Vulnerabilidades do Qualcomm Wcd9380 Firmware

CVE-2026-21380 Alta · 7.8 CWE-416 06/04/2026

Use After Free in DSP Service

Memory Corruption when using deprecated DMABUF IOCTL calls to manage video memory.

CVE-2026-21378 Alta · 7.8 CWE-126 06/04/2026

Buffer Over-read in Camera

Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver.

CVE-2026-21376 Alta · 7.8 CWE-126 06/04/2026

Buffer Over-read in Camera

Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver.

CVE-2026-21375 Alta · 7.8 CWE-126 06/04/2026

Buffer Over-read in Camera

Memory Corruption when accessing an output buffer without validating its size during IOCTL processing.

CVE-2026-21374 Alta · 7.8 CWE-126 06/04/2026

Buffer Over-read in Camera

Memory Corruption when processing auxiliary sensor input/output control commands with insufficient buffer size validation.

CVE-2026-21373 Alta · 7.8 CWE-126 06/04/2026

Buffer Over-read in Camera

Memory Corruption when accessing an output buffer without validating its size during IOCTL processing.

CVE-2026-21372 Alta · 7.8 CWE-122 06/04/2026

Heap-Based Buffer Overflow in Power Management IC

Memory Corruption when sending IOCTL requests with invalid buffer sizes during memcpy operations.

CVE-2026-21371 Alta · 7.8 CWE-126 06/04/2026

Buffer Over-read in WinBlast Driver

Memory Corruption when retrieving output buffer with insufficient size validation.

CVE-2026-21367 Alta · 7.5 CWE-126 06/04/2026

Buffer Over-read in WLAN Firmware

Transient DOS when processing nonstandard FILS Discovery Frames with out-of-range action sizes during initial scans.

CVE-2025-47392 Alta · 8.8 CWE-190 06/04/2026

Integer Overflow or Wraparound in GPS

Memory corruption when decoding corrupted satellite data files with invalid signature offsets.

CVE-2025-47391 Alta · 7.8 CWE-121 06/04/2026

Stack-based Buffer Overflow in Camera Driver

Memory corruption while processing a frame request from user.

CVE-2025-47390 Alta · 7.8 CWE-126 06/04/2026

Buffer Over-read in Camera

Memory corruption while preprocessing IOCTL request in JPEG driver.

CVE-2025-47389 Alta · 7.8 CWE-120 06/04/2026

Buffer Copy Without Checking Size of Input in Automotive Platform

Memory corruption when buffer copy operation fails due to integer overflow during attestation report generation.

CVE-2025-47374 Média · 6.5 CWE-416 06/04/2026

Use After Free in Camera Driver

Memory Corruption when accessing freed memory due to concurrent fence deregistration and signal handling.

CVE-2026-21385 Alta · 7.8 KEV Alta · 58 Exploit público CWE-190 02/03/2026

Qualcomm Multiple Chipsets Memory Corruption Vulnerability

Memory corruption while using alignments for memory allocation.

CVE-2025-59603 Alta · 7.8 CWE-787 02/03/2026

Out-of-bounds Write in Computer Vision

Memory Corruption when processing invalid user address with nonstandard buffer address.

CVE-2025-59600 Alta · 7.8 CWE-126 02/03/2026

Buffer Over-read in Graphics

Memory Corruption when adding user-supplied data without checking available buffer space.

CVE-2025-47386 Alta · 7.8 CWE-416 02/03/2026

Use After Free in Automotive Audio

Memory Corruption while invoking IOCTL calls when concurrent access to shared buffer occurs.

CVE-2025-47385 Alta · 7.8 CWE-1262 02/03/2026

Improper Access Control for Register Interface in SCE-Mink

Memory Corruption when accessing trusted execution environment without proper privilege check.

CVE-2025-47384 Média · 6.5 CWE-617 02/03/2026

Reachable Assertion in FW

Transient DOS when MAC configures config id greater than supported maximum value.

CVE-2025-47383 Alta · 7.2 CWE-325 02/03/2026

Missing Cryptographic Step in Data Modem

Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE.

CVE-2025-47379 Alta · 7.8 CWE-416 02/03/2026

Use After Free in Automotive Audio

Memory Corruption when concurrent access to shared buffer occurs due to improper synchronization between assignment and deallocation of buffer resources.

CVE-2025-47378 Alta · 7.1 CWE-497 02/03/2026

Exposure of Sensitive System Information to an Unauthorized Control Sphere in HLOS

Cryptographic Issue when a shared VM reference allows HLOS to boot loader and access cert chain.

CVE-2025-47377 Alta · 7.8 CWE-416 02/03/2026

Use After Free in Automotive Audio

Memory Corruption when accessing a buffer after it has been freed while processing IOCTL calls.

CVE-2025-47376 Alta · 7.8 CWE-416 02/03/2026

Use After Free in Automotive Audio

Memory Corruption when concurrent access to shared buffer occurs during IOCTL calls.