Qualcomm Sc8380xp Firmware vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Qualcomm Sc8380xp Firmware: 103 record(s), with affected versions and fixes.cpe:2.3:o:qualcomm:sc8380xp_firmware
CVE-2026-25266
High · 7.8
CWE-787 May 4, 2026
Exposed dangerous function in windows host
Memory corruption while processing IOCTL command when device is in power-save state.
CVE-2025-47408
High · 7.8
CWE-119 May 4, 2026
Untrusted Pointer Dereference in Power Optimization Firmware
Memory corruption when another driver calls an IOCTL with invalid input/output buffer.
CVE-2025-47407
High · 7.0
CWE-367 May 4, 2026
Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service
Memory corruption while creating a process on the digital signal processor due to allocation failure at the kernel level.
CVE-2025-47406
Medium · 5.5
CWE-125 May 4, 2026
Buffer Over-read in DSP Service
Information Disclosure while processing IOCTL handler callbacks without verifying buffer size.
CVE-2025-47405
High · 7.8
CWE-119 May 4, 2026
Untrusted Pointer Dereference in Camera
Memory corruption when processing camera sensor input/output control codes with invalid output buffers.
CVE-2025-47403
High · 7.5
CWE-125 May 4, 2026
Buffer Over-read in WLAN Firmware
Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming.
CVE-2025-47401
High · 7.5
CWE-125 May 4, 2026
Buffer Over-read in WLAN HAL
Transient DOS when processing target power rate tables during channel configuration.
CVE-2026-21382
High · 7.8
CWE-120 Apr 6, 2026
Buffer Copy Without Checking Size of Input in Power Management IC
Memory Corruption when handling power management requests with improperly sized input/output buffers.
CVE-2026-21381
High · 7.5
CWE-126 Apr 6, 2026
Buffer Over-read in WLAN Firmware
Transient DOS when receiving a service data frame with excessive length during device matching over a neighborhood awareness network protocol connection.
CVE-2026-21380
High · 7.8
CWE-416 Apr 6, 2026
Use After Free in DSP Service
Memory Corruption when using deprecated DMABUF IOCTL calls to manage video memory.
CVE-2026-21378
High · 7.8
CWE-126 Apr 6, 2026
Buffer Over-read in Camera
Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver.
CVE-2026-21376
High · 7.8
CWE-126 Apr 6, 2026
Buffer Over-read in Camera
Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver.
CVE-2026-21375
High · 7.8
CWE-126 Apr 6, 2026
Buffer Over-read in Camera
Memory Corruption when accessing an output buffer without validating its size during IOCTL processing.
CVE-2026-21374
High · 7.8
CWE-126 Apr 6, 2026
Buffer Over-read in Camera
Memory Corruption when processing auxiliary sensor input/output control commands with insufficient buffer size validation.
CVE-2026-21373
High · 7.8
CWE-126 Apr 6, 2026
Buffer Over-read in Camera
Memory Corruption when accessing an output buffer without validating its size during IOCTL processing.
CVE-2026-21371
High · 7.8
CWE-126 Apr 6, 2026
Buffer Over-read in WinBlast Driver
Memory Corruption when retrieving output buffer with insufficient size validation.
CVE-2026-21367
High · 7.5
CWE-126 Apr 6, 2026
Buffer Over-read in WLAN Firmware
Transient DOS when processing nonstandard FILS Discovery Frames with out-of-range action sizes during initial scans.
CVE-2025-47390
High · 7.8
CWE-126 Apr 6, 2026
Buffer Over-read in Camera
Memory corruption while preprocessing IOCTL request in JPEG driver.
CVE-2025-47389
High · 7.8
CWE-120 Apr 6, 2026
Buffer Copy Without Checking Size of Input in Automotive Platform
Memory corruption when buffer copy operation fails due to integer overflow during attestation report generation.
CVE-2026-21385
High · 7.8
KEV High · 58 Public exploit CWE-190 Mar 2, 2026
Qualcomm Multiple Chipsets Memory Corruption Vulnerability
Memory corruption while using alignments for memory allocation.
CVE-2025-59603
High · 7.8
CWE-787 Mar 2, 2026
Out-of-bounds Write in Computer Vision
Memory Corruption when processing invalid user address with nonstandard buffer address.
CVE-2025-59600
High · 7.8
CWE-126 Mar 2, 2026
Buffer Over-read in Graphics
Memory Corruption when adding user-supplied data without checking available buffer space.
CVE-2025-47373
High · 7.8
CWE-787 Mar 2, 2026
Out-of-bounds Write in Automotive
Memory Corruption when accessing buffers with invalid length during TA invocation.
CVE-2025-47366
High · 7.8
CWE-749 Feb 2, 2026
Exposed Dangerous Method or Function in HLOS
Cryptographic issue when a Trusted Zone with outdated code is triggered by a HLOS providing incorrect input.
CVE-2025-47359
High · 7.8
CWE-416 Feb 2, 2026
Use After Free in Secure Processor
Memory Corruption when multiple threads simultaneously access a memory free API.