Qualcomm Wcd9375 Firmware vulnerabilities

CVE-2026-24078 Medium · 6.5 CWE-359 Aug 4, 2026

Exposure of Private Personal Information to an Unauthorized Actor in Data Modem

Information Disclosure when IPSec negotiation fails or is not established properly during NG-eCall SIP signaling.

CVE-2026-24077 Medium · 6.5 CWE-191 Aug 4, 2026

Integer Underflow (Wrap or Wraparound) in WLAN Host

Information Disclosure when processing wireless network channel switch information with improperly formatted length fields.

CVE-2026-24076 Medium · 6.7 CWE-120 Aug 4, 2026

Buffer Copy Without Checking Size of Input in Bluetooth HOST

Memory Corruption when processing registry values with incorrect types using a direct query method.

CVE-2026-25268 High · 8.8 CWE-121 Jul 6, 2026

Stack-based Buffer Overflow in WLAN Host

Memory Corruption when processing invalid HT40 channel layouts during dynamic channel switching operations.

CVE-2026-21384 Medium · 5.3 CWE-787 Jul 6, 2026

Out-of-bounds Write in Camera Driver

Memory Corruption when updating prepared commands with invalid port indices based on user space input exceeds supported read client limits.

CVE-2026-21379 High · 7.8 CWE-126 Jul 6, 2026

Buffer Over-read in Windows Compute

Memory Corruption when allocating memory with sizes that exceed the maximum allowed value.

CVE-2026-21370 Medium · 5.3 CWE-787 Jul 6, 2026

Out-of-bounds Write in Camera Driver

Memory Corruption when validating input batch size and buffer plane count exceeds maximum allowed values.

CVE-2026-21369 Medium · 5.3 CWE-787 Jul 6, 2026

Out-of-bounds Write in Camera Driver

Memory Corruption when handling flash commands due to outdated LED count values being used after userspace modification.

CVE-2026-21368 Medium · 5.3 CWE-787 Jul 6, 2026

Out-of-bounds Write in Camera Driver

Memory Corruption when parsing jpeg commands due to unaccounted extra writes to the buffer during validation checks.

CVE-2025-59617 High · 7.3 CWE-416 Jul 6, 2026

Use After Free in Computer Vision

Memory Corruption when processing multiple IOCTL calls with the same buffer file descriptor input.

CVE-2025-59616 High · 7.8 CWE-416 Jul 6, 2026

Use After Free in Computer Vision

Memory Corruption when processing multiple IOCTL calls with the same buffer file descriptor input due to accessing already freed memory.

CVE-2025-59615 High · 7.8 CWE-416 Jul 6, 2026

Use After Free in Computer Vision

Memory Corruption when invoking device input/output control operations for mapping and unmapping persistent memory buffers due to improper synchronization.

CVE-2026-25277 High · 8.8 CWE-120 Jun 1, 2026

Buffer Copy Without Checking Size of Input in Secure Processor

Memory corruption while using Strongbox due to buffer overflow.

CVE-2026-25276 High · 8.8 CWE-129 Jun 1, 2026

Improper Validation of Array Index in Secure Processor

Memory corruption while using Strongbox due to missing bounds check.

CVE-2026-25260 High · 7.0 CWE-367 Jun 1, 2026

Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service

Memory Corruption when accessing shared buffers without validation of concurrent user-mode input modifications.

CVE-2026-25259 High · 7.8 CWE-787 Jun 1, 2026

Out-of-bounds Write in DSP Service

Memory corruption while processing multiple IOCTL command for escape operations.

CVE-2026-24092 High · 7.2 CWE-1286 Jun 1, 2026

Improper Validation of Syntactic Correctness of Input in Display

Memory Corruption when processing fastboot commands to set display mode.

CVE-2026-24091 High · 7.2 CWE-1286 Jun 1, 2026

Improper Validation of Syntactic Correctness of Input in Display

Memory corruption while processing fastboot commands with improperly formatted input.

CVE-2026-24090 High · 7.1 CWE-306 Jun 1, 2026

Missing Authentication for Critical Function in HLOS

Cryptographic issue while processing partition table entries allows unauthorized modification of boot flow.

CVE-2026-24089 High · 7.2 CWE-1286 Jun 1, 2026

Improper Validation of Syntactic Correctness of Input in Kernel

Memory corruption while processing fastboot commands with invalid input.

CVE-2026-24088 High · 8.2 CWE-306 Jun 1, 2026

Missing Authentication for Critical Function in Boot

Cryptographic Issue while processing a specific partition which allows unauthorized write access to load a customized bootloader.

CVE-2026-24087 High · 7.2 CWE-1286 Jun 1, 2026

Improper Validation of Syntactic Correctness of Input in Kernel

Memory corruption while processing fastboot OEM commands.

CVE-2026-24085 High · 7.2 CWE-121 Jun 1, 2026

Stack-based Buffer Overflow in Display

Memory Corruption when processing display command line information due to improper initialization of a variable.

CVE-2025-59613 Medium · 6.7 CWE-121 Jun 1, 2026

Stack-based Buffer Overflow in Windows Compute

Memory Corruption when output buffer size is smaller than input buffer size during data copying operation.

CVE-2025-59612 Medium · 6.7 CWE-121 Jun 1, 2026

Stack-based Buffer Overflow in Windows Compute

Memory corruption in windows drivers while sending incorrect trusted application request