Nixpkgs security tracker

Untriaged

Permalink CVE-2026-25292

7.6 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Physical (P)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Changed (C)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Physical (P)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Changed (C)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

created 3 weeks, 4 days ago Activity log

Created suggestion 3 weeks, 4 days ago

Improper Validation of Syntactic Correctness of Input in Automotive Linux OS

Memory Corruption when processing untrusted user input in the fastboot command handler for audio framework configuration.

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2026-…

Affected products

Snapdragon

==QCM6490
==QCA6564AU
==QAM8797P
==Pandeiro
==WCN6450
==WCN3910
==WCN7880
==LeMansAU
==WCN6755
==Snapdragon 695 5G Mobile Platform
==X1E80100
==QCM6125
==Kalpeni
==Snapdragon X32 5G Modem-RF System
==Themisto
==Qualcomm Video Collaboration VC3 Platform
==SA8620P
==Snapdragon Auto 5G Modem-RF Gen 2
==Snapdragon AR1+ Gen 1 Platform
==QCM4490
==Snapdragon 480+ 5G Mobile Platform
==QAM8295P
==XRV9209
==SD865 5G
==WCD9340
==SA7775P
==WSA8832
==QCA8386
==SXR2330P
==WSA8815
==QAMSRV1H
==QXM1083
==AR8035
==SSG2115P
==QPA1083BD
==QCA6391
==Snapdragon X35 5G Modem-RF System
==WSA8810
==QFW7124
==WCD9380
==QCN6224
==CQ8725S
==WCD9341
==QCA9367
==QCS2290
==Kobuk
==QCA6595
==WCD9385
==SDR753
==SA4150P
==QDX1010
==Palawan25
==Snapdragon XR2+ Gen 1 Platform
==Snapdragon 480 5G Mobile Platform
==Qualcomm Dragonwing X100 Accelerator Card
==IQ10 Series
==QCC710
==FastConnect 6700
==SA8255P
==SW5100P
==QCA6584AU
==QCA6698AQ
==QDU1000
==Snapdragon 8 Gen 2 Mobile Platform
==QLN1086BD
==QCS6690
==QDX1011
==Snapdragon X72 5G Modem-RF System
==QCS4290
==QCS8550
==LeMans_AU_LGIT
==SM8550P
==QCA6174A
==SA8145P
==CQ7790
==QMB715
==SA6150P
==Flight RB5 5G Platform
==QAM8397P
==SAR1165P
==SA8150P
==Orne
==Robotics RB5 Platform
==SDX81
==WCN7881
==WCN7861
==QXM1095
==QAMSRV1M
==QCA6595AU
==QCN9012
==FastConnect 7800
==QCA8337
==G1 Gen 1
==QRU1032
==QXM1096
==QCN9011
==SRV1L
==Qualcomm Dragonwing QRU100 Platform
==SA8155P
==QRB5165N
==WCD9335
==Snapdragon 662 Mobile Platform
==QCM8838
==SDA660
==SA8195P
==QCM4325
==QXM1093
==SA8295P
==QMP1000
==Snapdragon Wear Elite platform
==QCA6696
==WCN3990
==QCA6574
==SW5100
==WCD9390
==Milos_IOT
==SSG2125P
==SXR2350P
==WSA8835
==QCM4290
==QCA6797AQ
==SM8750P
==XRV7209
==WCD9378
==QPA1086BD
==Snapdragon 8 Elite
==SA6145P
==FWA Gen 5 Elite Platform
==SD662
==FastConnect 6900
==WSA8845H
==QCA9377
==Snapdragon 660 Mobile Platform
==Snapdragon 685 4G Mobile Platform
==WCN7860
==WCN3950
==SM6225P
==SA6155P
==SRV1H
==QCA8081
==Snapdragon W5+ Gen 1 Wearable Platform
==QCA6574AU
==QLN1083BD
==QCA6698AU
==Qualcomm Video Collaboration VC1 Platform
==QXM1094
==QDU1210
==QCA6574A
==SRV1M
==WSA8840
==Snapdragon 8 Elite Gen 5
==Qualcomm Video Collaboration VC5 Platform
==Snapdragon 8 Gen 3 Mobile Platform
==WCD9375
==QCA6688AQ
==QCA6678AQ
==QAM8255P
==SA7255P
==Snapdragon AR1 Gen 1 Platform
==WCN3980
==QCF8001
==QDU1110
==Snapdragon 7 Gen 4 Mobile Platform
==QCN6274
==Snapdragon 680 4G Mobile Platform
==Snapdragon X75 5G Modem-RF System
==SXR1230P
==SM6370
==SA510M
==Snapdragon XR2 5G Platform
==QCM2290
==QCS4490
==SA9000P
==WCD9370
==WSA8845
==SA8770P
==Snapdragon 8+ Gen 2 Mobile Platform
==QAM8620P
==G2 Gen 1
==WCD9395
==WCN3988
==QXM1086
==QCS410
==QEP8111
==Snapdragon 460 Mobile Platform
==QFW7114
==FastConnect 6200
==Snapdragon 4 Gen 1 Mobile Platform
==WSA8830
==FWA Gen 3 Ultra Platform
==QCA8695AU

