Qualcomm X2000086 vulnerabilities, page 3
54 vulnerabilities
Known vulnerabilities in Qualcomm X2000086, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2026-21371qualcomm, inc. · snapdragon +52 moreBuffer Over-read in WinBlast DriverMemory Corruption when retrieving output buffer with insufficient size validation.EPSS0.10%HighCVE-2026-21367qualcomm, inc. · snapdragon +149 moreBuffer Over-read in WLAN FirmwareTransient DOS when processing nonstandard FILS Discovery Frames with out-of-range action sizes during initial scans.EPSS0.20%HighCVE-2026-21382qualcomm, inc. · snapdragon +19 moreBuffer Copy Without Checking Size of Input in Power Management ICMemory Corruption when handling power management requests with improperly sized input/output buffers.EPSS0.07%HighCVE-2026-21379qualcomm, inc. · snapdragon +47 moreBuffer Over-read in Windows ComputeMemory Corruption when allocating memory with sizes that exceed the maximum allowed value.EPSS0.10%HighCVE-2026-21375qualcomm, inc. · snapdragon +35 moreBuffer Over-read in CameraMemory Corruption when accessing an output buffer without validating its size during IOCTL processing.EPSS0.07%HighCVE-2026-25271qualcomm, inc. · snapdragon +21 moreTime-of-check Time-of-use (TOCTOU) Race Condition in DSP ServiceMemory Corruption when processing asynchronous input parameters due to improper handling of modified values between check and use.EPSS0.07%HighCVE-2026-25258qualcomm, inc. · snapdragon +21 moreOut-of-bounds Read in DSP ServiceMemory corruption while processing IOCTL calls for escape operations.EPSS0.07%HighCVE-2026-25266qualcomm, inc. · snapdragon +24 moreExposed dangerous function in windows hostMemory corruption while processing IOCTL command when device is in power-save state.EPSS0.07%HighCVE-2026-25288qualcomm, inc. · snapdragon +54 moreBuffer Over-read in WLAN FirmwareTransient DOS when processing a short target wake time channel usage response frame with insufficient packet size.EPSS0.16%CriticalCVE-2026-25289qualcomm, inc. · snapdragon +199 moreStack-based Buffer Overflow in WLAN FirmwareMemory Corruption when processing Device Capability Extended attributes in certain NAN Service Discovery Frames with invalid length values.EPSS0.19%HighCVE-2026-25259qualcomm, inc. · snapdragon +42 moreOut-of-bounds Write in DSP ServiceMemory corruption while processing multiple IOCTL command for escape operations.EPSS0.07%HighCVE-2026-25260qualcomm, inc. · snapdragon +35 moreTime-of-check Time-of-use (TOCTOU) Race Condition in DSP ServiceMemory Corruption when accessing shared buffers without validation of concurrent user-mode input modifications.EPSS0.05%HighCVE-2026-24080qualcomm, inc. · snapdragon +36 moreBuffer Copy Without Checking Size of Input in BiometricsMemory Corruption when handling malformed request parameters in the fingerprint TA.EPSS0.10%MediumCVE-2026-24076qualcomm, inc. · snapdragon +52 moreBuffer Copy Without Checking Size of Input in Bluetooth HOSTMemory Corruption when processing registry values with incorrect types using a direct query method.EPSS0.11%