CVE-2026-25258 is a high-severity vulnerability in Qualcomm Snapdragon products involving an out-of-bounds read due to memory corruption when processing IOCTL calls for escape operations. This vulnerability affects multiple Snapdragon components and chipsets. It has a CVSS 3.1 score of 7.8, indicating a significant impact on confidentiality, integrity, and availability. No official patch or remediation guidance is currently provided by the vendor. There are no known exploits in the wild at this time.
CVE-2026-24092 is a high-severity vulnerability in Qualcomm Snapdragon devices involving memory corruption triggered by processing fastboot commands to set display mode. The flaw is due to improper validation of the syntactic correctness of input. This vulnerability can lead to complete confidentiality, integrity, and availability compromise. No patch or official remediation has been confirmed yet. The affected versions are not explicitly stated.
CVE-2026-24091 is a high severity vulnerability in Qualcomm Snapdragon devices involving memory corruption triggered by improperly formatted fastboot commands. The flaw stems from improper validation of the syntactic correctness of input, classified under CWE-1286. This vulnerability can lead to complete compromise of confidentiality, integrity, and availability. No patch or official remediation guidance has been provided yet, and no known exploits are reported in the wild. The affected versions are not explicitly stated.
CVE-2026-24090 is a high-severity vulnerability in Qualcomm Snapdragon devices involving a cryptographic issue during the processing of partition table entries. This flaw allows unauthorized modification of the boot flow due to missing authentication for a critical function. The vulnerability has a CVSS score of 7.1, indicating significant impact on confidentiality and integrity but no impact on availability. No official patch or remediation guidance is currently available from the vendor. There are no known exploits in the wild at this time.
CVE-2026-24089 is a high-severity vulnerability in Qualcomm Snapdragon devices involving memory corruption triggered by processing fastboot commands with invalid input. The flaw relates to improper validation of the syntactic correctness of input data, classified under CWE-1286. This vulnerability can lead to significant confidentiality, integrity, and availability impacts. No official patch or remediation guidance has been provided yet.
CVE-2026-24088 is a high-severity vulnerability in Qualcomm Snapdragon devices involving a cryptographic issue that permits unauthorized write access to load a customized bootloader. This occurs due to missing authentication for a critical function when processing a specific partition. The vulnerability can lead to full compromise of confidentiality, integrity, and availability of the affected device.
CVE-2026-24087 is a high-severity vulnerability in Qualcomm Snapdragon devices involving memory corruption triggered by processing fastboot OEM commands. The flaw relates to improper validation of the syntactic correctness of input, classified under CWE-1286. This vulnerability can lead to complete confidentiality, integrity, and availability compromise. No patch or official remediation guidance is currently available, and no known exploits are reported in the wild.
CVE-2026-24085 is a high-severity stack-based buffer overflow vulnerability in Qualcomm Snapdragon devices caused by improper initialization of a variable when processing display command line information. This memory corruption issue can lead to complete compromise of confidentiality, integrity, and availability. No patch or official remediation guidance is currently available from the vendor. The vulnerability requires privileged access and does not involve user interaction. There are no known exploits in the wild at this time.
CVE-2025-59614 is a medium severity vulnerability in Qualcomm Snapdragon products involving an out-of-bounds write due to memory corruption when sending a random number generator command with an insufficient output buffer size. This flaw affects multiple Snapdragon components and chipsets. The vulnerability can impact confidentiality, integrity, and availability. No official patch or remediation guidance is currently provided by the vendor. No known exploits are reported in the wild.
CVE-2025-59613 is a stack-based buffer overflow vulnerability in Qualcomm Snapdragon products. It occurs due to memory corruption when the output buffer size is smaller than the input buffer size during a data copying operation. The vulnerability affects multiple Qualcomm Snapdragon platforms and related components. The CVSS score is 6.7, indicating a medium severity level. No official patch or remediation information is currently available from the vendor. There are no known exploits in the wild at this time.
CVE-2025-59612 is a stack-based buffer overflow vulnerability (CWE-121) in Qualcomm Snapdragon products caused by memory corruption in Windows drivers when processing incorrect trusted application requests. It affects multiple Qualcomm Snapdragon platforms and related components. The vulnerability has a CVSS score of 6.7, indicating a medium severity level. There is no information about available patches or official remediation at this time. No known exploits in the wild have been reported.
CVE-2025-59611 is a medium severity vulnerability in Qualcomm Snapdragon products involving an out-of-bounds write due to lack of input validation in diagnostic services. This memory corruption issue affects a broad range of Snapdragon platforms and related components. The vulnerability has a CVSS score of 6.7, indicating a significant impact on confidentiality, integrity, and availability. No official patch or remediation guidance has been published yet, and no known exploits are reported in the wild.
CVE-2025-59606 is a high-severity vulnerability in Qualcomm Snapdragon platforms that causes memory corruption due to a NULL pointer dereference triggered by heap memory exhaustion during secure data initialization. This flaw affects a wide range of Qualcomm Snapdragon products and platforms. The vulnerability can lead to high impact on confidentiality, integrity, and availability. No official patch or remediation guidance has been provided yet by the vendor.
CVE-2025-59605 is a high severity vulnerability in Qualcomm Snapdragon products involving an out-of-bounds write due to processing device identifier strings that exceed expected lengths. This memory corruption issue affects a wide range of Snapdragon platforms and related components. The vulnerability has a CVSS score of 7.8, indicating significant impact on confidentiality, integrity, and availability. No official patch or remediation guidance has been provided yet. There are no known exploits in the wild at this time.
CVE-2025-59604 is a high severity vulnerability in Qualcomm Snapdragon devices involving a NULL pointer dereference that causes memory corruption during a memory copy operation. This issue can lead to high impact on confidentiality, integrity, and availability. No affected versions or patch information are currently provided.
Information Disclosure when resetting device to factory default settings through powerline interface allows unauthorized access to device configuration.
CVE-2026-25293 is a critical vulnerability in Qualcomm Snapdragon QCA7005 involving a buffer overflow caused by incorrect authorization in the PLC firmware. This flaw can lead to a complete compromise of confidentiality, integrity, and availability without requiring user interaction. The vulnerability has a high CVSS score of 9.6, indicating severe impact. No official patch or remediation guidance is currently available from the vendor. There are no known exploits in the wild at this time.