Snapdragon X2 Elite Firmware (Qualcomm) - vulnerabilities (CVEs)

17 CVEs, 4 in the last 30 days, 1 known versions, newest CVE from 2026-10-06. Vendor: Qualcomm.

CVEs of Snapdragon X2 Elite Firmware

• CVE-2026-57559 - CVSS 7.8 (high), 2026-10-06: Memory corruption while processing service requests.
• CVE-2026-57555 - CVSS 7.8 (high), 2026-10-06: Memory Corruption when executing system service routines due to improper handling of user input buffers.
• CVE-2026-25302 - CVSS 7.1 (high), 2026-10-06: Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted…
• CVE-2026-25274 - CVSS 6.7 (medium), 2026-10-06: Memory Corruption when processing concurrent DMA buffer allocation and deallocation commands without proper synchronization.
• CVE-2026-25290 - CVSS 7.8 (high), 2026-09-17: Memory Corruption when validating large data buffers from external sources using addition to check buffer length.
• CVE-2026-25284 - CVSS 7.3 (high), 2026-09-17: Information Disclosure when a pointer is reused after being deallocated.
• CVE-2026-25283 - CVSS 8.8 (high), 2026-09-17: Memory Corruption when copying unverified data from an external source exceeds the allocated buffer size.
• CVE-2026-25282 - CVSS 7.9 (high), 2026-09-17: Transient DOS when processing unverified data from a neighboring system causes out of bound memory access.
• CVE-2026-25281 - CVSS 7.4 (high), 2026-09-17: Transient DOS when processing large or numerous request buffers without sufficient memory allocation validation.
• CVE-2026-25280 - CVSS 7.8 (high), 2026-09-17: Memory corruption when processing escape handling flow with insufficient user buffer sizes.
• CVE-2026-25275 - CVSS 7.5 (high), 2026-09-17: Transient DOS when processing authentication frames with invalid FILS information element header lengths.
• CVE-2026-25261 - CVSS 7.8 (high), 2026-09-17: Memory corruption while processing rear sensor IOCTL calls.
• CVE-2026-24081 - CVSS 7.4 (high), 2026-09-17: Transient DOS when processing a channel map with insufficient used channels and adaptive frequency hopping is fully enabled.
• CVE-2026-24075 - CVSS 7.8 (high), 2026-09-17: Memory Corruption when multiple threads issue concurrent IOCTL requests to the device control handler due to improper synchronization and race conditions.
• CVE-2026-24074 - CVSS 7.8 (high), 2026-09-17: Memory Corruption when processing data with large offset and length values exceeds buffer limits during data copy operations.
• CVE-2026-24073 - CVSS 7.8 (high), 2026-09-17: Memory corruption when processing decode statistics due to insufficient validation of offset against structure size.
• CVE-2025-59607 - CVSS 7.8 (high), 2026-09-17: Memory Corruption when copying large input data exceeds normal allocation limits.