CVE-2026-25284

CVE-2026-25284 is a buffer over-read in Qualcomm's OOBM component, caused by a pointer being reused after being deallocated . This leads to Information Disclosure with a CVSS 3.1 score of 7.3 (HIGH) , exploitable via a local vector with low privileges and changed scope . No in-the-wild exploitati...

CVE-2026-25283

CVE-2026-25283 is a stack-based buffer overflow in OOBM , a component maintained by Qualcomm . The vulnerability is caused by memory corruption when unverified data from an external source is copied into a buffer larger than the allocated size. The CNA-assigned CVSS 3.1 score is 8.8 (HIGH) with a...

CVE-2026-25282

CVE-2026-25282 is an out-of-bounds read in the OOBM component of a Qualcomm product. The vulnerability is triggered when unverified data from a neighboring system is processed, causing an out-of-bound memory access that results in a transient denial of service . The CNA-assigned CVSS 3.1 score is...

CVE-2026-25281

CVE-2026-25281 is an Allocation of Resources Without Limits or Throttling vulnerability in Qualcomm OOBM (Out-Of-Band Management). The root cause is insufficient memory allocation validation when processing large or numerous request buffers, leading to a transient denial of service . The CVSS 3.1...

CVE-2026-25280

CVE-2026-25280 is an out-of-bounds write (memory corruption) in the Qualcomm DSP Service , triggered by the escape handling flow when insufficient user buffer sizes are present. The vulnerability carries a CVSS 3.1 score of 7.8 (HIGH) with a local attack vector , low privileges required, and no u...

CVE-2026-25278

CVE-2026-25278 is a TOCTOU race condition in Qualcomm's automotive software platform based on QNX . The vulnerability occurs during I2C transfer request processing , where a race between memory allocation and data copying leads to memory corruption . The CVSS v3.1 score is 7.8 (High) with a local...

CVE-2026-25275

CVE-2026-25275 is a buffer over-read in Qualcomm WLAN Firmware that results in a transient denial of service when the firmware processes authentication frames containing invalid FILS (Fast Initial Link Setup) information element header lengths . The vulnerability is network-exploitable with no pr...

CVE-2026-25261

This vulnerability involves a memory corruption issue caused by an untrusted pointer dereference in the camera system. The flaw occurs specifically while processing rear sensor IOCTL calls . While the documents do not specify the exact affected product or version, the vulnerability could lead to ...

CVE-2026-24081

CVE-2026-24081 is a buffer over-read in the Qualcomm Bluetooth (BT) Controller that causes a transient denial of service when processing a channel map with insufficient used channels while adaptive frequency hopping is fully enabled. The vulnerability requires no privileges or user interaction, o...

CVE-2026-24075

CVE-2026-24075 is a buffer over-read (memory corruption) vulnerability in Qualcomm's IPC (inter-process communication) subsystem. The root cause is improper synchronization and race conditions that occur when multiple threads issue concurrent IOCTL requests to the device control handler. The vuln...

CVE-2026-24074

CVE-2026-24074 is an out-of-bounds write in a Video component on Qualcomm platforms. The root cause is memory corruption that occurs when data with large offset and length values exceeds buffer limits during data copy operations. The CVSS 3.1 score is 7.8 (HIGH) with a local attack vector, low co...

CVE-2026-24073

CVE-2026-24073 is an out-of-bounds write in Qualcomm's Video component, specifically in the processing of decode statistics . The root cause is insufficient validation of an offset against structure size , leading to memory corruption. The vulnerability is rated CVSS 3.1 7.8 (HIGH) with a local a...

CVE-2025-59607

CVE-2025-59607 is an Untrusted Pointer Dereference vulnerability in Qualcomm Windows Compute , where memory corruption occurs when copying large input data that exceeds normal allocation limits. The flaw is rated HIGH (CVSS 7.8) with a local attack vector, low complexity, and low privileges requi...

CVE-2026-50604

CVE-2026-50604 affects the Acer Agent Service component bundled with NitroSense and PredatorSense software. The root cause is a missing authentication check during the socket handshake process, which allows an unauthenticated local attacker to establish a connection and access functionality that ...

CVE-2026-50603

CVE-2026-50603 affects the Acer Agent Service component bundled with NitroSense and PredatorSense . The root cause is a hard-coded AES encryption key embedded in the software, which under certain circumstances allows a local attacker (with no privileges and no user interaction) to access protecte...

CVE-2026-92839

Canva Desktop versions prior to v1.125.0 are affected by a double decoding flaw in the application's deeplink handler. An attacker can exploit this to load arbitrary same-origin content under a victim's active session, resulting in a Low integrity impact with no confidentiality or availability im...

CVE-2026-86311

The Photo Gallery by 10Web – Mobile-Friendly Image Gallery WordPress plugin (versions up to and including 1.8.44 ) is vulnerable to Stored Cross-Site Scripting (XSS) via its Shortcode Attributes due to insufficient input sanitization and output escaping. According to the initial description, the ...

CVE-2026-89064

All-in-One WP Migration and Backup for WordPress (≤ 7.110 ) contains an unauthenticated Insufficient Credential Protection flaw discovered by Jakub Herman. The Ai1wm_Main_Controller::init() method, registered on the admin_init hook, reads $_SERVER['PHP_AUTH_USER'] and $_SERVER['PHP_AUTH_PW'] from...

CVE-2026-92838

A DLL hijacking vulnerability in the GeoVision GV-Remote E-Map desktop application allows a local attacker to place a malicious DLL in a directory searched before the legitimate library location, achieving arbitrary code execution in the context of the GV-Remote E-Map process. Exploitation requir...

CVE-2026-81546

Affinity by Canva versions prior to 3.3.0 (September 2026 release) contain a stack-based buffer overflow caused by inadequate bounds checking when parsing Affinity document files. A threat actor could craft a malicious Affinity document that, when opened by a user, may lead to arbitrary code exec...