TI-2026-20407 CVE-2026-25275 · GHSA-r23j-xxqv-w996
Buffer Over-read in WLAN Firmware
Priority LOW 39
Transient DOS when processing authentication frames with invalid FILS information element header lengths.
Qualcomm
Records3060All Threatist records
Exploited (KEV)12In CISA KEV
CVSS critical678CVSS 9.0–10.0
CVSS high1984CVSS 7.0–8.9
Exploited now
Qualcomm records in CISA KEVTI-2026-17287 Qualcomm Multiple Chipsets Memory Corruption Vulnerability TI-2025-15440 Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability TI-2025-15441 Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability TI-2025-19908 Qualcomm Multiple Chipsets Use-After-Free Vulnerability TI-2024-28736 Qualcomm Multiple Chipsets Use-After-Free Vulnerability TI-2022-06419 Qualcomm Multiple Chipsets Use-After-Free Vulnerability
Components
Products in the NVD configurations · select one to filter the recordsRecords
10 records in Cq8845s Firmware · all components
TI-2026-68015 CVE-2026-57545 · GHSA-qqr8-h8rq-fg5g
Untrusted pointer dereference in Qualcomm Snapdragon graphics
Priority LOW 35
Memory corruption when processing draw objects of incorrect type during graphics command list execution.
TI-2026-67912 CVE-2026-25291 · GHSA-c8r4-38x4-695j
Use after free in Qualcomm Snapdragon graphics
Priority LOW 34
Memory corruption when performing concurrent operations on shared memory page lists due to lack of proper synchronization mechanisms.
TI-2026-67913 CVE-2026-25302 · GHSA-5mfp-688h-g4r8
Improper Verification of Cryptographic Signature in Boot
Priority LOW 32
Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed.
TI-2026-20421 CVE-2026-25294 · GHSA-59fm-5gr7-cvvq
Buffer Over-read in WLAN Firmware
Priority LOW 32
Transient DOS while parsing frame during channel usage.
TI-2026-19408 CVE-2026-24081 · GHSA-7gh6-gjx3-mf8w
Buffer Over-read in BT Controller
Priority LOW 32
Transient DOS when processing a channel map with insufficient used channels and adaptive frequency hopping is fully enabled.
TI-2026-67910 CVE-2026-25273 · GHSA-4rv6-wj6g-mxj9
Out-of-bounds write in Qualcomm Snapdragon camera driver
Priority LOW 30
Memory Corruption when processing camera operations due to out-of-bounds write during driver updates.
TI-2026-67909 CVE-2026-25272 · GHSA-mrrc-xp76-r45x
Out-of-bounds write in Qualcomm Snapdragon camera driver
Priority LOW 30
Memory Corruption when processing camera CRE driver operations with improper handling of buffer limits during hardware update preparation.
TI-2026-67908 CVE-2026-25270 · GHSA-w5mm-g344-7j64
Out-of-bounds write in Qualcomm Snapdragon camera driver
Priority LOW 30
Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver.
TI-2026-67907 CVE-2026-25269 · GHSA-j79m-pvj7-824v
Out-of-bounds write in Qualcomm Snapdragon camera driver
Priority LOW 30
Memory corruption when processing camera requests with excessive batch and IO buffer configurations exceeds allocated memory size.