Qualcomm Sm4850 Firmware vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Qualcomm Sm4850 Firmware: 15 record(s), with affected versions and fixes.cpe:2.3:o:qualcomm:sm4850_firmware
CVE-2026-57545
High · 7.8
CWE-822 Oct 6, 2026
Untrusted Pointer Dereference in Graphics
Memory corruption when processing draw objects of incorrect type during graphics command list execution.
CVE-2026-25302
High · 7.1
CWE-347 Oct 6, 2026
Improper Verification of Cryptographic Signature in Boot
Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed.
CVE-2026-25270
Medium · 6.7
CWE-787 Oct 6, 2026
Out-of-bounds Write in Camera Driver
Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver.
CVE-2026-25275
High · 7.5
CWE-126 Sep 17, 2026
Buffer Over-read in WLAN Firmware
Transient DOS when processing authentication frames with invalid FILS information element header lengths.
CVE-2026-25292
High · 7.6
CWE-1286 Aug 4, 2026
Improper Validation of Syntactic Correctness of Input in Automotive Linux OS
Memory Corruption when processing untrusted user input in the fastboot command handler for audio framework configuration.
CVE-2026-24092
High · 7.2
CWE-1286 Jun 1, 2026
Improper Validation of Syntactic Correctness of Input in Display
Memory Corruption when processing fastboot commands to set display mode.
CVE-2026-24091
High · 7.2
CWE-1286 Jun 1, 2026
Improper Validation of Syntactic Correctness of Input in Display
Memory corruption while processing fastboot commands with improperly formatted input.
CVE-2026-24090
High · 7.1
CWE-306 Jun 1, 2026
Missing Authentication for Critical Function in HLOS
Cryptographic issue while processing partition table entries allows unauthorized modification of boot flow.
CVE-2026-24089
High · 7.2
CWE-1286 Jun 1, 2026
Improper Validation of Syntactic Correctness of Input in Kernel
Memory corruption while processing fastboot commands with invalid input.
CVE-2026-24088
High · 8.2
CWE-306 Jun 1, 2026
Missing Authentication for Critical Function in Boot
Cryptographic Issue while processing a specific partition which allows unauthorized write access to load a customized bootloader.
CVE-2026-24087
High · 7.2
CWE-1286 Jun 1, 2026
Improper Validation of Syntactic Correctness of Input in Kernel
Memory corruption while processing fastboot OEM commands.
CVE-2026-24085
High · 7.2
CWE-121 Jun 1, 2026
Stack-based Buffer Overflow in Display
Memory Corruption when processing display command line information due to improper initialization of a variable.
CVE-2025-59610
Medium · 6.4
CWE-367 Jun 1, 2026
Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver
Memory Corruption when processing IOCTL requests with mismatched API versions due to concurrent modification of user-space buffer.
CVE-2025-59606
High · 7.8
CWE-476 Jun 1, 2026
NULL Pointer Dereference in HLOS
Memory Corruption when writing to invalid memory locations occurs due to heap memory exhaustion during secure data initialization.
CVE-2025-59604
High · 7.8
CWE-476 Jun 1, 2026
NULL Pointer Dereference in SPS Applications
Memory Corruption when running a memory copy operation due to invalid writes caused by a null pointer.