Vulnerabilidades do Qualcomm Qdx1010 Firmware

CVE-2026-57554 Alta · 7.8 CWE-416 06/10/2026

Use After Free in DSP Service

Memory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC invocations.

CVE-2026-25302 Alta · 7.1 CWE-347 06/10/2026

Improper Verification of Cryptographic Signature in Boot

Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed.

CVE-2026-25292 Alta · 7.6 CWE-1286 04/08/2026

Improper Validation of Syntactic Correctness of Input in Automotive Linux OS

Memory Corruption when processing untrusted user input in the fastboot command handler for audio framework configuration.

CVE-2026-21383 Alta · 7.1 CWE-323 06/07/2026

Reusing a Nonce, Key Pair in Encryption in HLOS

Cryptographic Issue when using a static initialization vector for AES-GCM key wrapping, which requires a unique value for each call to ensure security.

CVE-2026-24092 Alta · 7.2 CWE-1286 01/06/2026

Improper Validation of Syntactic Correctness of Input in Display

Memory Corruption when processing fastboot commands to set display mode.

CVE-2026-24091 Alta · 7.2 CWE-1286 01/06/2026

Improper Validation of Syntactic Correctness of Input in Display

Memory corruption while processing fastboot commands with improperly formatted input.

CVE-2026-24090 Alta · 7.1 CWE-306 01/06/2026

Missing Authentication for Critical Function in HLOS

Cryptographic issue while processing partition table entries allows unauthorized modification of boot flow.

CVE-2026-24089 Alta · 7.2 CWE-1286 01/06/2026

Improper Validation of Syntactic Correctness of Input in Kernel

Memory corruption while processing fastboot commands with invalid input.

CVE-2026-24087 Alta · 7.2 CWE-1286 01/06/2026

Improper Validation of Syntactic Correctness of Input in Kernel

Memory corruption while processing fastboot OEM commands.

CVE-2026-24085 Alta · 7.2 CWE-121 01/06/2026

Stack-based Buffer Overflow in Display

Memory Corruption when processing display command line information due to improper initialization of a variable.

CVE-2025-59606 Alta · 7.8 CWE-476 01/06/2026

NULL Pointer Dereference in HLOS

Memory Corruption when writing to invalid memory locations occurs due to heap memory exhaustion during secure data initialization.

CVE-2025-59605 Alta · 7.8 CWE-787 01/06/2026

Out-of-bounds Write in HLOS

Memory Corruption when processing device identifier strings that exceed the expected maximum length.

CVE-2025-59604 Alta · 7.8 CWE-476 01/06/2026

NULL Pointer Dereference in SPS Applications

Memory Corruption when running a memory copy operation due to invalid writes caused by a null pointer.

CVE-2026-24082 Alta · 7.8 CWE-416 04/05/2026

Use After Free in Automotive GPU

Memory Corruption when copying data from a freed source while executing performance counter deselect operation.

CVE-2025-47373 Alta · 7.8 CWE-787 02/03/2026

Out-of-bounds Write in Automotive

Memory Corruption when accessing buffers with invalid length during TA invocation.

CVE-2025-47366 Alta · 7.8 CWE-749 02/02/2026

Exposed Dangerous Method or Function in HLOS

Cryptographic issue when a Trusted Zone with outdated code is triggered by a HLOS providing incorrect input.

CVE-2025-47348 Alta · 7.8 CWE-457 07/01/2026

Use of Uninitialized Variable in HLOS

Memory corruption while processing identity credential operations in the trusted application.

CVE-2025-47345 Alta · 8.4 CWE-323 07/01/2026

Reusing a Nonce, Key Pair in Encryption in Automotive Platform

Cryptographic issue may occur while encrypting license data.

CVE-2025-47333 Média · 6.6 CWE-416 07/01/2026

Use After Free in HLOS

Memory corruption while handling buffer mapping operations in the cryptographic driver.

CVE-2025-47331 Média · 6.1 CWE-126 07/01/2026

Buffer Over-read in Video

Information disclosure while processing a firmware event.

CVE-2025-47330 Média · 5.5 CWE-126 07/01/2026

Buffer Over-read in Video

Transient DOS while parsing video packets received from the video firmware.

CVE-2025-47322 Alta · 7.8 CWE-416 18/12/2025

Use After Free in Automotive Linux OS

Memory corruption while handling IOCTL calls to set mode.

CVE-2025-47319 Média · 6.7 CWE-497 18/12/2025

Exposure of Sensitive System Information to an Unauthorized Control Sphere in HLOS

Information disclosure while exposing internal TA-to-TA communication APIs to HLOS

CVE-2025-27070 Alta · 7.8 CWE-787 04/11/2025

Out-of-bounds Write in Windows Compute

Memory corruption while performing encryption and decryption commands.

CVE-2025-27054 Alta · 7.8 CWE-787 09/10/2025

Out-of-bounds Write in Display

Memory corruption while processing a malformed license file during reboot.