CVE-2026-21385

CVE-2026-21385 is a memory corruption vulnerability in the Qualcomm Display component (graphics) used by Qualcomm chipsets, caused by memory alignment handling during allocation. Exploitation has been observed in the wild in a limited, targeted manner, with attackers able to push malicious data t...

CVE-2026-24085

Technical details about CVE-2026-24085 are not publicly available in the provided documents; the memory corruption description is noted but no affected products, affected versions, root cause specifics, or fixes are disclosed. Monitor for updates.

CVE-2026-24089

CVE-2026-24089 describes memory corruption that occurs when processing fastboot commands with invalid input. The NVD entry lists a CVSS v3.1 base score of 7.2 (HIGH) with physical attack vector, low attack complexity, no user interaction, requiring high privileges, and a changed scope. The impact...

CVE-2026-24084

Technical details about CVE-2026-24084 are not publicly available in the provided documents. Monitor for updates from the listed sources; current entries only state a weak configuration related to UE security capability replay verification.

CVE-2026-25289

CVE-2026-25289 describes memory corruption/stack-based overflow when processing Device Capability Extended attributes in NAN Service Discovery Frames with invalid length values in WLAN firmware. The issue is tied to the firmware image referenced in the August 2026 Qualcomm security bulletin; no e...

CVE-2026-24090

Technical details (affected products, root cause, impact, and remediation) are not publicly available in the provided documents. Monitor for updates from the vendors and CVE feed.

CVE-2026-24087

Technical details (affected products/versions, root cause, exploitability, fixes) are not publicly available in the provided documents; monitor for updates.

CVE-2026-25288

CVE-2026-25288 refers to a transient denial-of-service in WLAN firmware when handling a short target wake time channel usage response frame built with insufficient packet size. Documented in multiple sources (CVE, NVD, CVE list, EUVD), this appears to affect WLAN firmware as reported, with root c...

CVE-2026-24079

Technical details are not publicly available in the provided documents. The available descriptions only mention a cryptographic issue during processing of registration requests with malformed or missing authentication parameters. Monitor for updates.

CVE-2026-25268

The CVE-2026-25268 issue is a stack-based buffer overflow in WLAN Host caused by memory corruption when processing invalid HT40 channel layouts during dynamic channel switching. Affects WLAN Host with a Local attack vector, requiring Low privileges and no user interaction, and with a changed scop...

CVE-2025-59610

CVE-2025-59610 represents a memory corruption vulnerability that occurs when processing IOCTL requests with mismatched API versions, caused by concurrent modification of a user-space buffer. The CVSS 3.1 vector (L/H/C/I/A) indicates a Local, High complexity, High privileges required, no user inte...

CVE-2026-24092

CVE-2026-24092 describes a memory corruption issue that occurs when processing fastboot commands to set the display mode. The available description does not specify the affected product/vendor/model, only noting a memory corruption vulnerability. The CVSS 3.1 score is 7.2 (High), with attack vect...

CVE-2025-47373

CVE-2025-47373 describes a memory corruption / out-of-bounds condition when accessing buffers with invalid length during a Trust Authority (TA) invocation in an automotive context. The CVSSv3.1 base score is 7.8 (High) with LOCAL attack vector, LOW privileges required, no user interaction, and fu...

CVE-2026-24088

Technical details are not publicly available in the provided documents for CVE-2026-24088. Monitor for updates.

CVE-2026-24091

Technical details about CVE-2026-24091 are not publicly available in the provided documents. Monitor for updates and new connected documents for affected products, versions, and fixes.

CVE-2026-24077

CVE-2026-24077 is described as an Information Disclosure vulnerability in Qualcomm WLAN Host related to processing wireless network channel switch information with improperly formatted length fields. The connected records (CVE-List and CVE enrichment) reference this as an Integer Underflow in the...

CVE-2026-24078

Technical details about CVE-2026-24078 are not publicly available in the provided documents. Monitor for updates from official bulletins.

CVE-2025-59604

CVE-2025-59604 is described as memory corruption during a memory copy operation caused by invalid writes from a null pointer. The connected documents do not specify affected product/vendor/component/version or concrete remediation details. The CVSS 3.1 metrics indicate high impact to confidential...

CVE-2026-25292

The CVE-2026-25292 issue is a memory corruption vulnerability in the fastboot command handler used for audio framework configuration in Automotive Linux OS. The root cause, as described, is processing untrusted user input, leading to memory corruption with high impact on confidentiality, integrit...

CVE-2025-47389

CVE-2025-47389 describes memory corruption caused by a buffer copy operation failing due to an integer overflow during attestation report generation. Documents identify the issue as applicable to an Automotive Platform, with the CVSS v3.1 base score 7.8 (HIGH) and LOCAL attack vector, LOW attack ...

