Total
96 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-21376 | 1 Qualcomm | 108 Aqt1000, Aqt1000 Firmware, Cologne and 105 more | 2026-10-26 | N/A | 7.8 HIGH |
| Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver. | |||||
| CVE-2026-21375 | 1 Qualcomm | 70 Cologne, Cologne Firmware, Fastconnect 6700 and 67 more | 2026-10-26 | N/A | 7.8 HIGH |
| Memory Corruption when accessing an output buffer without validating its size during IOCTL processing. | |||||
| CVE-2026-21378 | 1 Qualcomm | 102 Aqt1000, Aqt1000 Firmware, Cologne and 99 more | 2026-10-26 | N/A | 7.8 HIGH |
| Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver. | |||||
| CVE-2026-21374 | 1 Qualcomm | 108 Aqt1000, Aqt1000 Firmware, Cologne and 105 more | 2026-10-26 | N/A | 7.8 HIGH |
| Memory Corruption when processing auxiliary sensor input/output control commands with insufficient buffer size validation. | |||||
| CVE-2026-21373 | 1 Qualcomm | 108 Aqt1000, Aqt1000 Firmware, Cologne and 105 more | 2026-10-26 | N/A | 7.8 HIGH |
| Memory Corruption when accessing an output buffer without validating its size during IOCTL processing. | |||||
| CVE-2026-21381 | 1 Qualcomm | 206 Ar8035, Ar8035 Firmware, Cologne and 203 more | 2026-10-26 | N/A | 7.6 HIGH |
| Transient DOS when receiving a service data frame with excessive length during device matching over a neighborhood awareness network protocol connection. | |||||
| CVE-2026-21380 | 1 Qualcomm | 46 Cologne, Cologne Firmware, Fastconnect 6900 and 43 more | 2026-10-25 | N/A | 7.8 HIGH |
| Memory Corruption when using deprecated DMABUF IOCTL calls to manage video memory. | |||||
| CVE-2026-21384 | 1 Qualcomm | 158 Fastconnect 6700, Fastconnect 6700 Firmware, Fastconnect 6900 and 155 more | 2026-10-25 | N/A | 5.3 MEDIUM |
| Memory Corruption when updating prepared commands with invalid port indices based on user space input exceeds supported read client limits. | |||||
| CVE-2026-21383 | 1 Qualcomm | 106 Fastconnect 6900, Fastconnect 6900 Firmware, Fastconnect 7800 and 103 more | 2026-10-25 | N/A | 7.1 HIGH |
| Cryptographic Issue when using a static initialization vector for AES-GCM key wrapping, which requires a unique value for each call to ensure security. | |||||
| CVE-2026-21369 | 1 Qualcomm | 218 Fastconnect 6200, Fastconnect 6200 Firmware, Fastconnect 6700 and 215 more | 2026-10-25 | N/A | 5.3 MEDIUM |
| Memory Corruption when handling flash commands due to outdated LED count values being used after userspace modification. | |||||
| CVE-2026-21368 | 1 Qualcomm | 182 Fastconnect 6700, Fastconnect 6700 Firmware, Fastconnect 6900 and 179 more | 2026-10-25 | N/A | 5.3 MEDIUM |
| Memory Corruption when parsing jpeg commands due to unaccounted extra writes to the buffer during validation checks. | |||||
| CVE-2026-21370 | 1 Qualcomm | 182 Fastconnect 6700, Fastconnect 6700 Firmware, Fastconnect 6900 and 179 more | 2026-10-25 | N/A | 5.3 MEDIUM |
| Memory Corruption when validating input batch size and buffer plane count exceeds maximum allowed values. | |||||
| CVE-2026-25292 | 1 Qualcomm | 422 Ar8031, Ar8031 Firmware, Ar8035 and 419 more | 2026-10-23 | N/A | 7.6 HIGH |
| Memory Corruption when processing untrusted user input in the fastboot command handler for audio framework configuration. | |||||
| CVE-2026-25289 | 1 Qualcomm | 402 Ar8035, Ar8035 Firmware, Cologne and 399 more | 2026-10-23 | N/A | 9.6 CRITICAL |
| Memory Corruption when processing Device Capability Extended attributes in certain NAN Service Discovery Frames with invalid length values. | |||||
| CVE-2025-27070 | 1 Qualcomm | 350 Ar8035, Ar8035 Firmware, Fastconnect 6200 and 347 more | 2026-10-18 | N/A | 7.8 HIGH |
| Memory corruption while performing encryption and decryption commands. | |||||
| CVE-2025-47370 | 1 Qualcomm | 272 Ar8035, Ar8035 Firmware, Csrb31024 and 269 more | 2026-10-18 | N/A | 6.5 MEDIUM |
| Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan. | |||||
| CVE-2026-57554 | 1 Qualcomm | 436 Ar8031, Ar8031 Firmware, Ar8035 and 433 more | 2026-10-09 | N/A | 7.8 HIGH |
| Memory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC invocations. | |||||
| CVE-2026-57545 | 1 Qualcomm | 434 Ar8031, Ar8031 Firmware, Cologne and 431 more | 2026-10-09 | N/A | 7.8 HIGH |
| Memory corruption when processing draw objects of incorrect type during graphics command list execution. | |||||
| CVE-2026-57537 | 1 Qualcomm | 144 Congo, Congo Firmware, Fastconnect 6200 and 141 more | 2026-10-09 | N/A | 7.8 HIGH |
| Memory Corruption when accessing and modifying geographic mapping data concurrently without proper synchronization. | |||||
| CVE-2026-25302 | 1 Qualcomm | 584 Ar8035, Ar8035 Firmware, Cologne and 581 more | 2026-10-09 | N/A | 7.1 HIGH |
| Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed. | |||||