Matching in nixpkgs

pkgs.snapdragon-profiler

None

nixos-unstable 2021.2
- nixpkgs-unstable 2021.2
nixos-26.05 2021.2
- nixos-26.05-small 2021.2
- nixpkgs-26.05-darwin 2021.2

Untriaged

Permalink CVE-2026-25289

9.6 CRITICAL

CVSS version (CVSS): 3.1
Attack Vector (AV): Adjacent (A)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Changed (C)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Adjacent (A)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Changed (C)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

created 3 weeks, 4 days ago Activity log

Created suggestion 3 weeks, 4 days ago

Stack-based Buffer Overflow in WLAN Firmware

Memory Corruption when processing Device Capability Extended attributes in certain NAN Service Discovery Frames with invalid length values.

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2026-…

Affected products

Snapdragon

==QCA6564AU
==QAM8797P
==WCN6450
==XG101002
==Pandeiro
==WCN7880
==WCN6755
==LeMansAU
==X1E80100
==Networking Pro 1210 Platform
==QCA8075
==QCM8550
==Themisto
==SD 8 Gen1 5G
==Snapdragon 6 Gen 4 Mobile Platform
==Snapdragon 7s Gen 3 Mobile Platform
==SA8620P
==Snapdragon Auto 5G Modem-RF Gen 2
==Snapdragon AR1+ Gen 1 Platform
==XRV9209
==SD865 5G
==WCD9340
==SA7775P
==QCN6432
==X2000094
==WSA8832
==QCF8000
==QCA6777AQ
==QCA8386
==SXR2330P
==XG101032
==WSA8815
==SXR2230P
==QAMSRV1H
==QXM1083
==SM7675P
==AR8035
==IQX7181
==SSG2115P
==QPA1083BD
==QCA6391
==Networking Pro 610 Platform
==WSA8810
==IPQ5332
==QFW7124
==WCD9380
==QCN6224
==CQ8725S
==X2000090
==Kobuk
==QCA6595
==WCD9385
==SDR753
==QCA6426
==Palawan25
==IPQ5312
==Snapdragon 870 5G Mobile Platform
==IQ10 Series
==QCA6554A
==QCC710
==SA8255P
==FastConnect 6700
==QCA6584AU
==Snapdragon 8 Gen 2 Mobile Platform
==QCA6698AQ
==QCN6422
==QLN1086BD
==QCS6690
==Snapdragon X72 5G Modem-RF System
==SM6650P
==QCS8550
==SM8550P
==LeMans_AU_LGIT
==QCC2073
==QCN6412
==CQ7790
==QMB715
==SAR1165P
==Snapdragon 865 5G Mobile Platform
==QAM8397P
==Orne
==SDX81
==CQ8750M
==WCN7881
==WCD9378C
==WCN7861
==QXM1095
==QAMSRV1M
==QXM1096
==FastConnect 7800
==QCA6595AU
==QCA8337
==QCN9012
==QCN9274
==Networking Pro 810 Platform
==QCN9011
==QCA0000
==X2000077
==IQX5121
==QCM8838
==X2000086
==IPQ9574
==QCN5124
==QXM1093
==IPQ5300
==QMP1000
==Snapdragon Wear Elite platform
==XG101039
==QCA6696
==SM7675
==Snapdragon 865+ 5G Mobile Platform
==QCA6574
==WCD9390
==SSG2125P
==SXR2350P
==WSA8835
==IPQ9554
==Milos_IOT
==SM8650Q
==QCA6797AQ
==SM8750P
==XRV7209
==WCD9378
==QPA1086BD
==Snapdragon 8 Elite
==Immersive Home 326 Platform
==FWA Gen 5 Elite Platform
==FastConnect 6900
==WSA8845H
==WCN7860
==SRV1H
==SM8635P
==QCN6402
==FastConnect 6800
==QCA8081
==X2000092
==WCN6740
==SM8635
==QCA6574AU
==SXR2250P
==QCA6698AU
==QLN1083BD
==QXM1094
==SM7635P
==QCA6574A
==SRV1M
==WSA8840
==Snapdragon 8 Elite Gen 5
==SAR2130P
==Snapdragon 8 Gen 3 Mobile Platform
==WCD9375
==IPQ9570
==QCA6688AQ
==QCA6678AQ
==QAM8255P
==SA7255P
==Milos
==QCA6787AQ
==Snapdragon AR1 Gen 1 Platform
==QCC2076
==QCF8001
==Snapdragon 7 Gen 4 Mobile Platform
==SXR1230P
==Immersive Home 3210 Platform
==Snapdragon X75 5G Modem-RF System
==QCN6274
==Snapdragon XR2 5G Platform
==Cologne
==SA9000P
==WCD9370
==WSA8845
==SA8770P
==Snapdragon 8+ Gen 2 Mobile Platform
==Snapdragon 8 Gen 1 Mobile Platform
==G2 Gen 1
==WCD9395
==WCN3988
==WCN6650
==QXM1086
==Networking Pro 1610 Platform
==QFW7114
==QCA6436
==FastConnect 6200
==SC8380XP
==IPQ5302
==WSA8830
==FWA Gen 3 Ultra Platform
==QCA8695AU

