Nixpkgs security tracker

Dismissed

(not in Nixpkgs)

Permalink CVE-2026-24081

7.4 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Adjacent (A)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Changed (C)
Confidentiality (C): None (N)
Integrity (I): None (N)
Availability (A): High (H)
Modified Attack Vector (MAV): Adjacent (A)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Changed (C)
Modified Integrity (MI): None (N)
Modified Availability (MA): High (H)

updated 6 days, 2 hours ago by @LeSuisse Activity log

Created suggestion 6 days, 8 hours ago
@LeSuisse dismissed (not in Nixpkgs) 6 days, 2 hours ago

Buffer Over-read in BT Controller

Transient DOS when processing a channel map with insufficient used channels and adaptive frequency hopping is fully enabled.

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/september-20…

Affected products

Snapdragon

==WCN6450
==Snapdragon X2 Elite
==Milos_IOT
==Qualcomm FastConnect 8800 Mobile Connectivity System
==SM8650Q
==QLN1086BD
==S3 Sound Platform
==WCN7760
==Kobuk
==QXM1093
==QCC7225
==FastConnect 6900
==QCN6274
==SM7550P
==WCD9371
==WCD9380
==IQX7181
==WCN6755
==SM6850
==C110100
==WSA8850
==SXR2250P
==Snapdragon 6 Gen 3 Mobile Platform
==S3 Gen 2 Sound Platform
==QXM1086
==WSA8840
==WCD9378C
==WCN7861
==SM8635P
==WSA8845
==WSA8845H
==QCA8337
==FastConnect 6700
==SM8950P
==SAR1165P
==QCA6698AQ
==QCC2073
==IQ9 Series Platform
==Orne
==G3x Gen 2
==Snapdragon Reality Elite Platform
==SM7435
==SM6475P
==Monaco_IOT
==WCD9340
==QCC711
==FWA Gen 3 Ultra Platform
==WSA8835
==SM6450P
==WCN8841
==SM7750P
==SM8845P
==SM7550
==S5 Gen 2 Sound Platform
==SM7525
==CQ8725S
==SM8950
==SXR2230P
==G2 Gen 1
==WCD9378
==WCD9370
==QCS8550
==SDX81
==WSA8832
==WSA8830
==Snapdragon 8 Gen 5
==SM8735P
==QFW7124
==Snapdragon AR1 Gen 1 Platform
==QCA8386
==QXM1083
==QCN6224
==WCN6650
==FWA Gen 5 Elite Platform
==X1E80100
==AR8035
==QMP1000
==WCD9390
==Palawan25
==Snapdragon 6 Gen 1 Mobile Platform
==Snapdragon 8+ Gen 2 Mobile Platform
==SW-only
==QCA6391
==WSA8815
==Snapdragon AR1+ Gen 1 Platform
==Snapdragon X75 5G Modem-RF System
==WSA8850W
==Snapdragon 8 Elite Gen 5
==QPA1086BD
==WCN3988
==Q-7790
==S5 Sound Platform
==SM7635P
==SM8750P
==QCC2070
==QCC5161
==FastConnect 7800
==SM8550P
==SAR2130P
==WCN7881
==SM7435P
==QXM1094
==Snapdragon 8 Gen 2 Mobile Platform
==XRV7209
==QCA0000
==Pandeiro
==WSA8810
==IQX5121
==QCA8081
==CQ8845S
==QXM1095
==QPA1083BD
==MBM715
==WCD9375
==QCC2076
==Snapdragon 7s Gen 3 Mobile Platform
==CQ8750M
==Netrani
==SC8380XP
==IQ8 Series Platform
==WCN7860
==WSA8855C
==XRV9209
==SM6650P
==CQ7790M
==SM8635
==WCN7880
==WCD9395
==QCC710
==Snapdragon 8 Elite
==WCD9385
==QCS6690
==Snapdragon 7 Gen 4 Mobile Platform
==Snapdragon 6 Gen 4 Mobile Platform
==SM6475Q
==SM7675
==QCN9012
==QCC6705
==QXM1096
==SM7675P
==CQ7790
==QMP2001
==QFW7114
==FastConnect 6200
==QLN1083BD
==Snapdragon X72 5G Modem-RF System
==Snapdragon S7 Sound Gen 1 Platforms
==QCF8001
==QCN9011
==Cologne
==Milos
==Snapdragon 8 Gen 3 Mobile Platform

Matching in nixpkgs

pkgs.snapdragon-profiler

None

nixos-unstable 2021.2
- nixpkgs-unstable 2021.2
nixos-26.05 2021.2
- nixos-26.05-small 2021.2
- nixpkgs-26.05-darwin 2021.2

Dismissed

(not in Nixpkgs)

Permalink CVE-2026-25282

7.9 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Changed (C)
Confidentiality (C): Low (L)
Integrity (I): Low (L)
Availability (A): High (H)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): Low (L)
Modified Scope (MS): Changed (C)
Modified Integrity (MI): Low (L)
Modified Availability (MA): High (H)

updated 6 days, 2 hours ago by @LeSuisse Activity log

Created suggestion 6 days, 8 hours ago
@LeSuisse dismissed (not in Nixpkgs) 6 days, 2 hours ago

Out-of-bounds Read in OOBM

Transient DOS when processing unverified data from a neighboring system causes out of bound memory access.

