Qualcomm Sd 8 Gen1 5g Firmware vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Qualcomm Sd 8 Gen1 5g Firmware: 26 record(s), with affected versions and fixes.cpe:2.3:o:qualcomm:sd_8_gen1_5g_firmware
CVE-2026-24084
High · 7.5
CWE-1294 Aug 4, 2026
Insecure Security Identifier Mechanism in Multi-Mode Call Processor
Weak configuration when UE does not verify the consistency of its additional security capabilities with the replayed capabilities.
CVE-2026-24079
High · 8.1
CWE-306 Aug 4, 2026
Missing Authentication for Critical Function in Data Modem
Cryptographic Issue while processing registration requests with malformed or missing authentication parameters.
CVE-2026-24078
Medium · 6.5
CWE-359 Aug 4, 2026
Exposure of Private Personal Information to an Unauthorized Actor in Data Modem
Information Disclosure when IPSec negotiation fails or is not established properly during NG-eCall SIP signaling.
CVE-2026-24077
Medium · 6.5
CWE-191 Aug 4, 2026
Integer Underflow (Wrap or Wraparound) in WLAN Host
Information Disclosure when processing wireless network channel switch information with improperly formatted length fields.
CVE-2026-21384
Medium · 5.3
CWE-787 Jul 6, 2026
Out-of-bounds Write in Camera Driver
Memory Corruption when updating prepared commands with invalid port indices based on user space input exceeds supported read client limits.
CVE-2026-21370
Medium · 5.3
CWE-787 Jul 6, 2026
Out-of-bounds Write in Camera Driver
Memory Corruption when validating input batch size and buffer plane count exceeds maximum allowed values.
CVE-2026-21368
Medium · 5.3
CWE-787 Jul 6, 2026
Out-of-bounds Write in Camera Driver
Memory Corruption when parsing jpeg commands due to unaccounted extra writes to the buffer during validation checks.
CVE-2026-24091
High · 7.2
CWE-1286 Jun 1, 2026
Improper Validation of Syntactic Correctness of Input in Display
Memory corruption while processing fastboot commands with improperly formatted input.
CVE-2026-24088
High · 8.2
CWE-306 Jun 1, 2026
Missing Authentication for Critical Function in Boot
Cryptographic Issue while processing a specific partition which allows unauthorized write access to load a customized bootloader.
CVE-2026-24085
High · 7.2
CWE-121 Jun 1, 2026
Stack-based Buffer Overflow in Display
Memory Corruption when processing display command line information due to improper initialization of a variable.
CVE-2025-59610
Medium · 6.4
CWE-367 Jun 1, 2026
Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver
Memory Corruption when processing IOCTL requests with mismatched API versions due to concurrent modification of user-space buffer.
CVE-2025-59605
High · 7.8
CWE-787 Jun 1, 2026
Out-of-bounds Write in HLOS
Memory Corruption when processing device identifier strings that exceed the expected maximum length.
CVE-2025-59604
High · 7.8
CWE-476 Jun 1, 2026
NULL Pointer Dereference in SPS Applications
Memory Corruption when running a memory copy operation due to invalid writes caused by a null pointer.
CVE-2025-47403
High · 7.5
CWE-125 May 4, 2026
Buffer Over-read in WLAN Firmware
Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming.
CVE-2026-21367
High · 7.5
CWE-126 Apr 6, 2026
Buffer Over-read in WLAN Firmware
Transient DOS when processing nonstandard FILS Discovery Frames with out-of-range action sizes during initial scans.
CVE-2025-47392
High · 8.8
CWE-190 Apr 6, 2026
Integer Overflow or Wraparound in GPS
Memory corruption when decoding corrupted satellite data files with invalid signature offsets.
CVE-2025-47391
High · 7.8
CWE-121 Apr 6, 2026
Stack-based Buffer Overflow in Camera Driver
Memory corruption while processing a frame request from user.
CVE-2025-47397
High · 7.8
CWE-401 Feb 2, 2026
Improper Release of Memory Before Removing Last Reference in Graphics
Memory Corruption when initiating GPU memory mapping using scatter-gather lists due to unchecked IOMMU mapping errors.
CVE-2025-47366
High · 7.8
CWE-749 Feb 2, 2026
Exposed Dangerous Method or Function in HLOS
Cryptographic issue when a Trusted Zone with outdated code is triggered by a HLOS providing incorrect input.
CVE-2025-47369
Medium · 5.5
CWE-200 Jan 7, 2026
Information Exposure in Computer Vision
Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID.
CVE-2025-47334
Medium · 6.7
CWE-120 Jan 7, 2026
Buffer Copy Without Checking Size of Input in Camera Driver
Memory corruption while processing shared command buffer packet between camera userspace and kernel.
CVE-2025-27070
High · 7.8
CWE-787 Nov 4, 2025
Out-of-bounds Write in Windows Compute
Memory corruption while performing encryption and decryption commands.
CVE-2025-27054
High · 7.8
CWE-787 Oct 9, 2025
Out-of-bounds Write in Display
Memory corruption while processing a malformed license file during reboot.
CVE-2025-27053
High · 7.8
CWE-131 Oct 9, 2025
Incorrect Calculation of Buffer Size in HLOS
Memory corruption during PlayReady APP usecase while processing TA commands.
CVE-2023-33106
High · 7.8
KEV High · 49 CWE-119 Dec 5, 2023
Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability
Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.