Matching in nixpkgs

pkgs.snapdragon-profiler

None

nixos-unstable 2021.2
- nixpkgs-unstable 2021.2
nixos-26.05 2021.2
- nixos-26.05-small 2021.2
- nixpkgs-26.05-darwin 2021.2

Untriaged

Permalink CVE-2026-21366

7.8 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

created 3 weeks, 4 days ago Activity log

Created suggestion 3 weeks, 4 days ago

Integer Overflow or Wraparound in Data Network Stack & Connectivity

Memory corruption while processing a packet with a size close to the maximum allowed value.

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2026-…

Affected products

Snapdragon

==SRV1M
==QCA6595
==LeMansAU
==SRV1L
==QCA6688AQ
==QAM8255P
==SA8155P
==SA7255P
==SA8195P
==SA8255P
==SA8295P
==SA8620P
==QCA6696
==QCA6698AQ
==QAM8295P
==SA9000P
==SA7775P
==QCA6797AQ
==LeMans_AU_LGIT
==SA8770P
==QCA8695AU
==SA6145P
==SA8145P
==QAM8620P
==SA6150P
==QAMSRV1H
==SRV1H
==SA6155P
==SA8150P
==SA8540P
==QCA6574AU
==QAMSRV1M
==QCA6595AU

Matching in nixpkgs

pkgs.snapdragon-profiler

None

nixos-unstable 2021.2
- nixpkgs-unstable 2021.2
nixos-26.05 2021.2
- nixos-26.05-small 2021.2
- nixpkgs-26.05-darwin 2021.2

Untriaged

Permalink CVE-2026-24077

6.5 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Adjacent (A)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): None (N)
Availability (A): None (N)
Modified Attack Vector (MAV): Adjacent (A)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): None (N)

created 3 weeks, 4 days ago Activity log

Created suggestion 3 weeks, 4 days ago

Integer Underflow (Wrap or Wraparound) in WLAN Host

Information Disclosure when processing wireless network channel switch information with improperly formatted length fields.

