Qualcomm Kalpeni vulnerabilities
19 vulnerabilities
Known vulnerabilities in Qualcomm Kalpeni, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2025-59604qualcomm, inc. · snapdragon +258 moreNULL Pointer Dereference in SPS ApplicationsMemory Corruption when running a memory copy operation due to invalid writes caused by a null pointer.EPSS0.07%MediumCVE-2025-59610qualcomm, inc. · snapdragon +229 moreTime-of-check Time-of-use (TOCTOU) Race Condition in Camera DriverMemory Corruption when processing IOCTL requests with mismatched API versions due to concurrent modification of user-space buffer.EPSS0.06%HighCVE-2025-59605qualcomm, inc. · snapdragon +134 moreOut-of-bounds Write in HLOSMemory Corruption when processing device identifier strings that exceed the expected maximum length.EPSS0.07%HighCVE-2025-47404qualcomm, inc. · snapdragon +183 moreBuffer Copy Without Checking Size of Input in Automotive AudioMemory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified.EPSS0.07%MediumCVE-2026-21369qualcomm, inc. · snapdragon +107 moreOut-of-bounds Write in Camera DriverMemory Corruption when handling flash commands due to outdated LED count values being used after userspace modification.EPSS0.08%HighCVE-2026-25275qualcomm, inc. · snapdragon +369 moreBuffer Over-read in WLAN FirmwareTransient DOS when processing authentication frames with invalid FILS information element header lengths.EPSS0.19%MediumCVE-2026-25270qualcomm, inc. · snapdragon +197 moreOut-of-bounds Write in Camera DriverMemory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver.EPSS0.07%HighCVE-2026-25302qualcomm, inc. · snapdragon +285 moreImproper Verification of Cryptographic Signature in BootCryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed.EPSS0.06%HighCVE-2026-25292qualcomm, inc. · snapdragon +208 moreImproper Validation of Syntactic Correctness of Input in Automotive Linux OSMemory Corruption when processing untrusted user input in the fastboot command handler for audio framework configuration.EPSS0.15%HighCVE-2026-57554qualcomm, inc. · snapdragon +212 moreUse After Free in DSP ServiceMemory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC invocations.EPSS0.07%HighCVE-2026-57545qualcomm, inc. · snapdragon +211 moreUntrusted Pointer Dereference in GraphicsMemory corruption when processing draw objects of incorrect type during graphics command list execution.EPSS0.08%HighCVE-2026-24085qualcomm, inc. · snapdragon +266 moreStack-based Buffer Overflow in DisplayMemory Corruption when processing display command line information due to improper initialization of a variable.EPSS0.10%HighCVE-2026-24091qualcomm, inc. · snapdragon +266 moreImproper Validation of Syntactic Correctness of Input in DisplayMemory corruption while processing fastboot commands with improperly formatted input.EPSS0.10%HighCVE-2026-24092qualcomm, inc. · snapdragon +215 moreImproper Validation of Syntactic Correctness of Input in DisplayMemory Corruption when processing fastboot commands to set display mode.EPSS0.10%HighCVE-2026-24090qualcomm, inc. · snapdragon +214 moreMissing Authentication for Critical Function in HLOSCryptographic issue while processing partition table entries allows unauthorized modification of boot flow.EPSS0.06%HighCVE-2026-24087qualcomm, inc. · snapdragon +212 moreImproper Validation of Syntactic Correctness of Input in KernelMemory corruption while processing fastboot OEM commands.EPSS0.10%HighCVE-2026-24082qualcomm, inc. · snapdragon +173 moreUse After Free in Automotive GPUMemory Corruption when copying data from a freed source while executing performance counter deselect operation.EPSS0.07%HighCVE-2026-24088qualcomm, inc. · snapdragon +243 moreMissing Authentication for Critical Function in BootCryptographic Issue while processing a specific partition which allows unauthorized write access to load a customized bootloader.EPSS0.07%HighCVE-2026-24089qualcomm, inc. · snapdragon +216 moreImproper Validation of Syntactic Correctness of Input in KernelMemory corruption while processing fastboot commands with invalid input.EPSS0.10%