Snapdragon X2 Elite Firmware
by Qualcomm
CVEs (17)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-25283 | Hig | 0.57 | 8.8 | 0.00 | Sep 17, 2026 | Memory Corruption when copying unverified data from an external source exceeds the allocated buffer size. | ||
| CVE-2026-57559 | Hig | 0.51 | 7.8 | 0.00 | Oct 6, 2026 | Memory corruption while processing service requests. | ||
| CVE-2026-57555 | Hig | 0.51 | 7.8 | 0.00 | Oct 6, 2026 | Memory Corruption when executing system service routines due to improper handling of user input buffers. | ||
| CVE-2026-25290 | Hig | 0.51 | 7.8 | 0.00 | Sep 17, 2026 | Memory Corruption when validating large data buffers from external sources using addition to check buffer length. | ||
| CVE-2026-25282 | Hig | 0.51 | 7.9 | 0.00 | Sep 17, 2026 | Transient DOS when processing unverified data from a neighboring system causes out of bound memory access. | ||
| CVE-2026-25280 | Hig | 0.51 | 7.8 | 0.00 | Sep 17, 2026 | Memory corruption when processing escape handling flow with insufficient user buffer sizes. | ||
| CVE-2026-24075 | Hig | 0.51 | 7.8 | 0.00 | Sep 17, 2026 | Memory Corruption when multiple threads issue concurrent IOCTL requests to the device control handler due to improper synchronization and race conditions. | ||
| CVE-2026-24074 | Hig | 0.51 | 7.8 | 0.00 | Sep 17, 2026 | Memory Corruption when processing data with large offset and length values exceeds buffer limits during data copy operations. | ||
| CVE-2026-24073 | Hig | 0.51 | 7.8 | 0.00 | Sep 17, 2026 | Memory corruption when processing decode statistics due to insufficient validation of offset against structure size. | ||
| CVE-2025-59607 | Hig | 0.51 | 7.8 | 0.00 | Sep 17, 2026 | Memory Corruption when copying large input data exceeds normal allocation limits. | ||
| CVE-2026-25275 | Hig | 0.49 | 7.5 | 0.00 | Sep 17, 2026 | Transient DOS when processing authentication frames with invalid FILS information element header lengths. | ||
| CVE-2026-25281 | Hig | 0.48 | 7.4 | 0.00 | Sep 17, 2026 | Transient DOS when processing large or numerous request buffers without sufficient memory allocation validation. | ||
| CVE-2026-24081 | Hig | 0.48 | 7.4 | 0.00 | Sep 17, 2026 | Transient DOS when processing a channel map with insufficient used channels and adaptive frequency hopping is fully enabled. | ||
| CVE-2026-25284 | Hig | 0.47 | 7.3 | 0.00 | Sep 17, 2026 | Information Disclosure when a pointer is reused after being deallocated. | ||
| CVE-2026-25302 | Hig | 0.46 | 7.1 | 0.00 | Oct 6, 2026 | Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed. | ||
| CVE-2026-25274 | Med | 0.44 | 6.7 | 0.00 | Oct 6, 2026 | Memory Corruption when processing concurrent DMA buffer allocation and deallocation commands without proper synchronization. | ||
| CVE-2026-25261 | Med | 0.44 | 6.7 | 0.00 | Sep 17, 2026 | Memory corruption while processing rear sensor IOCTL calls. |
- risk 0.57cvss 8.8epss 0.00
Memory Corruption when copying unverified data from an external source exceeds the allocated buffer size.
- risk 0.51cvss 7.8epss 0.00
Memory corruption while processing service requests.
- risk 0.51cvss 7.8epss 0.00
Memory Corruption when executing system service routines due to improper handling of user input buffers.
- risk 0.51cvss 7.8epss 0.00
Memory Corruption when validating large data buffers from external sources using addition to check buffer length.
- risk 0.51cvss 7.9epss 0.00
Transient DOS when processing unverified data from a neighboring system causes out of bound memory access.
- risk 0.51cvss 7.8epss 0.00
Memory corruption when processing escape handling flow with insufficient user buffer sizes.
- risk 0.51cvss 7.8epss 0.00
Memory Corruption when multiple threads issue concurrent IOCTL requests to the device control handler due to improper synchronization and race conditions.
- risk 0.51cvss 7.8epss 0.00
Memory Corruption when processing data with large offset and length values exceeds buffer limits during data copy operations.
- risk 0.51cvss 7.8epss 0.00
Memory corruption when processing decode statistics due to insufficient validation of offset against structure size.
- risk 0.51cvss 7.8epss 0.00
Memory Corruption when copying large input data exceeds normal allocation limits.
- risk 0.49cvss 7.5epss 0.00
Transient DOS when processing authentication frames with invalid FILS information element header lengths.
- risk 0.48cvss 7.4epss 0.00
Transient DOS when processing large or numerous request buffers without sufficient memory allocation validation.
- risk 0.48cvss 7.4epss 0.00
Transient DOS when processing a channel map with insufficient used channels and adaptive frequency hopping is fully enabled.
- risk 0.47cvss 7.3epss 0.00
Information Disclosure when a pointer is reused after being deallocated.
- risk 0.46cvss 7.1epss 0.00
Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed.
- risk 0.44cvss 6.7epss 0.00
Memory Corruption when processing concurrent DMA buffer allocation and deallocation commands without proper synchronization.
- risk 0.44cvss 6.7epss 0.00
Memory corruption while processing rear sensor IOCTL calls.