Qualcomm Wcd9385 Firmware vulnerabilities

CVE-2026-24088 High · 8.2 CWE-306 Jun 1, 2026

Missing Authentication for Critical Function in Boot

Cryptographic Issue while processing a specific partition which allows unauthorized write access to load a customized bootloader.

CVE-2026-24087 High · 7.2 CWE-1286 Jun 1, 2026

Improper Validation of Syntactic Correctness of Input in Kernel

Memory corruption while processing fastboot OEM commands.

CVE-2026-24085 High · 7.2 CWE-121 Jun 1, 2026

Stack-based Buffer Overflow in Display

Memory Corruption when processing display command line information due to improper initialization of a variable.

CVE-2025-59614 Medium · 6.7 CWE-787 Jun 1, 2026

Out-of-bounds Write in Windows Compute

Memory Corruption when sending random number generator command with insufficient output buffer size.

CVE-2025-59613 Medium · 6.7 CWE-121 Jun 1, 2026

Stack-based Buffer Overflow in Windows Compute

Memory Corruption when output buffer size is smaller than input buffer size during data copying operation.

CVE-2025-59612 Medium · 6.7 CWE-121 Jun 1, 2026

Stack-based Buffer Overflow in Windows Compute

Memory corruption in windows drivers while sending incorrect trusted application request

CVE-2025-59611 Medium · 6.7 CWE-787 Jun 1, 2026

Out-of-bounds Write in Core Services

Memory corruption in diagnostic services due to absence of input validation

CVE-2025-59610 Medium · 6.4 CWE-367 Jun 1, 2026

Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver

Memory Corruption when processing IOCTL requests with mismatched API versions due to concurrent modification of user-space buffer.

CVE-2025-59609 Medium · 5.5 CWE-126 Jun 1, 2026

Buffer Over-read in WLAN Host Communication

Information Disclosure when processing advertisement frames with malformed MBSSID elements of insufficient length.

CVE-2025-59606 High · 7.8 CWE-476 Jun 1, 2026

NULL Pointer Dereference in HLOS

Memory Corruption when writing to invalid memory locations occurs due to heap memory exhaustion during secure data initialization.

CVE-2025-59605 High · 7.8 CWE-787 Jun 1, 2026

Out-of-bounds Write in HLOS

Memory Corruption when processing device identifier strings that exceed the expected maximum length.

CVE-2025-59604 High · 7.8 CWE-476 Jun 1, 2026

NULL Pointer Dereference in SPS Applications

Memory Corruption when running a memory copy operation due to invalid writes caused by a null pointer.

CVE-2025-59601 Medium · 6.5 CWE-1230 Jun 1, 2026

Exposure of Sensitive Information Through Metadata in Powerline Communication Firmware

Information Disclosure when resetting device to factory default settings through powerline interface allows unauthorized access to device configuration.

CVE-2026-25266 High · 7.8 CWE-787 May 4, 2026

Exposed dangerous function in windows host

Memory corruption while processing IOCTL command when device is in power-save state.

CVE-2026-24082 High · 7.8 CWE-416 May 4, 2026

Use After Free in Automotive GPU

Memory Corruption when copying data from a freed source while executing performance counter deselect operation.

CVE-2025-47408 High · 7.8 CWE-119 May 4, 2026

Untrusted Pointer Dereference in Power Optimization Firmware

Memory corruption when another driver calls an IOCTL with invalid input/output buffer.

CVE-2025-47407 High · 7.0 CWE-367 May 4, 2026

Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service

Memory corruption while creating a process on the digital signal processor due to allocation failure at the kernel level.

CVE-2025-47406 Medium · 5.5 CWE-125 May 4, 2026

Buffer Over-read in DSP Service

Information Disclosure while processing IOCTL handler callbacks without verifying buffer size.

CVE-2025-47405 High · 7.8 CWE-119 May 4, 2026

Untrusted Pointer Dereference in Camera

Memory corruption when processing camera sensor input/output control codes with invalid output buffers.

CVE-2025-47404 High · 7.8 CWE-787 May 4, 2026

Buffer Copy Without Checking Size of Input in Automotive Audio

Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified.

CVE-2025-47403 High · 7.5 CWE-125 May 4, 2026

Buffer Over-read in WLAN Firmware

Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming.

CVE-2025-47401 High · 7.5 CWE-125 May 4, 2026

Buffer Over-read in WLAN HAL

Transient DOS when processing target power rate tables during channel configuration.

CVE-2026-21382 High · 7.8 CWE-120 Apr 6, 2026

Buffer Copy Without Checking Size of Input in Power Management IC

Memory Corruption when handling power management requests with improperly sized input/output buffers.

CVE-2026-21381 High · 7.5 CWE-126 Apr 6, 2026

Buffer Over-read in WLAN Firmware

Transient DOS when receiving a service data frame with excessive length during device matching over a neighborhood awareness network protocol connection.

CVE-2026-21380 High · 7.8 CWE-416 Apr 6, 2026

Use After Free in DSP Service

Memory Corruption when using deprecated DMABUF IOCTL calls to manage video memory.