Qualcomm X2000086 Firmware vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Qualcomm X2000086 Firmware: 54 record(s), with affected versions and fixes.cpe:2.3:o:qualcomm:x2000086_firmware
CVE-2026-21374
High · 7.8
CWE-126 Apr 6, 2026
Buffer Over-read in Camera
Memory Corruption when processing auxiliary sensor input/output control commands with insufficient buffer size validation.
CVE-2026-21373
High · 7.8
CWE-126 Apr 6, 2026
Buffer Over-read in Camera
Memory Corruption when accessing an output buffer without validating its size during IOCTL processing.
CVE-2026-21372
High · 7.8
CWE-122 Apr 6, 2026
Heap-Based Buffer Overflow in Power Management IC
Memory Corruption when sending IOCTL requests with invalid buffer sizes during memcpy operations.
CVE-2026-21371
High · 7.8
CWE-126 Apr 6, 2026
Buffer Over-read in WinBlast Driver
Memory Corruption when retrieving output buffer with insufficient size validation.
CVE-2026-21367
High · 7.5
CWE-126 Apr 6, 2026
Buffer Over-read in WLAN Firmware
Transient DOS when processing nonstandard FILS Discovery Frames with out-of-range action sizes during initial scans.
CVE-2025-47390
High · 7.8
CWE-126 Apr 6, 2026
Buffer Over-read in Camera
Memory corruption while preprocessing IOCTL request in JPEG driver.
CVE-2025-47389
High · 7.8
CWE-120 Apr 6, 2026
Buffer Copy Without Checking Size of Input in Automotive Platform
Memory corruption when buffer copy operation fails due to integer overflow during attestation report generation.
CVE-2025-59603
High · 7.8
CWE-787 Mar 2, 2026
Out-of-bounds Write in Computer Vision
Memory Corruption when processing invalid user address with nonstandard buffer address.
CVE-2025-47378
High · 7.1
CWE-497 Mar 2, 2026
Exposure of Sensitive System Information to an Unauthorized Control Sphere in HLOS
Cryptographic Issue when a shared VM reference allows HLOS to boot loader and access cert chain.
CVE-2025-47373
High · 7.8
CWE-787 Mar 2, 2026
Out-of-bounds Write in Automotive
Memory Corruption when accessing buffers with invalid length during TA invocation.
CVE-2025-47402
Medium · 6.5
CWE-125 Feb 2, 2026
Buffer Over-read in WLAN Firmware
Transient DOS when processing a received frame with an excessively large authentication information element.
CVE-2025-47399
High · 7.8
CWE-120 Feb 2, 2026
Buffer Copy Without Checking Size of Input in Camera
Memory Corruption while processing IOCTL call to update sensor property settings with invalid input parameters.
CVE-2025-47359
High · 7.8
CWE-416 Feb 2, 2026
Use After Free in Secure Processor
Memory Corruption when multiple threads simultaneously access a memory free API.
CVE-2025-47358
High · 7.8
CWE-416 Feb 2, 2026
Use After Free in Secure Processor
Memory Corruption when user space address is modified and passed to mem_free API, causing kernel memory to be freed inadvertently.
CVE-2025-47380
High · 7.8
CWE-822 Jan 7, 2026
Untrusted Pointer Dereference in Camera
Memory corruption while preprocessing IOCTLs in sensors.
CVE-2025-47356
High · 7.8
CWE-415 Jan 7, 2026
Double Free in Video
Memory Corruption when multiple threads concurrently access and modify shared resources.
CVE-2025-47343
High · 7.8
CWE-822 Jan 7, 2026
Untrusted Pointer Dereference in Video
Memory corruption while processing a video session to set video parameters.
CVE-2025-47350
High · 7.8
CWE-787 Dec 18, 2025
Use After Free in DSP Service
Memory corruption while handling concurrent memory mapping and unmapping requests from a user-space application.
CVE-2025-47367
High · 7.8
CWE-787 Nov 4, 2025
Out-of-bounds Write in WinBlast Driver
Memory corruption while accessing a buffer during IOCTL processing.
CVE-2025-47352
High · 7.8
CWE-129 Nov 4, 2025
Improper Validation of Array Index in Audio
Memory corruption while processing audio streaming operations.
CVE-2025-47355
High · 7.8
CWE-787 Oct 9, 2025
Out-of-bounds Write in DSP Service
Memory corruption while invoking remote procedure IOCTL calls.
CVE-2025-47349
High · 7.8
CWE-823 Oct 9, 2025
Use of Out-of-range Pointer Offset in DSP Service
Memory corruption while processing an escape call.
CVE-2025-47341
High · 7.8
CWE-120 Oct 9, 2025
Buffer Copy Without Checking Size of Input in Camera
memory corruption while processing an image encoding completion event.
CVE-2025-47340
High · 7.8
CWE-787 Oct 9, 2025
Out-of-bounds Write in DSP Service
Memory corruption while processing IOCTL call to get the mapping.
CVE-2025-47338
High · 7.8
CWE-822 Oct 9, 2025
Untrusted Pointer Dereference in DSP Service
Memory corruption while processing escape commands from userspace.