CVE-2026-25290 is a high-severity integer overflow vulnerability in Qualcomm Snapdragon products WSA8840 and WSA8845. It involves memory corruption caused by improper validation of large data buffers using addition to check buffer length. This flaw can lead to high impact on confidentiality, integrity, and availability.
CVE-2026-25284 is a high-severity buffer over-read vulnerability in Qualcomm Snapdragon products WSA8840 and WSA8845. It involves information disclosure caused by reuse of a pointer after it has been deallocated. The flaw can lead to unauthorized reading of memory, potentially exposing sensitive data. No known exploits are reported in the wild. The vulnerability requires local privileges and has low attack complexity without user interaction. Confidentiality impact is high, integrity is not affected, and availability impact is low.
CVE-2026-25283 is a high-severity stack-based buffer overflow vulnerability in Qualcomm Snapdragon devices WSA8840 and WSA8845. The flaw arises from memory corruption caused by copying unverified external data exceeding the allocated buffer size. This can lead to complete compromise of confidentiality, integrity, and availability of the affected system.
CVE-2026-25282 is a high-severity vulnerability in Qualcomm Snapdragon devices WSA8840 and WSA8845. It involves an out-of-bounds read triggered by processing unverified data from a neighboring system, leading to a transient denial of service (DoS). The flaw can impact confidentiality, integrity, and availability of the affected device.
CVE-2026-25281 is a high-severity vulnerability in Qualcomm Snapdragon devices WSA8840 and WSA8845. It involves allocation of resources without limits or throttling, leading to a transient denial of service (DoS) when processing large or numerous request buffers without sufficient memory allocation validation.
CVE-2026-25280 is a high-severity vulnerability in Qualcomm Snapdragon products involving an out-of-bounds write due to memory corruption when processing escape handling with insufficient user buffer sizes. It affects specific Snapdragon versions identified by their model numbers. The vulnerability has a CVSS score of 7.8, indicating significant impact on confidentiality, integrity, and availability. No patch or remediation details are provided in the input data.
CVE-2026-25278 is a high-severity vulnerability in Qualcomm Snapdragon chipsets QCA6595 and QCA6696. It involves a time-of-check to time-of-use (TOCTOU) race condition during I2C transfer request processing, leading to memory corruption. This flaw arises from a race between memory allocation and data copying operations.
CVE-2026-25275 is a high-severity vulnerability in Qualcomm Snapdragon products caused by a buffer over-read (CWE-126) when processing authentication frames with invalid FILS information element header lengths. This flaw can cause a transient denial of service (DoS) condition. The vulnerability affects a wide range of specific Qualcomm Snapdragon versions. No information about available patches or vendor advisories is provided.
CVE-2026-25261 is a vulnerability in Qualcomm Snapdragon products involving memory corruption triggered by processing rear sensor IOCTL calls. This flaw is classified as CWE-822 (Untrusted Pointer Dereference). It affects specific Snapdragon component versions identified by their model numbers. The vulnerability has a CVSS 3.1 score of 6.7, indicating a medium severity level with high impact on confidentiality, integrity, and availability. No public exploits are known, and no patch or remediation information is provided.
CVE-2026-24081 is a high-severity vulnerability in Qualcomm Snapdragon products involving a buffer over-read (CWE-126) that can cause a transient denial of service (DoS). The issue occurs when processing a channel map with insufficient used channels while adaptive frequency hopping is fully enabled. This vulnerability affects numerous specific Qualcomm Snapdragon versions and does not impact confidentiality or integrity but can disrupt availability.
CVE-2026-24075 is a high-severity buffer over-read vulnerability in Qualcomm Snapdragon devices. It occurs due to improper synchronization and race conditions when multiple threads issue concurrent IOCTL requests to the device control handler, leading to memory corruption. This flaw affects specific Snapdragon hardware versions and can result in high impact on confidentiality, integrity, and availability.
CVE-2026-24074 is a high-severity vulnerability in Qualcomm Snapdragon products caused by an out-of-bounds write. It occurs when processing data with large offset and length values that exceed buffer limits during data copy operations, leading to memory corruption.
CVE-2026-24073 is a high-severity vulnerability in Qualcomm Snapdragon devices involving an out-of-bounds write due to insufficient validation of an offset against a structure size during decode statistics processing. This memory corruption flaw can impact confidentiality, integrity, and availability of affected devices. The affected versions include specific Qualcomm Snapdragon components identified by model numbers IQX5121, IQX7181, QCA0000, WCD9380, WCD9385, WSA8840, and WSA8845. No patch or remediation information is provided in the available data.
CVE-2025-59607 is a high-severity vulnerability in Qualcomm Snapdragon components identified as an untrusted pointer dereference (CWE-822). It occurs due to memory corruption when copying large input data that exceeds normal allocation limits. The affected versions include specific Qualcomm Snapdragon models WCD9380, WCD9385, WSA8830, WSA8835, WSA8840, and WSA8845. The vulnerability has a CVSS 3.1 score of 7.8, indicating high impact on confidentiality, integrity, and availability. No known exploits are reported in the wild, and no patch or remediation details are provided in the available data.
CVE-2026-25292 is a high severity vulnerability in Qualcomm Snapdragon products involving memory corruption triggered by improper validation of syntactic correctness of untrusted input in the fastboot command handler for audio framework configuration. It affects a broad range of Snapdragon chipsets and related components. The vulnerability could lead to complete compromise of confidentiality, integrity, and availability. No official patch or remediation guidance is currently available from the vendor.
CVE-2026-25289 is a critical stack-based buffer overflow vulnerability in Qualcomm Snapdragon products. It occurs due to memory corruption when processing Device Capability Extended attributes in certain NAN Service Discovery Frames with invalid length values. The flaw can lead to complete compromise of confidentiality, integrity, and availability without requiring user interaction.
CVE-2026-25288 is a high severity buffer over-read vulnerability (CWE-126) in Qualcomm Snapdragon products. It causes a transient denial of service (DoS) when processing a short target wake time channel usage response frame with insufficient packet size. The vulnerability affects multiple Snapdragon chipsets and related components. There is no vendor advisory or patch information currently available. The CVSS score is 7.4, indicating a high impact on availability without confidentiality or integrity impact.
CVE-2026-24084 is a high severity vulnerability in Qualcomm Snapdragon products involving a weak security identifier mechanism. The issue arises from a weak configuration where the User Equipment (UE) does not verify the consistency of its additional security capabilities with replayed capabilities. This could allow an attacker to exploit the inconsistency in security capabilities verification. The vulnerability has a CVSS score of 7.5, indicating a significant impact on confidentiality without requiring privileges or user interaction.
CVE-2026-24083 is a high-severity vulnerability in Qualcomm Snapdragon QCA6696 involving memory corruption caused by untrusted pointer dereference when processing IOCTL device driver requests with invalid arguments. This flaw can lead to confidentiality, integrity, and availability impacts. No official patch or remediation guidance is currently available from the vendor.
CVE-2026-24080 is a high severity buffer overflow vulnerability in Qualcomm Snapdragon fingerprint TA. It involves memory corruption triggered by malformed request parameters. The flaw affects specific Snapdragon versions including QCA6696, SW6100, WSA8840, and WSA8845. The vulnerability has a CVSS score of 7.8, indicating significant impact on confidentiality, integrity, and availability. No official patch or remediation guidance is currently available from the vendor. There are no known exploits in the wild at this time.