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2026-…

Affected products

Snapdragon

==QCM6490
==Snapdragon 8cx Compute Platform
==SM8475P
==WCN3910
==WCN7880
==WCN6755
==Snapdragon 695 5G Mobile Platform
==CSRA6620
==Snapdragon 8cx Compute Platform "Poipu Pro"
==QCM5430
==SD 8 Gen1 5G
==Snapdragon 6 Gen 4 Mobile Platform
==Snapdragon 7s Gen 3 Mobile Platform
==Qualcomm Video Collaboration VC3 Platform
==QRB5165M
==QCM4490
==Snapdragon 480+ 5G Mobile Platform
==SD865 5G
==WCD9340
==WSA8832
==QCA6777AQ
==WSA8815
==AQT1000
==SM7675P
==AR8035
==Snapdragon 8cx Gen 2 5G Compute Platform
==QCA6391
==WSA8810
==QFW7124
==WCD9380
==SM7435
==QCN6224
==WCD9341
==QCA6420
==QCS2290
==WCD9385
==Snapdragon X53 5G Modem-RF System
==Snapdragon 4 Gen 2 Mobile Platform
==Palawan25
==Snapdragon XR2+ Gen 1 Platform
==Robotics RB2 Platform
==Snapdragon 480 5G Mobile Platform
==Snapdragon 8cx Gen 2 5G Compute Platform "Poipu Pro"
==QCC710
==Snapdragon 782G Mobile Platform
==Snapdragon 870 5G Mobile Platform
==FastConnect 6700
==SM7325P
==SW5100P
==Snapdragon 778G 5G Mobile Platform
==Snapdragon X72 5G Modem-RF System
==SM6650P
==QCS4290
==Snapdragon X55 5G Modem-RF System
==Flight RB5 5G Platform
==Snapdragon 865 5G Mobile Platform
==Snapdragon 8c Compute Platform (SC8180XP-AD) "Poipu Lite"
==Snapdragon 888 5G Mobile Platform
==Orne
==Robotics RB5 Platform
==WCN7881
==WCN7861
==SA8155
==QCA6595AU
==QCN9012
==FastConnect 7800
==QCA8337
==G1 Gen 1
==QCN9011
==Snapdragon 7 Gen 1 Mobile Platform
==Snapdragon 7c+ Gen 3 Compute
==SA8155P
==QRB5165N
==Snapdragon 6 Gen 3 Mobile Platform
==Snapdragon 662 Mobile Platform
==SA8195P
==QCM4325
==QMP1000
==QCA6696
==QCA6574
==SM7675
==Snapdragon 8+ Gen 1 Mobile Platform
==Snapdragon 865+ 5G Mobile Platform
==SW5100
==WCD9390
==WSA8835
==Snapdragon 690 5G Mobile Platform
==SM8650Q
==QCA6797AQ
==SM8750P
==WCD9378
==Snapdragon 8 Elite
==CSRA6640
==SD662
==FastConnect 6900
==WSA8845H
==Snapdragon 685 4G Mobile Platform
==WCN7860
==WCN3950
==SM6225P
==SA6155P
==SM8635P
==Snapdragon 888+ 5G Mobile Platform
==FastConnect 6800
==QCA8081
==Snapdragon W5+ Gen 1 Wearable Platform
==QCA6574AU
==SM8635
==SM7635P
==QCA6574A
==Snapdragon 7+ Gen 2 Mobile Platform
==WSA8840
==Netrani
==Qualcomm Video Collaboration VC5 Platform
==Snapdragon 8 Gen 3 Mobile Platform
==WCD9375
==Snapdragon 8cx Gen 3 Compute Platform
==Milos
==QCA6787AQ
==WCN3980
==Snapdragon 778G+ 5G Mobile Platform
==QCN6274
==Snapdragon 680 4G Mobile Platform
==Snapdragon X75 5G Modem-RF System
==Snapdragon XR2 5G Platform
==QCM2290
==QCS4490
==QCA6430
==WCD9370
==WSA8845
==Snapdragon 8c Compute Platform "Poipu Lite"
==Snapdragon 8 Gen 1 Mobile Platform
==Snapdragon 6 Gen 1 Mobile Platform
==G2 Gen 1
==WCD9395
==WCN3988
==WCN6650
==Snapdragon 460 Mobile Platform
==QFW7114
==FastConnect 6200
==Snapdragon 4 Gen 1 Mobile Platform
==WSA8830
==FWA Gen 3 Ultra Platform
==WCD9335

Matching in nixpkgs

pkgs.snapdragon-profiler

None

nixos-unstable 2021.2
- nixpkgs-unstable 2021.2
nixos-26.05 2021.2
- nixos-26.05-small 2021.2
- nixpkgs-26.05-darwin 2021.2

Untriaged

Permalink CVE-2026-24080

7.8 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

created 3 weeks, 4 days ago Activity log

Created suggestion 3 weeks, 4 days ago

Buffer Copy Without Checking Size of Input in Biometrics

Memory Corruption when handling malformed request parameters in the fingerprint TA.

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2026-…

Affected products

Snapdragon

==SW6100
==XG101002
==WSA8840
==X2000090
==X2000077
==QCA6678AQ
==SW6100P
==QAM8255P
==SA8155P
==X2000086
==SA8195P
==Themisto
==FastConnect 6700
==SA8255P
==SA8295P
==XG101039
==QCA6696
==Cologne
==QAM8295P
==SA9000P
==WSA8845
==X2000094
==SA6145P
==XG101032
==SA8145P
==FastConnect 6900
==SA6150P
==WSA8845H
==SA6155P
==SA8150P
==SA8540P
==X2000092
==QCA6574AU
==WCD9378C
==QCA6595AU
==FastConnect 7800

Matching in nixpkgs

pkgs.snapdragon-profiler

None

nixos-unstable 2021.2
- nixpkgs-unstable 2021.2
nixos-26.05 2021.2
- nixos-26.05-small 2021.2
- nixpkgs-26.05-darwin 2021.2

Untriaged

Permalink CVE-2026-24076

6.7 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): Low (L)
Privileges Required (PR): High (H)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): High (H)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

created 3 weeks, 4 days ago Activity log

Created suggestion 3 weeks, 4 days ago

Buffer Copy Without Checking Size of Input in Bluetooth HOST

Memory Corruption when processing registry values with incorrect types using a direct query method.

