Nixpkgs security tracker

Untriaged

Permalink CVE-2026-21380

7.8 HIGH

CVSS version: 3.1
Attack vector (AV): LOCAL
Attack complexity (AC): LOW
Privileges required (PR): LOW
User interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality impact (C): HIGH
Integrity impact (I): HIGH
Availability impact (A): HIGH

created 1 week, 1 day ago

Use After Free in DSP Service

Memory Corruption when using deprecated DMABUF IOCTL calls to manage video memory.

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-b…

Affected products

Snapdragon

==X2000092
==XG101039
==X2000086
==WSA8832
==FastConnect 7800
==XG101002
==X2000094
==Snapdragon AR1 Gen 1 Platform
==WCD9385
==Cologne
==SC8380XP
==FastConnect 6900
==WCD9380
==WSA8840
==WCD9378C
==WSA8835
==WSA8845
==QCA0000
==WSA8830
==WSA8845H
==X2000077
==X2000090
==XG101032

Matching in nixpkgs

pkgs.snapdragon-profiler

An profiler for Android devices running Snapdragon chips

nixos-unstable 2021.2
- nixpkgs-unstable 2021.2
- nixos-unstable-small 2021.2
nixos-25.11 2021.2
- nixos-25.11-small 2021.2
- nixpkgs-25.11-darwin 2021.2

Untriaged

Permalink CVE-2026-21378

7.8 HIGH

CVSS version: 3.1
Attack vector (AV): LOCAL
Attack complexity (AC): LOW
Privileges required (PR): LOW
User interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality impact (C): HIGH
Integrity impact (I): HIGH
Availability impact (A): HIGH

created 1 week, 1 day ago

Buffer Over-read in Camera

Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver.

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-b…

Affected products

Snapdragon

==Snapdragon 7c Gen 2 Compute Platform "Rennell Pro"
==WCD9370
==X2000092
==QCA6391
==Snapdragon 8cx Compute Platform
==XG101039
==X2000086
==WSA8832
==Snapdragon 460 Mobile Platform
==FastConnect 7800
==FastConnect 6700
==XG101002
==WCN3950
==X2000094
==Snapdragon AR1 Gen 1 Platform
==WCD9385
==QCM5430
==FastConnect 6200
==Cologne
==SC8380XP
==FastConnect 6900
==QCM6490
==WCD9380
==WSA8840
==Qualcomm Video Collaboration VC3 Platform
==Snapdragon 8cx Gen 2 5G Compute Platform "Poipu Pro"
==Snapdragon 8cx Gen 3 Compute Platform
==QCA6420
==WCD9340
==WCD9378C
==WCN3988
==WSA8835
==WSA8845
==QCA0000
==FastConnect 6800
==WSA8830
==Snapdragon 662 Mobile Platform
==WSA8810
==WSA8845H
==WCD9341
==WCD9375
==AQT1000
==Snapdragon 7c+ Gen 3 Compute
==Snapdragon 8c Compute Platform "Poipu Lite"
==X2000077
==X2000090
==WSA8815
==SM6250
==QCA6430
==Snapdragon 7c Compute Platform
==XG101032

Matching in nixpkgs

pkgs.snapdragon-profiler

An profiler for Android devices running Snapdragon chips

nixos-unstable 2021.2
- nixpkgs-unstable 2021.2
- nixos-unstable-small 2021.2
nixos-25.11 2021.2
- nixos-25.11-small 2021.2
- nixpkgs-25.11-darwin 2021.2

Untriaged

Permalink CVE-2026-21376

7.8 HIGH

CVSS version: 3.1
Attack vector (AV): LOCAL
Attack complexity (AC): LOW
Privileges required (PR): LOW
User interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality impact (C): HIGH
Integrity impact (I): HIGH
Availability impact (A): HIGH

created 1 week, 1 day ago

Buffer Over-read in Camera

Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver.

