The vulnerability of embedded software developed by Qualcomm, caused by overflowing buffer spaces in the stack, allows attackers to disclose protected information.

The vulnerability of microprogramming software in embedded chips from Qualcomm arises due to overflow in the buffer on the stack. Exploiting this vulnerability can allow an attacker to disclose protected information during the processing of packets with invalid header lengths based on the EAVB BE...

📄 Qualcomm CVP Kernel Pointer Leak

The Qualcomm CVP driver exposes kernel pointers to userland by returning a hashed session ID derived from a kernel pointer using hash32ptr. This function is not a cryptographic hash but a reversible fold that XORs the upper and lower 32 bits of the pointer. Due to predictable ARM64 kernel virtual...

Qualcomm Atheros Coex Service Application code-related vulnerabilities

Qualcomm Atheros Coex Service Application is a hardware management driver software developed by Qualcomm Corporation in the United States. Version 8.0.0.255 of Qualcomm Atheros Coex Service Application contains a code vulnerability. This vulnerability stems from a service path that lacks quotatio...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-004898)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004898 advisory. In the Linux kernel, the following vulnerability has been resolved: rpmsg: qcomsmd: Fix refcount leak in qcomsmdparseedge ofparsephandle returns a node pointer with...

Azure Linux 3.0 Security Update: kernel (CVE-2025-37901)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-37901 advisory. - In the Linux kernel, the following vulnerability has been resolved: irqchip/qcom-mpm: Prevent crash when...

Azure Linux 3.0 Security Update: kernel (CVE-2025-37979)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-37979 advisory. - In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: Fix sc7280 lpass potential...

Azure Linux 3.0 Security Update: kernel (CVE-2025-38275)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38275 advisory. - In the Linux kernel, the following vulnerability has been resolved: phy: qcom-qmp-usb: Fix an NULL vs ISERR...

Azure Linux 3.0 Security Update: kernel (CVE-2025-22014)

"The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-22014 advisory. - In the Linux kernel, the following vulnerability has been resolved: soc: qcom: pdr: Fix the potential...

Azure Linux 3.0 Security Update: kernel (CVE-2024-46693)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-46693 advisory. - In the Linux kernel, the following vulnerability has been resolved: soc: qcom: pmicglink: Fix race during...

ROS-20260119-7334

A vulnerability in the soc/qcom/socinfo.c component of the Linux operating system kernel is related to reading outside the allowed data buffer boundaries. Exploitation of the vulnerability could allow an attacker to gain access to sensitive data and cause a denial of service...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001482)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001482 advisory. An out-of-bounds OOB memory read flaw was found in the Qualcomm IPC router protocol in the Linux kernel. A missing sanity check allows a local attacker to gain acces...

Fedora 43 : linux-firmware (2026-2cebf295af)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-2cebf295af advisory. Update to 20260110: update firmware for MT7925 WiFi device mediatek MT7925: update bluetooth firmware to 20260106153314 mediatek MT7920: update bluetooth...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003408)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003408 advisory. In all Qualcomm products with Android releases from CAF using the Linux kernel, during DMA allocation, due to wrong data type of size, allocation size gets truncated...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002740)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002740 advisory. In all Qualcomm products with Android releases from CAF using the Linux kernel, during DMA allocation, due to wrong data type of size, allocation size gets truncated...

Qualcomm Driver Vulnerability - Lenovo Support US

No description provided...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: audioreach: fixed the potential null pointer dereferencing issue. It is possible that the topology parsing function audioreachwidgetloadmodulecommon might return NULL or an error pointer. A NULL check should be added ...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: dmaengine: qcom: bamdma: Fixed error handling for num-channels/ees When there is no clock specified in the device tree, there is no way to ensure that BAM is enabled. This often occurs for remotely controlled or remotely power...

CVE-2018-21074

An issue was discovered on Samsung mobile devices with M6.x Exynos or Qualcomm chipsets software. There is information disclosure from a Trustlet via the debug log. The Samsung ID is SVE-2017-10638 April 2018...

CVE-2018-12005

An unprivileged user can issue a binder call and cause a system halt in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU,...

CVE-2017-18676

An issue was discovered on Samsung mobile devices with N7.0 Qualcomm chipsets software. There is an RKP kernel protection bypass in which unwanted memory mappings may occur because of a lack of MSR trapping. The Samsung ID is SVE-2016-7901 April 2017...