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2026-…

Affected products

Snapdragon

==QCM6490
==WCD9341
==QCA6420
==Snapdragon 8cx Compute Platform
==XG101002
==WSA8840
==WCD9375
==X2000090
==QCA0000
==WCD9385
==X2000077
==Snapdragon 8cx Gen 3 Compute Platform
==QCA2064
==Snapdragon 7c+ Gen 3 Compute
==QCA2062
==Snapdragon 8cx Compute Platform "Poipu Pro"
==QCM5430
==Snapdragon 8cx Gen 2 5G Compute Platform "Poipu Pro"
==X2000086
==Snapdragon 7c Gen 2 Compute Platform "Rennell Pro"
==FastConnect 6700
==Qualcomm Video Collaboration VC3 Platform
==XG101039
==Cologne
==WSA8835
==QCA2065
==QCA6430
==QCA2066
==WCD9370
==WCD9340
==WSA8845
==Snapdragon 8c Compute Platform "Poipu Lite"
==X2000094
==SM6250
==XG101032
==FastConnect 6900
==WSA8815
==AQT1000
==WSA8845H
==Snapdragon 8c Compute Platform (SC8180XP-AD) "Poipu Lite"
==Snapdragon 8cx Gen 2 5G Compute Platform
==QCA6391
==Snapdragon 7c Compute Platform
==FastConnect 6800
==WSA8810
==FastConnect 6200
==SC8380XP
==X2000092
==WCD9378C
==WSA8830
==WCD9380
==FastConnect 7800

Matching in nixpkgs

pkgs.snapdragon-profiler

None

nixos-unstable 2021.2
- nixpkgs-unstable 2021.2
nixos-26.05 2021.2
- nixos-26.05-small 2021.2
- nixpkgs-26.05-darwin 2021.2

Untriaged

Permalink CVE-2026-24079

8.1 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Adjacent (A)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): None (N)
Modified Attack Vector (MAV): Adjacent (A)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): None (N)

created 3 weeks, 4 days ago Activity log

Created suggestion 3 weeks, 4 days ago

Missing Authentication for Critical Function in Data Modem

Cryptographic Issue while processing registration requests with malformed or missing authentication parameters.

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2026-…

Affected products

Snapdragon

==QCM6490
==SM8475P
==WCN3910
==WCN7880
==WCN6755
==Snapdragon 695 5G Mobile Platform
==CSRA6620
==QCM5430
==Snapdragon X32 5G Modem-RF System
==Themisto
==SD 8 Gen1 5G
==Snapdragon 6 Gen 4 Mobile Platform
==Snapdragon 7s Gen 3 Mobile Platform
==Qualcomm Video Collaboration VC3 Platform
==Snapdragon Auto 5G Modem-RF Gen 2
==QCM4490
==Snapdragon 480+ 5G Mobile Platform
==WCD9340
==WSA8832
==WSA8815
==SM7550P
==AR8035
==SM7675P
==QCA6391
==Snapdragon X35 5G Modem-RF System
==WSA8810
==QFW7124
==WCD9380
==SM7435
==QCN6224
==QCS2290
==WCD9385
==Snapdragon X53 5G Modem-RF System
==Snapdragon 4 Gen 2 Mobile Platform
==Palawan25
==Robotics RB2 Platform
==Snapdragon 480 5G Mobile Platform
==QCC710
==Snapdragon 782G Mobile Platform
==Snapdragon 870 5G Mobile Platform
==FastConnect 6700
==SM7325P
==SW5100P
==QCA6584AU
==Snapdragon 778G 5G Mobile Platform
==QCA6698AQ
==Snapdragon 8 Gen 2 Mobile Platform
==Snapdragon X72 5G Modem-RF System
==SM6650P
==QCS4290
==QCS8550
==SM8550P
==Snapdragon X55 5G Modem-RF System
==QCA6174A
==Snapdragon 865 5G Mobile Platform
==FSM20055
==Snapdragon 888 5G Mobile Platform
==Orne
==Snapdragon X65 5G Modem-RF System
==WCN7881
==WCN7861
==QCA6595AU
==QCN9012
==FastConnect 7800
==QCA8337
==G1 Gen 1
==SW6100
==QCN9011
==QCN9024
==Snapdragon 7 Gen 1 Mobile Platform
==Snapdragon 7c+ Gen 3 Compute
==SW6100P
==Snapdragon 6 Gen 3 Mobile Platform
==Snapdragon 662 Mobile Platform
==QCM4325
==SM7550
==Snapdragon Auto 5G Modem-RF
==QCN6024
==QMP1000
==FSM200 Platform
==QCA6696
==SM7675
==Snapdragon 865+ 5G Mobile Platform
==Snapdragon 8+ Gen 1 Mobile Platform
==SW5100
==WCD9390
==WSA8835
==Snapdragon 690 5G Mobile Platform
==SM8650Q
==QCA6797AQ
==SM8750P
==SDX61
==WCD9378
==Snapdragon 8 Elite
==CSRA6640
==SD662
==FastConnect 6900
==WSA8845H
==Snapdragon 685 4G Mobile Platform
==WCN7860
==WCN3950
==SM6225P
==SM8635P
==Snapdragon 888+ 5G Mobile Platform
==FastConnect 6800
==QCA8081
==Snapdragon W5+ Gen 1 Wearable Platform
==QCA6574AU
==SM8635
==QCA6698AU
==SM7635P
==Snapdragon 7+ Gen 2 Mobile Platform
==WSA8840
==Netrani
==Snapdragon 8 Gen 3 Mobile Platform
==WCD9375
==QCA6688AQ
==QCA6678AQ
==Milos
==WCN3980
==Snapdragon 778G+ 5G Mobile Platform
==QCN6274
==Snapdragon 680 4G Mobile Platform
==Snapdragon X75 5G Modem-RF System
==QCM2290
==QCS4490
==WCD9370
==WSA8845
==Snapdragon 8+ Gen 2 Mobile Platform
==Snapdragon 8 Gen 1 Mobile Platform
==Snapdragon 6 Gen 1 Mobile Platform
==WCD9395
==WCN3988
==WCN6650
==QEP8111
==Snapdragon 460 Mobile Platform
==QFW7114
==WCD9371
==FastConnect 6200
==Snapdragon 4 Gen 1 Mobile Platform
==WSA8830
==FWA Gen 3 Ultra Platform
==WCD9335