CVE-2025-47385

CVE-2025-47385 involves memory corruption when accessing the Trusted Execution Environment (TEE) via the SCE-Mink register interface, due to improper privilege checks. Connected CVE records corroborate an improper access-control issue in the SCE-Mink component, with CVSSv3.1 score 7.8 (HIGH): loc...

CVE-2025-47392

CVE-2025-47392 describes a memory corruption issue that occurs when decoding corrupted satellite data files with invalid signature offsets. The NVD records a CVSS v3.1 base score of 8.8 (HIGH) with adjacent attack vector, no privileges or user interaction required, and high impact on confidential...

CVE-2025-59606

The CVE-2025-59606 entry describes a memory corruption flaw triggered by writing to invalid memory locations caused by heap exhaustion during secure data initialization. The CVSS 3.1 vector indicates a local, low-privilege, no-user-interaction exposure with high impact to confidentiality, integri...

CVE-2025-59615

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2025-47371

The CVE describes a transient denial-of-service in a UE when an LTE RLC packet with an invalid TB is received by the modem. Root cause: an LTE RLC packet with an invalid TB triggers a fault in the modem’s processing. Impact is reported as transient DOS to the UE; no additional exploit details or ...

CVE-2025-47407

CVE-2025-47407 describes a memory corruption in the DSP service during process creation caused by an allocation failure at the kernel level, linked to a TOCTOU race condition. Connected records identify a kernel-level allocation failure as the underlying trigger and the DSP service as the affecte...

CVE-2025-47391

CVE-2025-47391 corresponds to a memory corruption issue described in connected records as a stack-based buffer overflow in a camera driver, triggered during processing of a frame request from user. The CVSS 3.1 vector (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) indicates local attack vector with low pr...

CVE-2025-47402

Technical details about CVE-2025-47402 are not publicly provided in the supplied documents. Monitor for updates from vendors and security bulletins.

CVE-2025-47383

CVE-2025-47383 describes a weak configuration that may cause a cryptographic issue when a VoWiFi call is triggered from UE. Connected records repeat the description and list a CVSS v3.1 base score of 7.2 (HIGH) with NETWORK attack vector, low attack complexity, and high impact on confidentiality,...

CVE-2026-21367

Technical details such as affected vendors, products, versions, and root cause are not publicly provided in the connected documents. Monitor for updates from Red Hat, ENISA, CVE references, and vendor advisories for concrete remediation information.

CVE-2025-59616

CVE-2025-59616 is a memory corruption (use-after-free) flaw triggered when processing multiple IOCTL calls using the same buffer file descriptor input, due to accessing already freed memory. According to NVD, the CVSSv3.1 vector is AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H with a base score of 7.8 (HIG...

CVE-2026-21381

CVE-2026-21381 is described in connected records as a buffer over-read in WLAN firmware causing a transient denial-of-service when a service data frame with excessive length is processed during device matching over a neighborhood awareness network protocol. This CVE is associated with WLAN firmwa...

CVE-2025-47403

CVE-2025-47403 is a transient denial-of-service vulnerability in WLAN firmware related to processing a malformed Fast Transition (FT) response frame with an invalid header during wireless roaming. The issue affects the WLAN firmware component responsible for handling FT frames; the underlying cau...

CVE-2025-59600

The CVE-2025-59600 issue relates to a memory corruption condition arising when adding user-provided data without validating available buffer space, described as a Buffer Over-read in Graphics. The root cause is unchecked buffer capacity during data submission, leading to memory corruption. Docume...

CVE-2025-47398

CVE-2025-47398 involves memory corruption due to improper handling of memory pointers during deallocation of GPU memory buffers. Red Hat and CVE aggregations label it as a Use After Free issue in graphics memory, implying a vulnerability in the graphics subsystem where freed memory is mishandled,...

CVE-2025-59617

CVE-2025-59617 describes a memory corruption (likely use-after-free) when processing multiple IOCTL calls sharing the same buffer file descriptor. The issue is referenced under Computer Vision in CVE lists; concrete affected product/vendor/version are not specified in the provided documents. CVSS...

CVE-2025-47401

CVE-2025-47401 indicates a transient denial of service caused by a buffer over-read in the WLAN HAL during channel configuration while processing target power rate tables. The description across sources confirms the issue and impact to availability, but no concrete exploitation details, affected ...

CVE-2025-47397

CVE-2025-47397 describes a memory corruption vulnerability in GPU memory mapping using scatter-gather lists caused by unchecked IOMMU mapping errors. Affected component is involved in GPU memory mapping; the issue is exploitable locally with low privileges and no user interaction, with high impac...