CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 12:23 UTC )
This week: 5,496 CVEs published, 359 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,496 Show in the list Critical, last 7 days 359 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product qualcomm:qcn9012_firmware . Show all products
77 CVEs, showing 51 to 77 Previous Page 2 of 2 CVE Severity Title Published CVE-2025-59610 Medium 6.4 Memory Corruption when processing IOCTL requests with mismatched API versions due to concurrent modification of user-space buffer. Jun 1, 2026 CVE-2026-24085 High 7.2 Memory Corruption when processing display command line information due to improper initialization of a variable. Jun 1, 2026 CVE-2026-24087 High 7.2 Memory corruption while processing fastboot OEM commands. Jun 1, 2026 CVE-2026-24088 High 8.2 Cryptographic Issue while processing a specific partition which allows unauthorized write access to load a customized bootloader. Jun 1, 2026 CVE-2026-24089 High 7.2 Memory corruption while processing fastboot commands with invalid input. Jun 1, 2026 CVE-2026-24090 High 7.1 Cryptographic issue while processing partition table entries allows unauthorized modification of boot flow. Jun 1, 2026 CVE-2026-24091 High 7.2 Memory corruption while processing fastboot commands with improperly formatted input. Jun 1, 2026 CVE-2026-24092 High 7.2 Memory Corruption when processing fastboot commands to set display mode. Jun 1, 2026 CVE-2026-25276 High 8.8 Memory corruption while using Strongbox due to missing bounds check. Jun 1, 2026 CVE-2026-25277 High 8.8 Memory corruption while using Strongbox due to buffer overflow. Jun 1, 2026 CVE-2026-25268 High 8.8 Memory Corruption when processing invalid HT40 channel layouts during dynamic channel switching operations. Jul 6, 2026 CVE-2026-24077 Medium 6.5 Integer Underflow (Wrap or Wraparound) in WLAN Host Assigned by qualcomm
Aug 4, 2026 CVE-2026-24078 Medium 6.5 Exposure of Private Personal Information to an Unauthorized Actor in Data Modem Assigned by qualcomm
Aug 4, 2026 CVE-2026-24079 High 8.1 Missing Authentication for Critical Function in Data Modem Assigned by qualcomm
Aug 4, 2026 CVE-2026-24084 High 7.5 Insecure Security Identifier Mechanism in Multi-Mode Call Processor Assigned by qualcomm
Aug 4, 2026 CVE-2026-25289 Critical 9.6 Stack-based Buffer Overflow in WLAN Firmware Assigned by qualcomm
Aug 4, 2026 CVE-2026-25292 High 7.6 Improper Validation of Syntactic Correctness of Input in Automotive Linux OS Assigned by qualcomm
Aug 4, 2026 CVE-2026-24081 High 7.4 Buffer Over-read in BT Controller Assigned by qualcomm
Sep 17, 2026 CVE-2026-25275 High 7.5 Buffer Over-read in WLAN Firmware Assigned by qualcomm
Sep 17, 2026 CVE-2026-25263 Medium 6.6 Out of Bounds write in Linux Camera Assigned by qualcomm
Oct 6, 2026 CVE-2026-25267 High 7.8 Missing Authorization in Core Assigned by qualcomm
Oct 6, 2026 CVE-2026-25269 Medium 6.7 Out-of-bounds Write in Camera Driver Assigned by qualcomm
Oct 6, 2026 CVE-2026-25270 Medium 6.7 Out-of-bounds Write in Camera Driver Assigned by qualcomm
Oct 6, 2026 CVE-2026-25272 Medium 6.7 Out-of-bounds Write in Camera Driver Assigned by qualcomm
Oct 6, 2026 CVE-2026-25302 High 7.1 Improper Verification of Cryptographic Signature in Boot Assigned by qualcomm
Oct 6, 2026 CVE-2026-57545 High 7.8 Untrusted Pointer Dereference in Graphics Assigned by qualcomm
Oct 6, 2026 CVE-2026-57554 High 7.8 Use After Free in DSP Service Assigned by qualcomm
Oct 6, 2026
CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
