions and fixes.cpe:2.3:o:qualcomm:cologne_firmware
CVE-2026-21378
High · 7.8
CWE-126 Apr 6, 2026
Buffer Over-read in Camera
Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver.
CVE-2026-21376
High · 7.8
CWE-126 Apr 6, 2026
Buffer Over-read in Camera
Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver.
CVE-2026-21375
High · 7.8
CWE-126 Apr 6, 2026
Buffer Over-read in Camera
Memory Corruption when accessing an output buffer without validating its size during IOCTL processing.
CVE-2026-21374
High · 7.8
CWE-126 Apr 6, 2026
Buffer Over-read in Camera
Memory Corruption when processing auxiliary sensor input/output control commands with insufficient buffer size validation.
CVE-2026-21373
High · 7.8
CWE-126 Apr 6, 2026
Buffer Over-read in Camera
Memory Corruption when accessing an output buffer without validating its size during IOCTL processing.
CVE-2026-21372
High · 7.8
CWE-122 Apr 6, 2026
Heap-Based Buffer Overflow in Power Management IC
Memory Corruption when sending IOCTL requests with invalid buffer sizes during memcpy operations.
CVE-2026-21371
High · 7.8
CWE-126 Apr 6, 2026
Buffer Over-read in WinBlast Driver
Memory Corruption when retrieving output buffer with insufficient size validation.
CVE-2026-21367
High · 7.5
CWE-126 Apr 6, 2026
Buffer Over-read in WLAN Firmware
Transient DOS when processing nonstandard FILS Discovery Frames with out-of-range action sizes during initial scans.
CVE-2025-47390
High · 7.8
CWE-126 Apr 6, 2026
Buffer Over-read in Camera
Memory corruption while preprocessing IOCTL request in JPEG driver.
CVE-2025-47389
High · 7.8
CWE-120 Apr 6, 2026
Buffer Copy Without Checking Size of Input in Automotive Platform
Memory corruption when buffer copy operation fails due to integer overflow during attestation report generation.
CVE-2025-59603
High · 7.8
CWE-787 Mar 2, 2026
Out-of-bounds Write in Computer Vision
Memory Corruption when processing invalid user address with nonstandard buffer address.
CVE-2025-47378
High · 7.1
CWE-497 Mar 2, 2026
Exposure of Sensitive System Information to an Unauthorized Control Sphere in HLOS
Cryptographic Issue when a shared VM reference allows HLOS to boot loader and access cert chain.
CVE-2025-47373
High · 7.8
CWE-787 Mar 2, 2026
Out-of-bounds Write in Automotive
Memory Corruption when accessing buffers with invalid length during TA invocation.
CVE-2025-47402
Medium · 6.5
CWE-125 Feb 2, 2026
Buffer Over-read in WLAN Firmware
Transient DOS when processing a received frame with an excessively large authentication information element.
CVE-2025-47399
High · 7.8
CWE-120 Feb 2, 2026
Buffer Copy Without Checking Size of Input in Camera
Memory Corruption while processing IOCTL call to update sensor property settings with invalid input parameters.
CVE-2025-47356
High · 7.8
CWE-415 Jan 7, 2026
Double Free in Video
Memory Corruption when multiple threads concurrently access and modify shared resources.
CVE-2025-47343
High · 7.8
CWE-822 Jan 7, 2026
Untrusted Pointer Dereference in Video
Memory corruption while processing a video session to set video parameters.