Matching in nixpkgs

pkgs.snapdragon-profiler

None

nixos-unstable 2021.2
- nixpkgs-unstable 2021.2
nixos-26.05 2021.2
- nixos-26.05-small 2021.2
- nixpkgs-26.05-darwin 2021.2

Untriaged

Permalink CVE-2026-24084

7.5 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): None (N)
Availability (A): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): None (N)

created 3 weeks, 4 days ago Activity log

Created suggestion 3 weeks, 4 days ago

Insecure Security Identifier Mechanism in Multi-Mode Call Processor

Weak configuration when UE does not verify the consistency of its additional security capabilities with the replayed capabilities.

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2026-…

Affected products

Snapdragon

==QCM6490
==Snapdragon 8cx Compute Platform
==SM8475P
==WCN7880
==WCN6755
==Snapdragon 695 5G Mobile Platform
==QCM5430
==SD 8 Gen1 5G
==Snapdragon 6 Gen 4 Mobile Platform
==Snapdragon 7s Gen 3 Mobile Platform
==Qualcomm Video Collaboration VC3 Platform
==Snapdragon Auto 5G Modem-RF Gen 2
==QCM4490
==Snapdragon 480+ 5G Mobile Platform
==WCD9340
==WSA8832
==WSA8815
==AQT1000
==SM7550P
==AR8035
==SM7675P
==QCA6391
==WSA8810
==QFW7124
==WCD9380
==SM7435
==QCN6224
==WCD9341
==QCA6420
==Snapdragon X70 Modem-RF System
==WCD9385
==Snapdragon X53 5G Modem-RF System
==Snapdragon 4 Gen 2 Mobile Platform
==Palawan25
==Snapdragon 480 5G Mobile Platform
==Snapdragon 8cx Gen 2 5G Compute Platform "Poipu Pro"
==QCC710
==Snapdragon 782G Mobile Platform
==Snapdragon 870 5G Mobile Platform
==FastConnect 6700
==SM7325P
==QCA6584AU
==Snapdragon 778G 5G Mobile Platform
==QCA6698AQ
==Snapdragon 8 Gen 2 Mobile Platform
==Snapdragon X72 5G Modem-RF System
==SM6650P
==QCS8550
==SM8550P
==Snapdragon X55 5G Modem-RF System
==QCA6174A
==Snapdragon 865 5G Mobile Platform
==Snapdragon 888 5G Mobile Platform
==Orne
==Snapdragon X65 5G Modem-RF System
==WCN7881
==Snapdragon X80 5G Modem-RF System
==WCN7861
==QCA6595AU
==QCN9012
==FastConnect 7800
==QCA8337
==QCN9011
==QCN9024
==Snapdragon 7 Gen 1 Mobile Platform
==Snapdragon 7c+ Gen 3 Compute
==Snapdragon 6 Gen 3 Mobile Platform
==Snapdragon Auto 5G Modem-RF
==SM7550
==QCN6024
==QMP1000
==SDX57M
==QCA6696
==SM7675
==Snapdragon 865+ 5G Mobile Platform
==Snapdragon 8+ Gen 1 Mobile Platform
==WCD9390
==WSA8835
==Snapdragon 690 5G Mobile Platform
==SM8650Q
==QCA6797AQ
==SM8750P
==SDX61
==WCD9378
==Snapdragon 8 Elite
==SnapdragonAuto 4GModem
==FastConnect 6900
==WSA8845H
==WCN7860
==WCN3950
==SM8635P
==Snapdragon 888+ 5G Mobile Platform
==FastConnect 6800
==QCA8081
==QCA6574AU
==SM8635
==QCA6698AU
==SM7635P
==Snapdragon 7+ Gen 2 Mobile Platform
==5G Fixed Wireless Access Platform
==WSA8840
==Netrani
==Snapdragon 8 Gen 3 Mobile Platform
==WCD9375
==QCA6688AQ
==QCA6678AQ
==Milos
==SDX71M
==Snapdragon 778G+ 5G Mobile Platform
==QCN6274
==Snapdragon X75 5G Modem-RF System
==QCS4490
==QCA6430
==WCD9370
==WSA8845
==Snapdragon 8c Compute Platform "Poipu Lite"
==Snapdragon 8+ Gen 2 Mobile Platform
==Snapdragon 8 Gen 1 Mobile Platform
==Snapdragon 6 Gen 1 Mobile Platform
==WCD9395
==WCN3988
==WCN6650
==WCD9371
==QFW7114
==FastConnect 6200
==Snapdragon 4 Gen 1 Mobile Platform
==WSA8830
==FWA Gen 3 Ultra Platform

