Threat database

Memory corruption while processing service requests.

Memory Corruption when executing system service routines due to improper handling of user input buffers.

Memory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC invocations.

Transient DOS when processing a continuous receive command with a zero-sized global configuration override.

Memory corruption when processing draw objects of incorrect type during graphics command list execution.

Memory Corruption when accessing and modifying geographic mapping data concurrently without proper synchronization.

Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed.

Memory corruption when performing concurrent operations on shared memory page lists due to lack of proper synchronization mechanisms.

Memory Corruption when processing concurrent DMA buffer allocation and deallocation commands without proper synchronization.

Memory Corruption when processing camera operations due to out-of-bounds write during driver updates.

Memory Corruption when processing camera CRE driver operations with improper handling of buffer limits during hardware update preparation.

Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver.

CVE-2026-25269 is a medium severity vulnerability in Qualcomm Snapdragon products involving an out-of-bounds write due to memory corruption when processing camera requests with excessive batch and IO buffer configurations. This flaw can lead to high impact on confidentiality, integrity, and availability. The vulnerability affects multiple specific Snapdragon versions. No patch information is provided, and no known exploits are reported in the wild.

CVE-2026-25267 is a high-severity vulnerability in Qualcomm Snapdragon products where a missing authorization check allows a non-secure loader to rewrite page tables before secure memory initialization, leading to memory corruption. This flaw affects a wide range of specific Snapdragon hardware versions. The vulnerability has a CVSS 3.1 base score of 7.8, indicating significant impact on confidentiality, integrity, and availability. There is no information about available patches or vendor advisories. No known exploits are reported in the wild.

Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters.

Privilege escalation due to weak configuration while temporary file handling.

Privilege escalation due to weak configuration during package extraction process.

Exposed dangerous function lead to privilege escalation via gRPC server.

Improper authorization leads to Remote Code Execution via SocketIO interface.

CVE-2026-25294 is a high-severity vulnerability in Qualcomm Snapdragon products involving a buffer over-read (CWE-126) that causes a transient denial of service (DoS) during frame parsing in channel usage. It does not impact confidentiality or integrity but results in availability disruption. The issue affects multiple specific Snapdragon versions. No patch information is provided, and no known exploits are reported in the wild.