qualcomm — 29 disclosed vulnerabilities

Disclosed vulnerabilities where the NVD names qualcomm as an affected vendor, highest CVSS first.

CRITICAL 9.8CVE-2026-252542026-09-22
Improper authorization leads to Remote Code Execution via SocketIO interface.
software center
AI risk analysis on Exploit-DB.ai →
CRITICAL 9.6CVE-2026-252892026-08-04
Memory Corruption when processing Device Capability Extended attributes in certain NAN Service Discovery Frames with invalid length values.
sm7550p firmware · sm7550p · sm7635p firmware · sm7635p · sm7675 firmware · sm7675
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-252652026-09-22
Privilege escalation due to weak configuration while temporary file handling.
software center · windows
AI risk analysis on Exploit-DB.ai →
HIGH 8.8CVE-2026-252642026-09-22
Privilege escalation due to weak configuration during package extraction process.
software center · windows
AI risk analysis on Exploit-DB.ai →
HIGH 8.1CVE-2026-240792026-08-04
Cryptographic Issue while processing registration requests with malformed or missing authentication parameters.
ar8035 firmware · ar8035 · csra6620 firmware · csra6620 · csra6640 firmware · csra6640
AI risk analysis on Exploit-DB.ai →
HIGH 7.8CVE-2026-575592026-10-06
Memory corruption while processing service requests.
cologne firmware · cologne · fastconnect 6700 firmware · fastconnect 6700 · fastconnect 6900 firmware · fastconnect 6900
AI risk analysis on Exploit-DB.ai →
HIGH 7.8CVE-2026-575552026-10-06
Memory Corruption when executing system service routines due to improper handling of user input buffers.
cologne firmware · cologne · fastconnect 6700 firmware · fastconnect 6700 · fastconnect 6900 firmware · fastconnect 6900
AI risk analysis on Exploit-DB.ai →
HIGH 7.8CVE-2026-575542026-10-06
Memory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC invocations.
snapdragon g1 gen 2 gaming platform firmware · snapdragon g1 gen 2 gaming platform · ar8031 firmware · ar8031 · ar8035 firmware · ar8035
AI risk analysis on Exploit-DB.ai →
HIGH 7.8CVE-2026-575452026-10-06
Memory corruption when processing draw objects of incorrect type during graphics command list execution.
snapdragon g1 gen 2 gaming platform firmware · snapdragon g1 gen 2 gaming platform · ar8031 firmware · ar8031 · cologne firmware · cologne
AI risk analysis on Exploit-DB.ai →
HIGH 7.8CVE-2026-575372026-10-06
Memory Corruption when accessing and modifying geographic mapping data concurrently without proper synchronization.
congo firmware · congo · fastconnect 6200 firmware · fastconnect 6200 · fastconnect 6900 firmware · fastconnect 6900
AI risk analysis on Exploit-DB.ai →
HIGH 7.8CVE-2026-252912026-10-06
Memory corruption when performing concurrent operations on shared memory page lists due to lack of proper synchronization mechanisms.
sar1165p firmware · sar1165p · sc8380xp firmware · sc8380xp · snapdragon 662 mobile platform firmware · snapdragon 662 mobile platform
AI risk analysis on Exploit-DB.ai →
HIGH 7.8CVE-2026-252672026-10-06
Memory corruption when non-secure loader rewrites page tables before secure memory initialization.
qca6698au firmware · qca6698au · qca6797aq firmware · qca6797aq · qcc710 firmware · qcc710
AI risk analysis on Exploit-DB.ai →
HIGH 7.8CVE-2026-240832026-08-04
Memory Corruption while processing IOCTL device driver requests with invalid arguments.
qam8295p firmware · qam8295p · qca6696 firmware · qca6696 · sa8295p firmware · sa8295p
AI risk analysis on Exploit-DB.ai →
HIGH 7.8CVE-2026-240802026-08-04
Memory Corruption when handling malformed request parameters in the fingerprint TA.
qam8295p firmware · qam8295p · qca6574au firmware · qca6574au · qca6595au firmware · qca6595au
AI risk analysis on Exploit-DB.ai →
HIGH 7.8CVE-2026-213662026-08-04
Memory corruption while processing a packet with a size close to the maximum allowed value.