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/september-20…

Affected products

Snapdragon

==Snapdragon X2 Elite
==WSA8840
==WCD9378C
==WSA8845H
==WSA8845
==FastConnect 7800
==Cologne

Matching in nixpkgs

pkgs.snapdragon-profiler

None

nixos-unstable 2021.2
- nixpkgs-unstable 2021.2
nixos-26.05 2021.2
- nixos-26.05-small 2021.2
- nixpkgs-26.05-darwin 2021.2

Dismissed

(not in Nixpkgs)

Permalink CVE-2026-25275

7.5 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): None (N)
Integrity (I): None (N)
Availability (A): High (H)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): High (H)

updated 6 days, 2 hours ago by @LeSuisse Activity log

Created suggestion 6 days, 8 hours ago
@LeSuisse dismissed (not in Nixpkgs) 6 days, 2 hours ago

Buffer Over-read in WLAN Firmware

Transient DOS when processing authentication frames with invalid FILS information element header lengths.

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/september-20…

Affected products

Snapdragon

==QCA6797AQ
==QCF8000
==WCN7760
==Networking Pro 600 Platform
==IPQ8071
==SM7550P
==WCD9371
==QAMSRV1H
==IQX7181
==Immersive Home 326 Platform
==QAMSRV1M
==WCN6755
==QCM6125
==WSA8850
==SXR2250P
==AQT1000
==WSA8845
==QCA6777AQ
==SDX65M
==Immersive Home 216 Platform
==QCA6698AQ
==SAR1165P
==SA8295P
==QCN5024
==MBM415
==G3x Gen 2
==Snapdragon Reality Elite Platform
==IPQ8074
==SD865 5G
==Monaco_IOT
==Snapdragon 8cx Compute Platform
==Snapdragon 865+ 5G Mobile Platform
==IPQ8070
==Immersive Home 214 Platform
==FWA Gen 3 Ultra Platform
==CQ2390M
==QCA6595
==WCD9341
==SM8975
==SA9000P
==SXR2230P
==G2 Gen 1
==WCN3990
==Immersive Home 3210 Platform
==QCN9100
==QFW7124
==Snapdragon XR2 5G Platform
==NPro A8 Elite Platform
==IQ10 Series
==WCN3950
==QXM1083
==Snapdragon 660 Mobile Platform
==QCN6224
==FWA Gen 5 Elite Platform
==Snapdragon X55 5G Modem-RF System
==Immersive Home 318 Platform
==Snapdragon 7 Gen 1 Mobile Platform
==AR8035
==X1E80100
==QMP1000
==Palawan25
==IPQ5302
==Congo
==QCA6391
==QCA6554A
==QCA6574AU
==QPA1086BD
==WCN3988
==SM6225P
==QCN9022
==Snapdragon 460 Mobile Platform
==QCA6688AQ
==AR8031
==FastConnect 7800
==Snapdragon 778G 5G Mobile Platform
==QCA6698AU
==Snapdragon 888+ 5G Mobile Platform
==XRV7209
==SnapdragonAuto 4GModem
==WSA8810
==IQX5121
==WCN3980
==QCA6430
==Snapdragon W5+ Gen 1 Wearable Platform
==Snapdragon 7s Gen 3 Mobile Platform
==IPQ8072
==Netrani
==QCN5154
==WSA8855C
==XRV9209
==SA8255P
==Smart Audio 400 Platform
==SA7775P
==Snapdragon X53 5G Modem-RF System
==QCA2064
==Snapdragon 8 Elite
==Snapdragon 480 5G Mobile Platform
==WCD9385
==Snapdragon 7 Gen 4 Mobile Platform
==QCN9024
==5G Fixed Wireless Access Platform
==QCA8080
==QCN9012
==QCN9274
==IPQ9008
==QXM1096
==QCA4024
==Snapdragon 8cx Compute Platform "Poipu Pro"
==QCS4490
==Snapdragon X72 5G Modem-RF System
==SA510M
==Cologne
==Snapdragon 8 Gen 3 Mobile Platform
==Kalpeni
==Snapdragon Cockpit Elite
==QCN6023
==FastConnect 6800
==QLN1086BD
==QCM4290
==Networking Pro 1200 Platform
==QXM1093
==SD662
==QCN6274
==CSRB31024
==QCN7605
==Networking Pro 1610 Platform
==Snapdragon 8+ Gen 1 Mobile Platform
==QXM1086
==WCN7861
==Networking Pro 400 Platform
==FastConnect 6700
==IPQ9554
==QCC2073
==Snapdragon 8c Compute Platform (SC8180XP-AD) "Poipu Lite"
==Snapdragon 8cx Gen 3 Compute Platform
==SM4850
==IPQ6010
==QCN9003
==IQ6 Series Platform
==QCM6490
==Snapdragon X65 5G Modem-RF System
==SM6475P
==Snapdragon 662 Mobile Platform
==SM6450P
==Networking Pro 800 Platform
==WCN8841
==Qualcomm Video Collaboration VC1 Platform
==SM7750P
