Qualcomm Wcd9375 Firmware vulnerabilities

CVE-2026-57559 High · 7.8 CWE-416 Oct 6, 2026

Use After Free in DSP_Services

Memory corruption while processing service requests.

CVE-2026-57555 High · 7.8 CWE-416 Oct 6, 2026

Use After Free in DSP Service

Memory Corruption when executing system service routines due to improper handling of user input buffers.

CVE-2026-57554 High · 7.8 CWE-416 Oct 6, 2026

Use After Free in DSP Service

Memory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC invocations.

CVE-2026-57545 High · 7.8 CWE-822 Oct 6, 2026

Untrusted Pointer Dereference in Graphics

Memory corruption when processing draw objects of incorrect type during graphics command list execution.

CVE-2026-57537 High · 7.8 CWE-416 Oct 6, 2026

Use After Free in DSP Service

Memory Corruption when accessing and modifying geographic mapping data concurrently without proper synchronization.

CVE-2026-25302 High · 7.1 CWE-347 Oct 6, 2026

Improper Verification of Cryptographic Signature in Boot

Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed.

CVE-2026-25291 High · 7.8 CWE-416 Oct 6, 2026

Use After Free in Graphics

Memory corruption when performing concurrent operations on shared memory page lists due to lack of proper synchronization mechanisms.

CVE-2026-25274 Medium · 6.7 CWE-416 Oct 6, 2026

Use After Free in Windows WLAN Host

Memory Corruption when processing concurrent DMA buffer allocation and deallocation commands without proper synchronization.

CVE-2026-25273 Medium · 6.7 CWE-787 Oct 6, 2026

Out-of-bounds Write in Camera Driver

Memory Corruption when processing camera operations due to out-of-bounds write during driver updates.

CVE-2026-25272 Medium · 6.7 CWE-787 Oct 6, 2026

Out-of-bounds Write in Camera Driver

Memory Corruption when processing camera CRE driver operations with improper handling of buffer limits during hardware update preparation.

CVE-2026-25270 Medium · 6.7 CWE-787 Oct 6, 2026

Out-of-bounds Write in Camera Driver

Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver.

CVE-2026-25269 Medium · 6.7 CWE-787 Oct 6, 2026

Out-of-bounds Write in Camera Driver

Memory corruption when processing camera requests with excessive batch and IO buffer configurations exceeds allocated memory size.

CVE-2026-25267 High · 7.8 CWE-862 Oct 6, 2026

Missing Authorization in Core

Memory corruption when non-secure loader rewrites page tables before secure memory initialization.

CVE-2026-25263 Medium · 6.6 CWE-787 Oct 6, 2026

Out of Bounds write in Linux Camera

Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters.

CVE-2026-25294 High · 7.4 CWE-126 Sep 17, 2026

Buffer Over-read in WLAN Firmware

Transient DOS while parsing frame during channel usage.

CVE-2026-25280 High · 7.8 CWE-787 Sep 17, 2026

Out-of-bounds Write in DSP Service

Memory corruption when processing escape handling flow with insufficient user buffer sizes.

CVE-2026-25275 High · 7.5 CWE-126 Sep 17, 2026

Buffer Over-read in WLAN Firmware

Transient DOS when processing authentication frames with invalid FILS information element header lengths.

CVE-2026-25261 High · 7.8 CWE-822 Sep 17, 2026

Untrusted Pointer Dereference in Camera

Memory corruption while processing rear sensor IOCTL calls.

CVE-2026-24081 High · 7.4 CWE-126 Sep 17, 2026

Buffer Over-read in BT Controller

Transient DOS when processing a channel map with insufficient used channels and adaptive frequency hopping is fully enabled.

CVE-2026-24075 High · 7.0 CWE-126 Sep 17, 2026

Buffer Over-read in Qualcomm IPC

Memory Corruption when multiple threads issue concurrent IOCTL requests to the device control handler due to improper synchronization and race conditions.

CVE-2026-24074 High · 7.8 CWE-787 Sep 17, 2026

Out-of-bounds Write in Video

Memory Corruption when processing data with large offset and length values exceeds buffer limits during data copy operations.

CVE-2026-25292 High · 7.6 CWE-1286 Aug 4, 2026

Improper Validation of Syntactic Correctness of Input in Automotive Linux OS

Memory Corruption when processing untrusted user input in the fastboot command handler for audio framework configuration.

CVE-2026-25289 Critical · 9.6 CWE-121 Aug 4, 2026

Stack-based Buffer Overflow in WLAN Firmware

Memory Corruption when processing Device Capability Extended attributes in certain NAN Service Discovery Frames with invalid length values.

CVE-2026-24084 High · 7.5 CWE-1294 Aug 4, 2026

Insecure Security Identifier Mechanism in Multi-Mode Call Processor

Weak configuration when UE does not verify the consistency of its additional security capabilities with the replayed capabilities.

CVE-2026-24079 High · 8.1 CWE-306 Aug 4, 2026

Missing Authentication for Critical Function in Data Modem

Cryptographic Issue while processing registration requests with malformed or missing authentication parameters.