Qualcomm Snapdragon X2 Elite Firmware
17 CVEs affecting Qualcomm Snapdragon X2 Elite Firmware. Latest disclosed: 2026-10-06. Critical: 0, High: 15.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-25283 | High | 8.8 | 2026-09-17 | Memory Corruption when copying unverified data from an external source exceeds the allocated buffer size. |
CVE-2026-25282 | High | 7.9 | 2026-09-17 | Transient DOS when processing unverified data from a neighboring system causes out of bound memory access. |
CVE-2026-57559 | High | 7.8 | 2026-10-06 | Memory corruption while processing service requests. |
CVE-2026-57555 | High | 7.8 | 2026-10-06 | Memory Corruption when executing system service routines due to improper handling of user input buffers. |
CVE-2026-25290 | High | 7.8 | 2026-09-17 | Memory Corruption when validating large data buffers from external sources using addition to check buffer length. |
CVE-2026-25280 | High | 7.8 | 2026-09-17 | Memory corruption when processing escape handling flow with insufficient user buffer sizes. |
CVE-2026-24075 | High | 7.8 | 2026-09-17 | Memory Corruption when multiple threads issue concurrent IOCTL requests to the device control handler due to improper synchronization and race conditions. |
CVE-2026-24074 | High | 7.8 | 2026-09-17 | Memory Corruption when processing data with large offset and length values exceeds buffer limits during data copy operations. |
CVE-2026-24073 | High | 7.8 | 2026-09-17 | Memory corruption when processing decode statistics due to insufficient validation of offset against structure size. |
CVE-2025-59607 | High | 7.8 | 2026-09-17 | Memory Corruption when copying large input data exceeds normal allocation limits. |
CVE-2026-25275 | High | 7.5 | 2026-09-17 | Transient DOS when processing authentication frames with invalid FILS information element header lengths. |
CVE-2026-25281 | High | 7.4 | 2026-09-17 | Transient DOS when processing large or numerous request buffers without sufficient memory allocation validation. |
CVE-2026-24081 | High | 7.4 | 2026-09-17 | Transient DOS when processing a channel map with insufficient used channels and adaptive frequency hopping is fully enabled. |
CVE-2026-25284 | High | 7.3 | 2026-09-17 | Information Disclosure when a pointer is reused after being deallocated. |
CVE-2026-25302 | High | 7.1 | 2026-10-06 | Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted a… |
CVE-2026-25274 | Medium | 6.7 | 2026-10-06 | Memory Corruption when processing concurrent DMA buffer allocation and deallocation commands without proper synchronization. |
CVE-2026-25261 | Medium | 6.7 | 2026-09-17 | Memory corruption while processing rear sensor IOCTL calls. |