==SM8845P
==SM7550
==CQ8725S
==Qualcomm Video Collaboration VC5 Platform
==QCA6564AU
==WCD9370
==SDX81
==Vision Intelligence 400 Platform
==WSA8832
==SM8735P
==QCM4490
==SA6145P
==SM6250
==IPQ5312
==WSA8815
==QCA6678AQ
==SA4155P
==Q-7790
==SM7635P
==Snapdragon 8 Gen 1 Mobile Platform
==QCN5052
==Snapdragon 4 Gen 1 Mobile Platform
==LeMans_AU_LGIT
==SM7435P
==QCA9889
==QCA8081
==Snapdragon 865 5G Mobile Platform
==QCM4325
==Snapdragon X35 5G Modem-RF System
==Snapdragon G1 Gen 2 Gaming Platform
==SD 8 Gen1 5G
==Snapdragon 695 5G Mobile Platform
==Trestles
==Networking Pro 1210 Platform
==QCA6420
==SM8635
==Marina
==Snapdragon 6 Gen 4 Mobile Platform
==SM6475Q
==CQ7790
==SW5100P
==QCN9070
==QCN9011
==QCN5124
==QCA0000
==Milos
==WCN3910
==SA8770P
==SM7325P
==FastConnect 6900
==Snapdragon 680 4G Mobile Platform
==Robotics RB2 Platform
==IPQ8078
==SM6850
==Snapdragon 7c+ Gen 3 Compute
==Snapdragon 6 Gen 3 Mobile Platform
==Networking Pro 810 Platform
==WSA8845H
==SM8635P
==QCA8337
==SDA660
==QCA6574
==IQ9 Series Platform
==Robotics RB5 Platform
==Orne
==QCA6574A
==Snapdragon Ride Elite
==SM7435
==Snapdragon 8c Compute Platform "Poipu Lite"
==Snapdragon 778G+ 5G Mobile Platform
==WCD9340
==WSA8835
==QCN6402
==SM4850P
==Snapdragon 480+ 5G Mobile Platform
==QCA2065
==SM7525
==QCS8550
==Snapdragon 8 Gen 5
==SA8620P
==IPQ6000
==QCN6024
==Snapdragon 8cx Gen 2 5G Compute Platform "Poipu Pro"
==QCA8386
==QCN6132
==CSR8811
==SA8195P
==WCN6650
==WCD9390
==QCA8075
==QCN5022
==Snapdragon 7+ Gen 2 Mobile Platform
==SW-only
==Snapdragon Auto 5G Modem-RF
==QCN5550
==Snapdragon AR1+ Gen 1 Platform
==IPQ5332
==QCC2070
==SM8750P
==QCA8084
==SAR2130P
==QXM1094
==QCA6595AU
==Snapdragon XR2+ Gen 1 Platform
==QCN6412
==CQ8845S
==QXM1095
==QPA1083BD
==QCC2076
==WCD9335
==QCN5064
==QCA6696
==SC8380XP
==SRV1M
==QCN7606
==SA4150P
==QCM2290
==IPQ5010
==QCA8085
==CQ7790M
==QCA8082
==WCD9395
==QCC710
==QCA2062
==Snapdragon 888 5G Mobile Platform
==SA6155P
==SM7675
==Snapdragon 7c Compute Platform
==Snapdragon 8cx Gen 2 5G Compute Platform
==QCC6705
==QMP2001
==QCN5122
==SA8150P
==QCF8001
==QCN9000
==SM4875
==Snapdragon 782G Mobile Platform
==QCA9888
==Snapdragon X2 Elite
==WCN6450
==Milos_IOT
==Qualcomm FastConnect 8800 Mobile Connectivity System
==QCN5054
==SM8650Q
==WCD9360
==IPQ6018
==QCN5164
==Kobuk
==QCN6122
==SA6155
==WCD9380
==C110100
==Snapdragon 870 5G Mobile Platform
==QCA6584AU
==IPQ8076
==WSA8840
==QCN9002
==WCD9378C
==SM8950P
==CSRA6620
==QCN6422
==SA6150P
==QCN6432
==QCM5430
==IPQ5028
==LeMansAU
==SA7255P
==SM8950
==QCA2066
==IPQ9570
==Snapdragon 4 Gen 2 Mobile Platform
==QAM8255P
==WCD9378
==QCA8072
==QCN5021
==WSA8830
==Q-4390
==Snapdragon AR1 Gen 1 Platform
==SM8475P
==Snapdragon Auto 5G Modem-RF Gen 2
==SA8145P
==QAM8295P
==Networking Pro 610 Platform
==Immersive Home 316 Platform
==Snapdragon 6 Gen 1 Mobile Platform
==Snapdragon 8+ Gen 2 Mobile Platform
==Snapdragon X75 5G Modem-RF System
==WSA8850W
==Snapdragon 8 Elite Gen 5
==IPQ9574
==CQ2390S
==SA8155P
==SM8550P
==Snapdragon 685 4G Mobile Platform
==WCN7881
==PMP8074
==Snapdragon 8 Gen 2 Mobile Platform
==QCA8695AU
==Pandeiro
==MBM715
==SM8975P
==WCD9375
==Snapdragon 690 5G Mobile Platform
==CQ8750M
==IQ8 Series Platform
==CSRA6640
==G1 Gen 1
==WCN7860
==SM6650P
==QCA6438
==SW5100
==Snapdragon 7c Gen 2 Compute Platform "Rennell Pro"
==QCS2290
==WCN7880
==Qualcomm Video Collaboration VC3 Platform
==QCS6690
==SA8155
==QCS4290
==QCN5152
==QCA6428
==SRV1H
==SM7675P
==Flight RB5 5G Platform
==QFW7114
==QCN9001
==FastConnect 6200
==QLN1083BD
==QCA6787AQ