lemans au lgit firmware · lemans au lgit · lemansau firmware · lemansau · qam8255p firmware · qam8255p
AI risk analysis on Exploit-DB.ai →
HIGH 7.6CVE-2026-252922026-08-04
Memory Corruption when processing untrusted user input in the fastboot command handler for audio framework configuration.
sm6225p firmware · sm6225p · sm6450p firmware · sm6450p · sm6475p firmware · sm6475p
AI risk analysis on Exploit-DB.ai →
HIGH 7.5CVE-2026-575462026-10-06
Transient DOS when processing a continuous receive command with a zero-sized global configuration override.
congo firmware · congo · fastconnect 7800 firmware · fastconnect 7800 · orne firmware · orne
AI risk analysis on Exploit-DB.ai →
HIGH 7.5CVE-2026-240842026-08-04
Weak configuration when UE does not verify the consistency of its additional security capabilities with the replayed capabilities.
sdx57m firmware · sdx57m · sdx61 firmware · sdx61 · sdx71m firmware · sdx71m
AI risk analysis on Exploit-DB.ai →
HIGH 7.4CVE-2026-252882026-08-04
Transient DOS when processing a short target wake time channel usage response frame with insufficient packet size.
orne firmware · orne · palawan25 firmware · palawan25 · pandeiro firmware · pandeiro
AI risk analysis on Exploit-DB.ai →
HIGH 7.1CVE-2026-253022026-10-06
Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed.
xrv9209 firmware · xrv9209 · snapdragon g1 gen 2 gaming platform firmware · snapdragon g1 gen 2 gaming platform · ar8035 firmware · ar8035
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.7CVE-2026-252742026-10-06
Memory Corruption when processing concurrent DMA buffer allocation and deallocation commands without proper synchronization.
aqt1000 firmware · aqt1000 · cologne firmware · cologne · congo firmware · congo
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.7CVE-2026-252732026-10-06
Memory Corruption when processing camera operations due to out-of-bounds write during driver updates.
congo firmware · congo · cq8845s firmware · cq8845s · cq8850ns firmware · cq8850ns
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.7CVE-2026-252722026-10-06
Memory Corruption when processing camera CRE driver operations with improper handling of buffer limits during hardware update preparation.
snapdragon g1 gen 2 gaming platform firmware · snapdragon g1 gen 2 gaming platform · cologne firmware · cologne · cq2390m firmware · cq2390m
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.7CVE-2026-252702026-10-06
Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver.
snapdragon g1 gen 2 gaming platform firmware · snapdragon g1 gen 2 gaming platform · cologne firmware · cologne · congo firmware · congo
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.7CVE-2026-252692026-10-06
Memory corruption when processing camera requests with excessive batch and IO buffer configurations exceeds allocated memory size.
snapdragon g1 gen 2 gaming platform firmware · snapdragon g1 gen 2 gaming platform · cologne firmware · cologne · cq2390m firmware · cq2390m
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.7CVE-2026-240762026-08-04
Memory Corruption when processing registry values with incorrect types using a direct query method.
aqt1000 firmware · aqt1000 · cologne firmware · cologne · fastconnect 6200 firmware · fastconnect 6200
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.6CVE-2026-252632026-10-06
Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters.
snapdragon g1 gen 2 gaming platform firmware · snapdragon g1 gen 2 gaming platform · 5g fixed wireless access platform firmware · 5g fixed wireless access platform · 9205 lte modem firmware · 9205 lte modem
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.5CVE-2026-240782026-08-04
Information Disclosure when IPSec negotiation fails or is not established properly during NG-eCall SIP signaling.
5g fixed wireless access platform firmware · 5g fixed wireless access platform · ar8035 firmware · ar8035 · csra6620 firmware · csra6620
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.5CVE-2026-240772026-08-04
Information Disclosure when processing wireless network channel switch information with improperly formatted length fields.
aqt1000 firmware · aqt1000 · ar8035 firmware · ar8035 · csra6620 firmware · csra6620
AI risk analysis on Exploit-DB.ai →