Qualcomm Srv1l Firmware vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Qualcomm Srv1l Firmware: 27 record(s), with affected versions and fixes.cpe:2.3:o:qualcomm:srv1l_firmware
CVE-2026-25302
High · 7.1
CWE-347 Oct 6, 2026
Improper Verification of Cryptographic Signature in Boot
Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed.
CVE-2026-25278
High · 7.0
CWE-367 Sep 17, 2026
Time-of-check Time-of-use (TOCTOU) Race Condition in Automotive Software platform based on QNX
Memory Corruption when processing I2C transfer requests due to a race condition between memory allocation and data copying.
CVE-2026-21366
High · 7.8
CWE-190 Aug 4, 2026
Integer Overflow or Wraparound in Data Network Stack & Connectivity
Memory corruption while processing a packet with a size close to the maximum allowed value.
CVE-2025-59606
High · 7.8
CWE-476 Jun 1, 2026
NULL Pointer Dereference in HLOS
Memory Corruption when writing to invalid memory locations occurs due to heap memory exhaustion during secure data initialization.
CVE-2025-59604
High · 7.8
CWE-476 Jun 1, 2026
NULL Pointer Dereference in SPS Applications
Memory Corruption when running a memory copy operation due to invalid writes caused by a null pointer.
CVE-2025-47389
High · 7.8
CWE-120 Apr 6, 2026
Buffer Copy Without Checking Size of Input in Automotive Platform
Memory corruption when buffer copy operation fails due to integer overflow during attestation report generation.
CVE-2025-47373
High · 7.8
CWE-787 Mar 2, 2026
Out-of-bounds Write in Automotive
Memory Corruption when accessing buffers with invalid length during TA invocation.
CVE-2025-47366
High · 7.8
CWE-749 Feb 2, 2026
Exposed Dangerous Method or Function in HLOS
Cryptographic issue when a Trusted Zone with outdated code is triggered by a HLOS providing incorrect input.
CVE-2025-47364
High · 7.8
CWE-190 Feb 2, 2026
Integer Overflow or Wraparound in Automotive
Memory corruption while calculating offset from partition start point.
CVE-2025-47363
High · 7.8
CWE-190 Feb 2, 2026
Integer Overflow or Wraparound in Automotive
Memory corruption when calculating oversized partition sizes without proper checks.
CVE-2025-47348
High · 7.8
CWE-457 Jan 7, 2026
Use of Uninitialized Variable in HLOS
Memory corruption while processing identity credential operations in the trusted application.
CVE-2025-47346
High · 7.8
CWE-787 Jan 7, 2026
Out-of-bounds Write in HLOS
Memory corruption while processing a secure logging command in the trusted application.
CVE-2025-47345
High · 8.4
CWE-323 Jan 7, 2026
Reusing a Nonce, Key Pair in Encryption in Automotive Platform
Cryptographic issue may occur while encrypting license data.
CVE-2025-47339
High · 7.8
CWE-416 Jan 7, 2026
Use After Free in HLOS
Memory corruption while deinitializing a HDCP session.
CVE-2025-47382
High · 7.8
CWE-863 Dec 18, 2025
Incorrect Authorization in Boot
Memory corruption while loading an invalid firmware in boot loader.
CVE-2025-47372
High · 8.4
CWE-787 Dec 18, 2025
Buffer Copy Without Checking Size of Input in Boot
Memory Corruption when a corrupted ELF image with an oversized file size is read into a buffer without authentication.
CVE-2025-47323
High · 7.8
CWE-190 Dec 18, 2025
Integer Overflow or Wraparound in Audio
Memory corruption while routing GPR packets between user and root when handling large data packet.
CVE-2025-47319
Medium · 6.7
CWE-497 Dec 18, 2025
Exposure of Sensitive System Information to an Unauthorized Control Sphere in HLOS
Information disclosure while exposing internal TA-to-TA communication APIs to HLOS
CVE-2025-47365
High · 7.8
CWE-190 Nov 4, 2025
Integer Overflow or Wraparound in Automotive Platform
Memory corruption while processing large input data from a remote source via a communication interface.
CVE-2025-47362
Medium · 6.1
CWE-126 Nov 4, 2025
Buffer Over-read in Automotive Software platform based on QNX
Information disclosure while processing message from client with invalid payload.
CVE-2025-47361
High · 7.8
CWE-129 Nov 4, 2025
Improper Validation of Array Index in Automotive Software platform based on QNX
Memory corruption when triggering a subsystem crash with an out-of-range identifier.
CVE-2025-47360
High · 7.8
CWE-121 Nov 4, 2025
Stack-based Buffer Overflow in Automotive Software platform based on QNX
Memory corruption while processing client message during device management.
CVE-2025-47357
High · 7.8
CWE-306 Nov 4, 2025
Missing Authentication for Critical Function in SMSS
Information Disclosure when a user-level driver performs QFPROM read or write operations on Fuse regions.
CVE-2025-27070
High · 7.8
CWE-787 Nov 4, 2025
Out-of-bounds Write in Windows Compute
Memory corruption while performing encryption and decryption commands.
CVE-2025-47347
High · 7.8
CWE-121 Oct 9, 2025
Stack-based Buffer Overflow in Automotive Software platform based on QNX
Memory corruption while processing control commands in the virtual memory management interface.