Matching in nixpkgs

pkgs.snapdragon-profiler

None

nixos-unstable 2021.2
- nixpkgs-unstable 2021.2
nixos-26.05 2021.2
- nixos-26.05-small 2021.2
- nixpkgs-26.05-darwin 2021.2

Untriaged

Permalink CVE-2026-25288

7.4 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Adjacent (A)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Changed (C)
Confidentiality (C): None (N)
Integrity (I): None (N)
Availability (A): High (H)
Modified Attack Vector (MAV): Adjacent (A)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Changed (C)
Modified Integrity (MI): None (N)
Modified Availability (MA): High (H)

created 3 weeks, 4 days ago Activity log

Created suggestion 3 weeks, 4 days ago

Buffer Over-read in WLAN Firmware

Transient DOS when processing a short target wake time channel usage response frame with insufficient packet size.

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2026-…

Affected products

Snapdragon

==Pandeiro
==XG101002
==WSA8840
==Snapdragon 8 Elite Gen 5
==X2000090
==WCN6755
==WCD9385
==SDR753
==X2000077
==Palawan25
==QCM8838
==X2000086
==QXM1093
==Snapdragon 7 Gen 4 Mobile Platform
==QMP1000
==XG101039
==Cologne
==QLN1086BD
==XRV9209
==WSA8845
==X2000094
==WCD9378
==XRV7209
==QPA1086BD
==XG101032
==CQ7790
==FastConnect 6900
==QMB715
==WCD9395
==WSA8845H
==WCN7860
==QPA1083BD
==Orne
==X2000092
==SC8380XP
==QLN1083BD
==WCD9378C
==WCN7861
==WCD9380
==QXM1094
==QXM1095
==QXM1096
==FastConnect 7800

Matching in nixpkgs

pkgs.snapdragon-profiler

None

nixos-unstable 2021.2
- nixpkgs-unstable 2021.2
nixos-26.05 2021.2
- nixos-26.05-small 2021.2
- nixpkgs-26.05-darwin 2021.2

Untriaged

Permalink CVE-2026-24078

6.5 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Adjacent (A)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): None (N)
Availability (A): None (N)
Modified Attack Vector (MAV): Adjacent (A)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): None (N)

created 3 weeks, 4 days ago Activity log

Created suggestion 3 weeks, 4 days ago

Exposure of Private Personal Information to an Unauthorized Actor in Data Modem

Information Disclosure when IPSec negotiation fails or is not established properly during NG-eCall SIP signaling.

