Vulnerabilidades de Qualcomm
CVEs publicadas que afetam produtos de Qualcomm: 179 registro(s), com severidade, exploração e correções.
Snapdragon 174Fastconnect 7800 Firmware 149Wcd9385 Firmware 147Wcd9380 Firmware 147Fastconnect 6900 Firmware 142Wsa8845h Firmware 139Wsa8840 Firmware 139Wsa8845 Firmware 139Wsa8835 Firmware 134Wsa8830 Firmware 132Wcd9370 Firmware 122Wcd9375 Firmware 122Fastconnect 6700 Firmware 113Wsa8810 Firmware 112Wsa8815 Firmware 112Wsa8832 Firmware 110Wcn3950 Firmware 105Wcn3988 Firmware 104Video Collaboration Vc3 Platform Firmware 96Qcm6490 Firmware 94Wcd9395 Firmware 93Qcm5430 Firmware 92Sc8380xp Firmware 91Qca6698aq Firmware 90Qca6595au Firmware 90Fastconnect 6200 Firmware 88Qca6797aq Firmware 87Wcd9378 Firmware 85Qca6391 Firmware 85Wcn7861 Firmware 83Qca6696 Firmware 81Wcn6755 Firmware 80Sa9000p Firmware 78Qca6574au Firmware 78Qca6595 Firmware 78Sa8255p Firmware 77Wcn7881 Firmware 77Qam8255p Firmware 77Wcn7860 Firmware 76Sa8770p Firmware 76
CVE-2026-57559
Alta · 7.8
CWE-416 06/10/2026
Use After Free in DSP_Services
Memory corruption while processing service requests.
CVE-2026-57555
Alta · 7.8
CWE-416 06/10/2026
Use After Free in DSP Service
Memory Corruption when executing system service routines due to improper handling of user input buffers.
CVE-2026-57554
Alta · 7.8
CWE-416 06/10/2026
Use After Free in DSP Service
Memory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC invocations.
CVE-2026-57546
Alta · 7.5
CWE-126 06/10/2026
Buffer Over-read in WLAN HAL
Transient DOS when processing a continuous receive command with a zero-sized global configuration override.
CVE-2026-57545
Alta · 7.8
CWE-822 06/10/2026
Untrusted Pointer Dereference in Graphics
Memory corruption when processing draw objects of incorrect type during graphics command list execution.
CVE-2026-57537
Alta · 7.8
CWE-416 06/10/2026
Use After Free in DSP Service
Memory Corruption when accessing and modifying geographic mapping data concurrently without proper synchronization.
CVE-2026-25302
Alta · 7.1
CWE-347 06/10/2026
Improper Verification of Cryptographic Signature in Boot
Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed.
CVE-2026-25291
Alta · 7.8
CWE-416 06/10/2026
Use After Free in Graphics
Memory corruption when performing concurrent operations on shared memory page lists due to lack of proper synchronization mechanisms.
CVE-2026-25274
Média · 6.7
CWE-416 06/10/2026
Use After Free in Windows WLAN Host
Memory Corruption when processing concurrent DMA buffer allocation and deallocation commands without proper synchronization.
CVE-2026-25273
Média · 6.7
CWE-787 06/10/2026
Out-of-bounds Write in Camera Driver
Memory Corruption when processing camera operations due to out-of-bounds write during driver updates.
CVE-2026-25272
Média · 6.7
CWE-787 06/10/2026
Out-of-bounds Write in Camera Driver
Memory Corruption when processing camera CRE driver operations with improper handling of buffer limits during hardware update preparation.
CVE-2026-25270
Média · 6.7
CWE-787 06/10/2026
Out-of-bounds Write in Camera Driver
Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver.
CVE-2026-25269
Média · 6.7
CWE-787 06/10/2026
Out-of-bounds Write in Camera Driver
Memory corruption when processing camera requests with excessive batch and IO buffer configurations exceeds allocated memory size.
CVE-2026-25267
Alta · 7.8
CWE-862 06/10/2026
Missing Authorization in Core
Memory corruption when non-secure loader rewrites page tables before secure memory initialization.
CVE-2026-25263
Média · 6.6
CWE-787 06/10/2026
Out of Bounds write in Linux Camera
Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters.
CVE-2026-25262
Média · 6.3
CWE-123 22/09/2026
Write-what-where Condition in Primary Bootloader
Memory corruption while processing a crafted ELF file in the Primary Bootloader.
CVE-2026-25255
Alta · 7.8
CWE-749 22/09/2026
Exposed function in Qualcomm Package Manager and Qualcomm Software Center.
Exposed dangerous function lead to privilege escalation via gRPC server.
CVE-2025-59607
Alta · 7.8
CWE-822 17/09/2026
Untrusted Pointer Dereference in Windows Compute
Memory Corruption when copying large input data exceeds normal allocation limits.
CVE-2026-25271
Alta · 7.0
CWE-367 06/07/2026
Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service
Memory Corruption when processing asynchronous input parameters due to improper handling of modified values between check and use.
CVE-2026-25268
Alta · 8.8
CWE-121 06/07/2026
Stack-based Buffer Overflow in WLAN Host
Memory Corruption when processing invalid HT40 channel layouts during dynamic channel switching operations.
CVE-2026-21384
Média · 5.3
CWE-787 06/07/2026
Out-of-bounds Write in Camera Driver
Memory Corruption when updating prepared commands with invalid port indices based on user space input exceeds supported read client limits.
CVE-2026-21383
Alta · 7.1
CWE-323 06/07/2026
Reusing a Nonce, Key Pair in Encryption in HLOS
Cryptographic Issue when using a static initialization vector for AES-GCM key wrapping, which requires a unique value for each call to ensure security.
CVE-2026-21379
Alta · 7.8
CWE-126 06/07/2026
Buffer Over-read in Windows Compute
Memory Corruption when allocating memory with sizes that exceed the maximum allowed value.
CVE-2026-21370
Média · 5.3
CWE-787 06/07/2026
Out-of-bounds Write in Camera Driver
Memory Corruption when validating input batch size and buffer plane count exceeds maximum allowed values.
CVE-2026-21369
Média · 5.3
CWE-787 06/07/2026
Out-of-bounds Write in Camera Driver
Memory Corruption when handling flash commands due to outdated LED count values being used after userspace modification.