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-b…

Affected products

Snapdragon

==Snapdragon 7c Gen 2 Compute Platform "Rennell Pro"
==WCD9370
==X2000092
==QCA6391
==Snapdragon 8cx Compute Platform
==XG101039
==X2000086
==Snapdragon 8cx Compute Platform "Poipu Pro"
==WSA8832
==Snapdragon 460 Mobile Platform
==FastConnect 7800
==FastConnect 6700
==XG101002
==WCN3950
==X2000094
==Snapdragon 8cx Gen 2 5G Compute Platform
==Snapdragon AR1 Gen 1 Platform
==WCD9385
==QCM5430
==FastConnect 6200
==Cologne
==Snapdragon 8c Compute Platform (SC8180XP-AD) "Poipu Lite"
==SC8380XP
==FastConnect 6900
==QCM6490
==WCD9380
==WSA8840
==Qualcomm Video Collaboration VC3 Platform
==Snapdragon 8cx Gen 2 5G Compute Platform "Poipu Pro"
==Snapdragon 8cx Gen 3 Compute Platform
==QCA6420
==WCD9340
==WCD9378C
==WCN3988
==WSA8835
==WSA8845
==QCA0000
==FastConnect 6800
==WSA8830
==Snapdragon 662 Mobile Platform
==WSA8810
==WSA8845H
==WCD9341
==WCD9375
==AQT1000
==Snapdragon 7c+ Gen 3 Compute
==Snapdragon 8c Compute Platform "Poipu Lite"
==X2000077
==X2000090
==WSA8815
==SM6250
==QCA6430
==Snapdragon 7c Compute Platform
==XG101032

Matching in nixpkgs

pkgs.snapdragon-profiler

An profiler for Android devices running Snapdragon chips

nixos-unstable 2021.2
- nixpkgs-unstable 2021.2
- nixos-unstable-small 2021.2
nixos-25.11 2021.2
- nixos-25.11-small 2021.2
- nixpkgs-25.11-darwin 2021.2

Untriaged

Permalink CVE-2026-21367

7.6 HIGH

CVSS version: 3.1
Attack vector (AV): NETWORK
Attack complexity (AC): HIGH
Privileges required (PR): HIGH
User interaction (UI): REQUIRED
Scope (S): CHANGED
Confidentiality impact (C): HIGH
Integrity impact (I): HIGH
Availability impact (A): HIGH

created 1 week, 1 day ago

Buffer Over-read in WLAN Firmware

Transient DOS when processing nonstandard FILS Discovery Frames with out-of-range action sizes during initial scans.

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-b…

Affected products

Snapdragon

==QCN9000
==QCS8550
==QPA1083BD
==Snapdragon 7s Gen 3 Mobile Platform
==SM6650P
==X2000086
==Snapdragon 6 Gen 4 Mobile Platform
==IPQ8076
==XRV9209
==SM7675
==IPQ6000
==Palawan25
==QFW7114
==QCA8081
==QCN9022
==Snapdragon 8 Gen 1 Mobile Platform
==QCN9012
==QCC710
==Networking Pro 400 Platform
==SC8380XP
==QCN5052
==QCC2073
==WCD9378C
==Networking Pro 1610 Platform
==Snapdragon 7+ Gen 2 Mobile Platform
==SM7435
==QCN9011
==WSA8830
==WCN7880
==WCN6650
==WSA8810
==QCA6787AQ
==IPQ6010
==QCA8386
==QCN6024
==WCN7881
==QCA8084
==Immersive Home 316 Platform
==QXM1095
==QCC2076
==Snapdragon 7 Gen 1 Mobile Platform
==IPQ5028
==Orne
==Milos
==QCA9888
==XG101039
==Networking Pro 810 Platform
==QXM1093
==QCN6132
==XG101002
==FastConnect 7800
==Immersive Home 216 Platform
==QCN5164
==QCN6274
==CSR8811
==FastConnect 6200
==SM8750P
==QCA6777AQ
==WCD9380
==QCN6122
==WSA8840
==WCN7861
==Snapdragon X75 5G Modem-RF System
==QFW7124
==WCN3988
==QCA4024
==QXM1094
==SM7635P
==Snapdragon 6 Gen 3 Mobile Platform
==X2000090
==QCN5124
==QCN5154
==QXM1096
==QCA6797AQ
==QCN9100
==QCA8082
==Snapdragon 8 Elite Gen 5
==Snapdragon 8+ Gen 1 Mobile Platform
==Networking Pro 610 Platform
==QCN6224
==Snapdragon 8 Gen 3 Mobile Platform
==QCA8085
==X2000092
==IPQ6018
==Snapdragon 6 Gen 1 Mobile Platform
==Immersive Home 318 Platform
==QCN5022
==FastConnect 6700
==WCN3950
==SM8650Q
==Networking Pro 600 Platform
==WCD9390
==Cologne
==QCN5152
==Immersive Home 214 Platform
==QLN1083BD
==Snapdragon 8 Elite
==FastConnect 6900
==SM8635
==QCA8075
==WCD9395
==WSA8835
==WSA8845
==WCN6755
==IPQ8078
==QCS4490
==WSA8845H
==WCD9375
==WCN6450
==SAR2130P
==X2000077
==SM8475P
==Networking Pro 800 Platform
==G2 Gen 1
==AR8035
==WCD9370
==Snapdragon X72 5G Modem-RF System
==QCA8337
==QCA6391
==QCA9889
==IPQ9574
==IPQ5010
==QCA6698AU
==WSA8832
==WCD9378
==FWA Gen 3 Ultra Platform
==QPA1086BD
==X2000094
==QCN9024
==QLN1086BD
==WCD9385
==QCN5122
==Networking Pro 1210 Platform
==XRV7209
==SD 8 Gen1 5G
==Pandeiro
==WCD9340
==Networking Pro 1200 Platform
==QCN5024
==QCN9274
==Netrani
==QCN9070
==SM7675P
==QCN6023
==QMP1000
==SM8635P
==WSA8815
==WCN7860
==QCM4490
==XG101032