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2026-…

Affected products

Snapdragon

==QCM6490
==SM8475P
==WCN3910
==WCN7880
==WCN6755
==Snapdragon 695 5G Mobile Platform
==CSRA6620
==QCM5430
==Snapdragon X32 5G Modem-RF System
==Themisto
==SD 8 Gen1 5G
==Snapdragon 6 Gen 4 Mobile Platform
==Snapdragon 7s Gen 3 Mobile Platform
==Qualcomm Video Collaboration VC3 Platform
==Snapdragon Auto 5G Modem-RF Gen 2
==QCM4490
==Snapdragon 480+ 5G Mobile Platform
==WCD9340
==WSA8832
==WSA8815
==SM7550P
==AR8035
==SM7675P
==QCA6391
==Snapdragon X35 5G Modem-RF System
==WSA8810
==QFW7124
==WCD9380
==SM7435
==QCN6224
==QCS2290
==WCD9385
==Snapdragon X53 5G Modem-RF System
==Snapdragon 4 Gen 2 Mobile Platform
==Palawan25
==Robotics RB2 Platform
==Snapdragon 480 5G Mobile Platform
==QCC710
==Snapdragon 782G Mobile Platform
==Snapdragon 870 5G Mobile Platform
==SW5100P
==FastConnect 6700
==SM7325P
==QCA6584AU
==Snapdragon 778G 5G Mobile Platform
==QCA6698AQ
==Snapdragon 8 Gen 2 Mobile Platform
==Snapdragon X72 5G Modem-RF System
==SM6650P
==QCS4290
==QCS8550
==SM8550P
==Snapdragon X55 5G Modem-RF System
==QCA6174A
==Snapdragon 865 5G Mobile Platform
==FSM20055
==Snapdragon 888 5G Mobile Platform
==Orne
==Snapdragon X65 5G Modem-RF System
==WCN7881
==WCN7861
==WCD9360
==QCA6595AU
==QCN9012
==FastConnect 7800
==SW6100
==QCA8337
==G1 Gen 1
==QCN9011
==QCN9024
==Snapdragon 7 Gen 1 Mobile Platform
==SW6100P
==Snapdragon 7c+ Gen 3 Compute
==Snapdragon 6 Gen 3 Mobile Platform
==Snapdragon 662 Mobile Platform
==QCM4325
==SM7550
==Snapdragon Auto 5G Modem-RF
==QCN6024
==QMP1000
==SDX57M
==FSM200 Platform
==QCA6696
==SM7675
==Snapdragon 865+ 5G Mobile Platform
==Snapdragon 8+ Gen 1 Mobile Platform
==SW5100
==WCD9390
==WSA8835
==Snapdragon 690 5G Mobile Platform
==SM8650Q
==QCA6797AQ
==SM8750P
==WCD9378
==SDX61
==Snapdragon 8 Elite
==CSRA6640
==SD662
==FastConnect 6900
==WSA8845H
==WCN7860
==Snapdragon 685 4G Mobile Platform
==WCN3950
==SM6225P
==SM8635P
==Snapdragon 888+ 5G Mobile Platform
==FastConnect 6800
==QCA8081
==Snapdragon W5+ Gen 1 Wearable Platform
==QCA6574AU
==SM8635
==QCA6698AU
==SM7635P
==QCA6574A
==Snapdragon 7+ Gen 2 Mobile Platform
==5G Fixed Wireless Access Platform
==WSA8840
==WCD9375
==Netrani
==Snapdragon 8 Gen 3 Mobile Platform
==QCA6688AQ
==QCA6678AQ
==Milos
==WCN3980
==Snapdragon 778G+ 5G Mobile Platform
==QCN6274
==Snapdragon 680 4G Mobile Platform
==Snapdragon X75 5G Modem-RF System
==QCM2290
==QCS4490
==WCD9370
==WSA8845
==Snapdragon 8+ Gen 2 Mobile Platform
==Snapdragon 8 Gen 1 Mobile Platform
==Snapdragon 6 Gen 1 Mobile Platform
==WCD9395
==WCN3988
==WCN6650
==QEP8111
==WCD9371
==QFW7114
==Snapdragon 460 Mobile Platform
==FastConnect 6200
==Snapdragon 4 Gen 1 Mobile Platform
==WSA8830
==FWA Gen 3 Ultra Platform
==WCD9335

Matching in nixpkgs

pkgs.snapdragon-profiler

None

nixos-unstable 2021.2
- nixpkgs-unstable 2021.2
nixos-26.05 2021.2
- nixos-26.05-small 2021.2
- nixpkgs-26.05-darwin 2021.2

Suggestions search

References

Affected products

Matching in nixpkgs

pkgs.snapdragon-profiler

References

Affected products

Matching in nixpkgs

pkgs.snapdragon-profiler

References

Affected products

Matching in nixpkgs

pkgs.snapdragon-profiler

References

Affected products

Matching in nixpkgs

pkgs.snapdragon-profiler

References

Affected products

Matching in nixpkgs

pkgs.snapdragon-profiler

References

Affected products

Matching in nixpkgs

pkgs.snapdragon-profiler

References

Affected products

Matching in nixpkgs

pkgs.snapdragon-profiler

References

Affected products

Matching in nixpkgs

pkgs.snapdragon-profiler

References

Affected products

Matching in nixpkgs

pkgs.snapdragon-profiler

References

Affected products

Matching in nixpkgs

pkgs.snapdragon-profiler