Congo Firmware
by Qualcomm
CVEs (8)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-57545 | Hig | 0.51 | 7.8 | 0.00 | Oct 6, 2026 | Memory corruption when processing draw objects of incorrect type during graphics command list execution. | ||
| CVE-2026-57537 | Hig | 0.51 | 7.8 | 0.00 | Oct 6, 2026 | Memory Corruption when accessing and modifying geographic mapping data concurrently without proper synchronization. | ||
| CVE-2026-57546 | Hig | 0.49 | 7.5 | 0.00 | Oct 6, 2026 | Transient DOS when processing a continuous receive command with a zero-sized global configuration override. | ||
| CVE-2026-25275 | Hig | 0.49 | 7.5 | 0.00 | Sep 17, 2026 | Transient DOS when processing authentication frames with invalid FILS information element header lengths. | ||
| CVE-2026-25294 | Hig | 0.48 | 7.4 | 0.00 | Sep 17, 2026 | Transient DOS while parsing frame during channel usage. | ||
| CVE-2026-25274 | Med | 0.44 | 6.7 | 0.00 | Oct 6, 2026 | Memory Corruption when processing concurrent DMA buffer allocation and deallocation commands without proper synchronization. | ||
| CVE-2026-25273 | Med | 0.44 | 6.7 | 0.00 | Oct 6, 2026 | Memory Corruption when processing camera operations due to out-of-bounds write during driver updates. | ||
| CVE-2026-25270 | Med | 0.44 | 6.7 | 0.00 | Oct 6, 2026 | Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver. |
- risk 0.51cvss 7.8epss 0.00
Memory corruption when processing draw objects of incorrect type during graphics command list execution.
- risk 0.51cvss 7.8epss 0.00
Memory Corruption when accessing and modifying geographic mapping data concurrently without proper synchronization.
- risk 0.49cvss 7.5epss 0.00
Transient DOS when processing a continuous receive command with a zero-sized global configuration override.
- risk 0.49cvss 7.5epss 0.00
Transient DOS when processing authentication frames with invalid FILS information element header lengths.
- risk 0.48cvss 7.4epss 0.00
Transient DOS while parsing frame during channel usage.
- risk 0.44cvss 6.7epss 0.00
Memory Corruption when processing concurrent DMA buffer allocation and deallocation commands without proper synchronization.
- risk 0.44cvss 6.7epss 0.00
Memory Corruption when processing camera operations due to out-of-bounds write during driver updates.
- risk 0.44cvss 6.7epss 0.00
Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver.