Vulnerabilidades do Qualcomm Fastconnect 7800 Firmware

CVE-2026-24075 Alta · 7.0 CWE-126 17/09/2026

Buffer Over-read in Qualcomm IPC

Memory Corruption when multiple threads issue concurrent IOCTL requests to the device control handler due to improper synchronization and race conditions.

CVE-2026-24074 Alta · 7.8 CWE-787 17/09/2026

Out-of-bounds Write in Video

Memory Corruption when processing data with large offset and length values exceeds buffer limits during data copy operations.

CVE-2026-24073 Alta · 7.8 CWE-787 17/09/2026

Out-of-bounds Write in Video

Memory corruption when processing decode statistics due to insufficient validation of offset against structure size.

CVE-2025-59607 Alta · 7.8 CWE-822 17/09/2026

Untrusted Pointer Dereference in Windows Compute

Memory Corruption when copying large input data exceeds normal allocation limits.

CVE-2026-25292 Alta · 7.6 CWE-1286 04/08/2026

Improper Validation of Syntactic Correctness of Input in Automotive Linux OS

Memory Corruption when processing untrusted user input in the fastboot command handler for audio framework configuration.

CVE-2026-25289 Crítica · 9.6 CWE-121 04/08/2026

Stack-based Buffer Overflow in WLAN Firmware

Memory Corruption when processing Device Capability Extended attributes in certain NAN Service Discovery Frames with invalid length values.

CVE-2026-25288 Alta · 7.4 CWE-126 04/08/2026

Buffer Over-read in WLAN Firmware

Transient DOS when processing a short target wake time channel usage response frame with insufficient packet size.

CVE-2026-24084 Alta · 7.5 CWE-1294 04/08/2026

Insecure Security Identifier Mechanism in Multi-Mode Call Processor

Weak configuration when UE does not verify the consistency of its additional security capabilities with the replayed capabilities.

CVE-2026-24080 Alta · 7.8 CWE-120 04/08/2026

Buffer Copy Without Checking Size of Input in Biometrics

Memory Corruption when handling malformed request parameters in the fingerprint TA.

CVE-2026-24079 Alta · 8.1 CWE-306 04/08/2026

Missing Authentication for Critical Function in Data Modem

Cryptographic Issue while processing registration requests with malformed or missing authentication parameters.

CVE-2026-24078 Média · 6.5 CWE-359 04/08/2026

Exposure of Private Personal Information to an Unauthorized Actor in Data Modem

Information Disclosure when IPSec negotiation fails or is not established properly during NG-eCall SIP signaling.

CVE-2026-24077 Média · 6.5 CWE-191 04/08/2026

Integer Underflow (Wrap or Wraparound) in WLAN Host

Information Disclosure when processing wireless network channel switch information with improperly formatted length fields.

CVE-2026-24076 Média · 6.7 CWE-120 04/08/2026

Buffer Copy Without Checking Size of Input in Bluetooth HOST

Memory Corruption when processing registry values with incorrect types using a direct query method.

CVE-2026-25271 Alta · 7.0 CWE-367 06/07/2026

Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service

Memory Corruption when processing asynchronous input parameters due to improper handling of modified values between check and use.

CVE-2026-25268 Alta · 8.8 CWE-121 06/07/2026

Stack-based Buffer Overflow in WLAN Host

Memory Corruption when processing invalid HT40 channel layouts during dynamic channel switching operations.

CVE-2026-21384 Média · 5.3 CWE-787 06/07/2026

Out-of-bounds Write in Camera Driver

Memory Corruption when updating prepared commands with invalid port indices based on user space input exceeds supported read client limits.

CVE-2026-21383 Alta · 7.1 CWE-323 06/07/2026

Reusing a Nonce, Key Pair in Encryption in HLOS

Cryptographic Issue when using a static initialization vector for AES-GCM key wrapping, which requires a unique value for each call to ensure security.

CVE-2026-21379 Alta · 7.8 CWE-126 06/07/2026

Buffer Over-read in Windows Compute

Memory Corruption when allocating memory with sizes that exceed the maximum allowed value.

CVE-2026-21370 Média · 5.3 CWE-787 06/07/2026

Out-of-bounds Write in Camera Driver

Memory Corruption when validating input batch size and buffer plane count exceeds maximum allowed values.

CVE-2026-21369 Média · 5.3 CWE-787 06/07/2026

Out-of-bounds Write in Camera Driver

Memory Corruption when handling flash commands due to outdated LED count values being used after userspace modification.

CVE-2026-21368 Média · 5.3 CWE-787 06/07/2026

Out-of-bounds Write in Camera Driver

Memory Corruption when parsing jpeg commands due to unaccounted extra writes to the buffer during validation checks.

CVE-2025-59617 Alta · 7.3 CWE-416 06/07/2026

Use After Free in Computer Vision

Memory Corruption when processing multiple IOCTL calls with the same buffer file descriptor input.

CVE-2025-59616 Alta · 7.8 CWE-416 06/07/2026

Use After Free in Computer Vision

Memory Corruption when processing multiple IOCTL calls with the same buffer file descriptor input due to accessing already freed memory.

CVE-2025-59615 Alta · 7.8 CWE-416 06/07/2026

Use After Free in Computer Vision

Memory Corruption when invoking device input/output control operations for mapping and unmapping persistent memory buffers due to improper synchronization.

CVE-2026-25277 Alta · 8.8 CWE-120 01/06/2026

Buffer Copy Without Checking Size of Input in Secure Processor

Memory corruption while using Strongbox due to buffer overflow.