Matching in nixpkgs

pkgs.snapdragon-profiler

An profiler for Android devices running Snapdragon chips

nixos-unstable 2021.2
- nixpkgs-unstable 2021.2
- nixos-unstable-small 2021.2
nixos-25.11 2021.2
- nixos-25.11-small 2021.2
- nixpkgs-25.11-darwin 2021.2

Untriaged

Permalink CVE-2025-47400

7.1 HIGH

CVSS version: 3.1
Attack vector (AV): LOCAL
Attack complexity (AC): LOW
Privileges required (PR): LOW
User interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality impact (C): HIGH
Integrity impact (I): HIGH
Availability impact (A): NONE

created 1 week, 1 day ago

Buffer Over-read in Computer Vision

Cryptographic issue while copying data to a destination buffer without validating its size.

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-b…

Affected products

Snapdragon

==SW6100
==Snapdragon 8 Elite Gen 5
==WSA8845H
==WSA8840
==WCN7861
==Pandeiro
==WCD9395
==Themisto
==WSA8845
==WCN7860
==SW6100P

Matching in nixpkgs

pkgs.snapdragon-profiler

An profiler for Android devices running Snapdragon chips

nixos-unstable 2021.2
- nixpkgs-unstable 2021.2
- nixos-unstable-small 2021.2
nixos-25.11 2021.2
- nixos-25.11-small 2021.2
- nixpkgs-25.11-darwin 2021.2

Untriaged

Permalink CVE-2026-21374

7.8 HIGH

CVSS version: 3.1
Attack vector (AV): LOCAL
Attack complexity (AC): LOW
Privileges required (PR): LOW
User interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality impact (C): HIGH
Integrity impact (I): HIGH
Availability impact (A): HIGH

created 1 week, 1 day ago

Buffer Over-read in Camera

Memory Corruption when processing auxiliary sensor input/output control commands with insufficient buffer size validation.

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-b…

Affected products

Snapdragon

==Snapdragon 7c Gen 2 Compute Platform "Rennell Pro"
==WCD9370
==X2000092
==QCA6391
==Snapdragon 8cx Compute Platform
==XG101039
==X2000086
==Snapdragon 8cx Compute Platform "Poipu Pro"
==WSA8832
==Snapdragon 460 Mobile Platform
==FastConnect 7800
==FastConnect 6700
==XG101002
==WCN3950
==X2000094
==Snapdragon 8cx Gen 2 5G Compute Platform
==Snapdragon AR1 Gen 1 Platform
==WCD9385
==QCM5430
==FastConnect 6200
==Cologne
==Snapdragon 8c Compute Platform (SC8180XP-AD) "Poipu Lite"
==SC8380XP
==FastConnect 6900
==QCM6490
==WCD9380
==WSA8840
==Qualcomm Video Collaboration VC3 Platform
==Snapdragon 8cx Gen 2 5G Compute Platform "Poipu Pro"
==Snapdragon 8cx Gen 3 Compute Platform
==QCA6420
==WCD9340
==WCD9378C
==WCN3988
==WSA8835
==WSA8845
==QCA0000
==FastConnect 6800
==WSA8830
==Snapdragon 662 Mobile Platform
==WSA8810
==WSA8845H
==WCD9341
==WCD9375
==AQT1000
==Snapdragon 7c+ Gen 3 Compute
==Snapdragon 8c Compute Platform "Poipu Lite"
==X2000077
==X2000090
==WSA8815
==SM6250
==QCA6430
==Snapdragon 7c Compute Platform
==XG101032

Matching in nixpkgs

pkgs.snapdragon-profiler

An profiler for Android devices running Snapdragon chips

nixos-unstable 2021.2
- nixpkgs-unstable 2021.2
- nixos-unstable-small 2021.2
nixos-25.11 2021.2
- nixos-25.11-small 2021.2
- nixpkgs-25.11-darwin 2021.2

Untriaged

Permalink CVE-2026-21381

7.6 HIGH

CVSS version: 3.1
Attack vector (AV): NETWORK
Attack complexity (AC): HIGH
Privileges required (PR): HIGH
User interaction (UI): REQUIRED
Scope (S): CHANGED
Confidentiality impact (C): HIGH
Integrity impact (I): HIGH
Availability impact (A): HIGH

created 1 week, 1 day ago

Buffer Over-read in WLAN Firmware

Transient DOS when receiving a service data frame with excessive length during device matching over a neighborhood awareness network protocol connection.

