Skip to content
Threat Feed

Vendor

Qualcomm

13 briefs RSS
high advisory

CVE-2026-25276: Qualcomm Strongbox Memory Corruption Vulnerability

CVE-2026-25276 describes a memory corruption vulnerability in Qualcomm's Strongbox due to a missing bounds check, potentially leading to arbitrary code execution.

memory-corruption qualcomm strongbox
2r 1c
high advisory

CVE-2026-24092: Memory Corruption in Qualcomm Fastboot Display Mode Setting

CVE-2026-24092 is a memory corruption vulnerability in Qualcomm products arising from improper validation when processing fastboot commands to set the display mode, potentially leading to arbitrary code execution.

memory-corruption fastboot qualcomm
2r 1c
high advisory

CVE-2026-24091: Memory Corruption in Fastboot Command Processing

CVE-2026-24091 is a memory corruption vulnerability in Qualcomm devices that occurs when processing fastboot commands with improperly formatted input, potentially leading to code execution.

cve-2026-24091 memory corruption fastboot qualcomm
2r 2t 1c
high advisory

CVE-2026-24090 - Qualcomm Cryptographic Issue in Partition Table Processing

CVE-2026-24090 is a cryptographic issue in Qualcomm chipsets while processing partition table entries, allowing unauthorized modification of the boot flow due to missing authentication for critical functions.

cve bootkit qualcomm partition table
2r 2t 1c
high threat

CVE-2026-24089 Memory Corruption Vulnerability in Fastboot Command Processing

CVE-2026-24089 describes a memory corruption vulnerability in processing fastboot commands with invalid input, potentially leading to arbitrary code execution on affected devices and requiring physical access to trigger.

cve memory corruption fastboot
2r 1t 1c
high advisory

CVE-2026-24087: Memory Corruption in Fastboot OEM Command Processing

CVE-2026-24087 is a high-severity memory corruption vulnerability in Qualcomm components that occurs while processing fastboot OEM commands, potentially leading to code execution.

memory-corruption fastboot qualcomm
2r 1c
high advisory

CVE-2025-59605: Qualcomm Device Identifier String Memory Corruption

CVE-2025-59605 is a memory corruption vulnerability in Qualcomm products where processing overly long device identifier strings leads to an out-of-bounds write, potentially allowing for information disclosure, code execution, or denial of service.

memory corruption out-of-bounds write cve-2025-59605 qualcomm
2r 2t 1c
high advisory

CVE-2025-59604 Memory Corruption Vulnerability Due to Null Pointer Dereference

CVE-2025-59604 is a memory corruption vulnerability due to invalid writes caused by a null pointer when running a memory copy operation, potentially leading to arbitrary code execution, as reported by Qualcomm.

memory-corruption null-pointer-dereference cve
2r 1c
high advisory

Realtek rtl819x Local Privilege Escalation Vulnerability

A local privilege escalation vulnerability exists in Realtek rtl819x Jungle SDK due to missing capability checks on ioctl commands, allowing unprivileged users to gain root privileges on affected Linux systems.

rtl819x Jungle SDK +7 privilege-escalation realtek linux
2r 1t 1c
critical advisory

Qualcomm PLC FW Buffer Overflow via Incorrect Authorization (CVE-2026-25293)

CVE-2026-25293 is a critical buffer overflow vulnerability in Qualcomm PLC FW due to incorrect authorization, potentially allowing unauthorized access and control over programmable logic controllers.

PLC FW plc buffer-overflow industrial-control-systems cve-2026-25293
2r 2t 1c
high advisory

Qualcomm Driver IOCTL Memory Corruption Vulnerability

A memory corruption vulnerability, CVE-2025-47408, exists in Qualcomm drivers when another driver calls an IOCTL with an invalid input/output buffer, potentially leading to code execution or denial of service.

memory corruption ioctl driver vulnerability cve-2025-47408
2r 1t 1c
high advisory

Memory Corruption Vulnerability in Digital Signal Processor (CVE-2025-47407)

CVE-2025-47407 describes a memory corruption vulnerability affecting the digital signal processor due to allocation failure at the kernel level, potentially leading to arbitrary code execution with elevated privileges on affected systems.

memory-corruption dsp qualcomm cve-2025-47407
2r 1t 1c
high advisory

Qualcomm Camera Sensor Memory Corruption Vulnerability

CVE-2025-47405 is a memory corruption vulnerability in Qualcomm products related to processing camera sensor input/output control codes with invalid output buffers, potentially leading to arbitrary code execution.

cve-2025-47405 memory corruption camera sensor qualcomm
2r 1c