Vulnerabilidades do Qualcomm Xg101032 Firmware

CVE-2026-21374 Alta · 7.8 CWE-126 06/04/2026

Buffer Over-read in Camera

Memory Corruption when processing auxiliary sensor input/output control commands with insufficient buffer size validation.

CVE-2026-21373 Alta · 7.8 CWE-126 06/04/2026

Buffer Over-read in Camera

Memory Corruption when accessing an output buffer without validating its size during IOCTL processing.

CVE-2026-21372 Alta · 7.8 CWE-122 06/04/2026

Heap-Based Buffer Overflow in Power Management IC

Memory Corruption when sending IOCTL requests with invalid buffer sizes during memcpy operations.

CVE-2026-21371 Alta · 7.8 CWE-126 06/04/2026

Buffer Over-read in WinBlast Driver

Memory Corruption when retrieving output buffer with insufficient size validation.

CVE-2026-21367 Alta · 7.5 CWE-126 06/04/2026

Buffer Over-read in WLAN Firmware

Transient DOS when processing nonstandard FILS Discovery Frames with out-of-range action sizes during initial scans.

CVE-2025-47390 Alta · 7.8 CWE-126 06/04/2026

Buffer Over-read in Camera

Memory corruption while preprocessing IOCTL request in JPEG driver.

CVE-2025-47389 Alta · 7.8 CWE-120 06/04/2026

Buffer Copy Without Checking Size of Input in Automotive Platform

Memory corruption when buffer copy operation fails due to integer overflow during attestation report generation.

CVE-2025-59603 Alta · 7.8 CWE-787 02/03/2026

Out-of-bounds Write in Computer Vision

Memory Corruption when processing invalid user address with nonstandard buffer address.

CVE-2025-47378 Alta · 7.1 CWE-497 02/03/2026

Exposure of Sensitive System Information to an Unauthorized Control Sphere in HLOS

Cryptographic Issue when a shared VM reference allows HLOS to boot loader and access cert chain.

CVE-2025-47373 Alta · 7.8 CWE-787 02/03/2026

Out-of-bounds Write in Automotive

Memory Corruption when accessing buffers with invalid length during TA invocation.

CVE-2025-47402 Média · 6.5 CWE-125 02/02/2026

Buffer Over-read in WLAN Firmware

Transient DOS when processing a received frame with an excessively large authentication information element.

CVE-2025-47399 Alta · 7.8 CWE-120 02/02/2026

Buffer Copy Without Checking Size of Input in Camera

Memory Corruption while processing IOCTL call to update sensor property settings with invalid input parameters.

CVE-2025-47359 Alta · 7.8 CWE-416 02/02/2026

Use After Free in Secure Processor

Memory Corruption when multiple threads simultaneously access a memory free API.

CVE-2025-47358 Alta · 7.8 CWE-416 02/02/2026

Use After Free in Secure Processor

Memory Corruption when user space address is modified and passed to mem_free API, causing kernel memory to be freed inadvertently.

CVE-2025-47380 Alta · 7.8 CWE-822 07/01/2026

Untrusted Pointer Dereference in Camera

Memory corruption while preprocessing IOCTLs in sensors.

CVE-2025-47356 Alta · 7.8 CWE-415 07/01/2026

Double Free in Video

Memory Corruption when multiple threads concurrently access and modify shared resources.

CVE-2025-47343 Alta · 7.8 CWE-822 07/01/2026

Untrusted Pointer Dereference in Video

Memory corruption while processing a video session to set video parameters.

CVE-2025-47350 Alta · 7.8 CWE-787 18/12/2025

Use After Free in DSP Service

Memory corruption while handling concurrent memory mapping and unmapping requests from a user-space application.

CVE-2025-47367 Alta · 7.8 CWE-787 04/11/2025

Out-of-bounds Write in WinBlast Driver

Memory corruption while accessing a buffer during IOCTL processing.

CVE-2025-47352 Alta · 7.8 CWE-129 04/11/2025

Improper Validation of Array Index in Audio

Memory corruption while processing audio streaming operations.

CVE-2025-47355 Alta · 7.8 CWE-787 09/10/2025

Out-of-bounds Write in DSP Service

Memory corruption while invoking remote procedure IOCTL calls.

CVE-2025-47349 Alta · 7.8 CWE-823 09/10/2025

Use of Out-of-range Pointer Offset in DSP Service

Memory corruption while processing an escape call.

CVE-2025-47341 Alta · 7.8 CWE-120 09/10/2025

Buffer Copy Without Checking Size of Input in Camera

memory corruption while processing an image encoding completion event.

CVE-2025-47340 Alta · 7.8 CWE-787 09/10/2025

Out-of-bounds Write in DSP Service

Memory corruption while processing IOCTL call to get the mapping.

CVE-2025-47338 Alta · 7.8 CWE-822 09/10/2025

Untrusted Pointer Dereference in DSP Service

Memory corruption while processing escape commands from userspace.