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-b…

Affected products

Snapdragon

==QCS8550
==QPA1083BD
==Snapdragon 7s Gen 3 Mobile Platform
==SM6650P
==X2000086
==Snapdragon 6 Gen 4 Mobile Platform
==XRV9209
==SM7675
==Palawan25
==QFW7114
==QCA8081
==QCN9012
==QCC710
==SC8380XP
==QCC2073
==WCD9378C
==SM7435
==QCN9011
==WSA8830
==WCN7880
==WCN6650
==WSA8810
==QCA6787AQ
==WCN7881
==QXM1095
==QCC2076
==Orne
==Milos
==XG101039
==QXM1093
==FastConnect 7800
==XG101002
==SXR2350P
==QCN6274
==FastConnect 6200
==SM8750P
==QCA6777AQ
==SXR2250P
==WCD9380
==WSA8840
==WCN7861
==QFW7124
==Snapdragon X75 5G Modem-RF System
==WCN3988
==Snapdragon 6 Gen 3 Mobile Platform
==QXM1094
==SM7635P
==Snapdragon AR1+ Gen 1 Platform
==X2000090
==QXM1096
==QCA6797AQ
==Snapdragon 8 Elite Gen 5
==QCN6224
==Snapdragon 8 Gen 3 Mobile Platform
==X2000092
==SAR1165P
==Snapdragon 6 Gen 1 Mobile Platform
==FastConnect 6700
==SM8650Q
==WCD9390
==Cologne
==QLN1083BD
==Snapdragon 8 Elite
==FastConnect 6900
==SM8635
==WCD9395
==WSA8835
==WSA8845
==WCN6755
==WSA8845H
==WCD9375
==WCN6450
==SAR2130P
==X2000077
==G2 Gen 1
==AR8035
==WCD9370
==Snapdragon X72 5G Modem-RF System
==QCA8337
==QCA6391
==QCA6698AU
==WSA8832
==QXM1086
==FWA Gen 3 Ultra Platform
==WCD9378
==QPA1086BD
==SXR2230P
==X2000094
==Snapdragon AR1 Gen 1 Platform
==QLN1086BD
==WCD9385
==SXR2330P
==XRV7209
==QXM1083
==Pandeiro
==WCD9340
==Netrani
==SM7675P
==QMP1000
==SM8635P
==WSA8815
==WCN7860
==XG101032

Matching in nixpkgs

pkgs.snapdragon-profiler

An profiler for Android devices running Snapdragon chips

nixos-unstable 2021.2
- nixpkgs-unstable 2021.2
- nixos-unstable-small 2021.2
nixos-25.11 2021.2
- nixos-25.11-small 2021.2
- nixpkgs-25.11-darwin 2021.2

Untriaged

Permalink CVE-2026-21371

7.8 HIGH

CVSS version: 3.1
Attack vector (AV): LOCAL
Attack complexity (AC): LOW
Privileges required (PR): LOW
User interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality impact (C): HIGH
Integrity impact (I): HIGH
Availability impact (A): HIGH

created 1 week, 1 day ago

Buffer Over-read in WinBlast Driver

Memory Corruption when retrieving output buffer with insufficient size validation.

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-b…

Affected products

Snapdragon

==Snapdragon 7c Gen 2 Compute Platform "Rennell Pro"
==WCD9370
==X2000092
==QCA6391
==Snapdragon 8cx Compute Platform
==XG101039
==X2000086
==Snapdragon 8cx Compute Platform "Poipu Pro"
==Snapdragon 460 Mobile Platform
==FastConnect 7800
==XG101002
==FastConnect 6700
==WCN3950
==X2000094
==Snapdragon 8cx Gen 2 5G Compute Platform
==WCD9385
==QCM5430
==FastConnect 6200
==Cologne
==Snapdragon 8c Compute Platform (SC8180XP-AD) "Poipu Lite"
==SC8380XP
==QCM6490
==WCD9380
==WSA8840
==FastConnect 6900
==Qualcomm Video Collaboration VC3 Platform
==Snapdragon 8cx Gen 2 5G Compute Platform "Poipu Pro"
==Snapdragon 8cx Gen 3 Compute Platform
==QCA6420
==WCD9340
==WCD9378C
==WCN3988
==WSA8835
==WSA8845
==QCA0000
==FastConnect 6800
==WSA8830
==Snapdragon 662 Mobile Platform
==WSA8810
==WSA8845H
==WCD9341
==WCD9375
==AQT1000
==Snapdragon 7c+ Gen 3 Compute
==Snapdragon 8c Compute Platform "Poipu Lite"
==X2000077
==X2000090
==WSA8815
==SM6250
==QCA6430
==Snapdragon 7c Compute Platform
==XG101032

