CVE-2026-21375

CVE-2026-21375 describes memory corruption when an output buffer is accessed without validating its size during IOCTL processing. The issue is reported in Qualcomm context, with CVSS 3.1 base score 7.8 (HIGH) and local, low exploit complexity, no user interaction required. Descriptions across NVD...

CVE-2026-21374 Buffer Over-read in Camera

Memory Corruption when processing auxiliary sensor input/output control commands with insufficient buffer size validation...

CVE-2026-21373

CVE-2026-21373 describes memory corruption in the camera subsystem occurring when an IOCTL path accesses an output buffer without validating its size. This leads to a potential buffer over-read/overflow, as indicated by the NVD entry. The CVSS v3.1 vector shows a HIGH impact with local attack vec...

CVE-2026-21372 Heap-Based Buffer Overflow in Power Management IC

Memory Corruption when sending IOCTL requests with invalid buffer sizes during memcpy operations...

CVE-2025-47390

CVE-2025-47390 describes memory corruption during preprocessing of an IOCTL request in the JPEG driver (also referenced as a Camera-related issue). The vulnerability is categorized with high impact (CVSSv3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) and requires local access with low privileges; ther...

CVE-2026-21376: Buffer Over-read

Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver...

CVE-2026-21375: Buffer Over-read

Memory Corruption when accessing an output buffer without validating its size during IOCTL processing...

CVE-2025-54602: Concurrent Execution using Shared Resource with Improper Synchronization

An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930, and W1000. Improper synchronization on a global variable leads to a use-after-free. An attacker can trigger a race condition by invoking ...

CVE-2025-54602

An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930, and W1000. Improper synchronization on a global variable leads to a use-after-free. An attacker can trigger a race condition by invoking ...

CVE-2025-54601: Concurrent Execution using Shared Resource with Improper Synchronization

An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor amd Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930, and W1000. Improper synchronization on a global variable leads to a double free. An attacker can trigger a race condition by invoking an...

CVE-2025-47390: Buffer Over-read

Memory corruption while preprocessing IOCTL request in JPEG driver...

CVE-2026-21373: Buffer Over-read

Memory Corruption when accessing an output buffer without validating its size during IOCTL processing...

CVE-2026-21372: Heap-based Buffer Overflow

Memory Corruption when sending IOCTL requests with invalid buffer sizes during memcpy operations...

CVE-2026-21380: Use After Free

Memory Corruption when using deprecated DMABUF IOCTL calls to manage video memory...

CVE-2025-54602

An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930, and W1000. Improper synchronization on a global variable leads to a use-after-free. An attacker can trigger a race condition by invoking ...

CVE-2025-54602

A vulnerability exists in the Wi-Fi driver of the Samsung Mobile Processor and Wearable Processor (specifically models Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930, and W1000 ). The root cause is improper synchronization on a global variable, which leads to a use-after-free con...

CVE-2026-21378: Buffer Over-read

Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver...

SUSE CVE-2026-31390

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix memory leak in xevmmadviseioctl When checkboargsaresane validation fails, jump to the new freevmas cleanup label to properly free the allocated resources. This ensures proper cleanup in this error path. cherry picked...

CVE-2026-31390

A flaw was found in the Linux kernel's drm/xe component. A local user could exploit this vulnerability when validation fails during the xevmmadviseioctl operation, leading to improper cleanup of allocated resources. This can result in a memory leak, potentially causing system instability or a...

EUVD-2026-18762

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix memory leak in xevmmadviseioctl When checkboargsaresane validation fails, jump to the new freevmas cleanup label to properly free the allocated resources. This ensures proper cleanup in this error path. cherry picked...