Matching in nixpkgs

pkgs.snapdragon-profiler

An profiler for Android devices running Snapdragon chips

nixos-unstable 2021.2
- nixpkgs-unstable 2021.2
- nixos-unstable-small 2021.2
nixos-25.11 2021.2
- nixos-25.11-small 2021.2
- nixpkgs-25.11-darwin 2021.2

Untriaged

Permalink CVE-2025-47374

6.5 MEDIUM

CVSS version: 3.1
Attack vector (AV): LOCAL
Attack complexity (AC): HIGH
Privileges required (PR): LOW
User interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality impact (C): LOW
Integrity impact (I): HIGH
Availability impact (A): HIGH

created 1 week, 1 day ago

Use After Free in Camera Driver

Memory Corruption when accessing freed memory due to concurrent fence deregistration and signal handling.

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-b…

Affected products

Snapdragon

==QPA1083BD
==SAR1165P
==QXM1093
==WSA8832
==XRV9209
==QXM1086
==FastConnect 7800
==QPA1086BD
==SXR2350P
==SXR2230P
==Snapdragon AR1 Gen 1 Platform
==QLN1086BD
==WCD9385
==SXR2330P
==QLN1083BD
==XRV7209
==FastConnect 6900
==SXR2250P
==WCD9380
==WCN7861
==QXM1083
==Pandeiro
==WSA8835
==WCN7860
==WSA8830
==QXM1094
==Snapdragon AR1+ Gen 1 Platform
==SAR2130P
==QXM1096
==QXM1095

Matching in nixpkgs

pkgs.snapdragon-profiler

An profiler for Android devices running Snapdragon chips

nixos-unstable 2021.2
- nixpkgs-unstable 2021.2
- nixos-unstable-small 2021.2
nixos-25.11 2021.2
- nixos-25.11-small 2021.2
- nixpkgs-25.11-darwin 2021.2

Untriaged

Permalink CVE-2026-21382

7.8 HIGH

CVSS version: 3.1
Attack vector (AV): LOCAL
Attack complexity (AC): LOW
Privileges required (PR): LOW
User interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality impact (C): HIGH
Integrity impact (I): HIGH
Availability impact (A): HIGH

created 1 week, 1 day ago

Buffer Copy Without Checking Size of Input in Power Management IC

Memory Corruption when handling power management requests with improperly sized input/output buffers.

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-b…

Affected products

Snapdragon

==X2000092
==XG101039
==X2000086
==FastConnect 7800
==XG101002
==X2000094
==WCD9385
==Cologne
==SC8380XP
==FastConnect 6900
==WCD9380
==WSA8840
==WCD9378C
==WSA8845
==QCA0000
==WSA8845H
==X2000077
==X2000090
==XG101032

Matching in nixpkgs

pkgs.snapdragon-profiler

An profiler for Android devices running Snapdragon chips

nixos-unstable 2021.2
- nixpkgs-unstable 2021.2
- nixos-unstable-small 2021.2
nixos-25.11 2021.2
- nixos-25.11-small 2021.2
- nixpkgs-25.11-darwin 2021.2

Suggestions search

References

Affected products

Matching in nixpkgs

pkgs.snapdragon-profiler

References

Affected products

Matching in nixpkgs

pkgs.snapdragon-profiler

References

Affected products

Matching in nixpkgs

pkgs.snapdragon-profiler

References

Affected products

Matching in nixpkgs

pkgs.snapdragon-profiler

References

Affected products

Matching in nixpkgs

pkgs.snapdragon-profiler

References

Affected products

Matching in nixpkgs

pkgs.snapdragon-profiler

References

Affected products

Matching in nixpkgs

pkgs.snapdragon-profiler

References

Affected products

Matching in nixpkgs

pkgs.snapdragon-profiler

References

Affected products

Matching in nixpkgs

pkgs.snapdragon-profiler

References

Affected products

Matching in nixpkgs

pkgs.snapdragon-profiler