Matching in nixpkgs

pkgs.snapdragon-profiler

None

nixos-unstable 2021.2
- nixpkgs-unstable 2021.2
nixos-26.05 2021.2
- nixos-26.05-small 2021.2
- nixpkgs-26.05-darwin 2021.2

Dismissed

(not in Nixpkgs)

Permalink CVE-2026-25290

7.8 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

updated 6 days, 2 hours ago by @LeSuisse Activity log

Created suggestion 6 days, 8 hours ago
@LeSuisse dismissed (not in Nixpkgs) 6 days, 2 hours ago

Integer Overflow or Wraparound in OOBM

Memory Corruption when validating large data buffers from external sources using addition to check buffer length.

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/september-20…

Affected products

Snapdragon

==Snapdragon X2 Elite
==WSA8840
==WCD9378C
==WSA8845H
==WSA8845
==FastConnect 7800
==Cologne

Matching in nixpkgs

pkgs.snapdragon-profiler

None

nixos-unstable 2021.2
- nixpkgs-unstable 2021.2
nixos-26.05 2021.2
- nixos-26.05-small 2021.2
- nixpkgs-26.05-darwin 2021.2

Dismissed

(not in Nixpkgs)

Permalink CVE-2026-25281

7.4 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Adjacent (A)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Changed (C)
Confidentiality (C): None (N)
Integrity (I): None (N)
Availability (A): High (H)
Modified Attack Vector (MAV): Adjacent (A)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Changed (C)
Modified Integrity (MI): None (N)
Modified Availability (MA): High (H)

updated 6 days, 2 hours ago by @LeSuisse Activity log

Created suggestion 6 days, 8 hours ago
@LeSuisse dismissed (not in Nixpkgs) 6 days, 2 hours ago

Allocation of Resources Without Limits or Throttling in OOBM

Transient DOS when processing large or numerous request buffers without sufficient memory allocation validation.

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/september-20…

Affected products

Snapdragon

==Snapdragon X2 Elite
==WSA8840
==WCD9378C
==WSA8845H
==WSA8845
==FastConnect 7800
==Cologne

Matching in nixpkgs

pkgs.snapdragon-profiler

None

nixos-unstable 2021.2
- nixpkgs-unstable 2021.2
nixos-26.05 2021.2
- nixos-26.05-small 2021.2
- nixpkgs-26.05-darwin 2021.2

Dismissed

(not in Nixpkgs)

Permalink CVE-2026-25278

7.8 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

updated 6 days, 2 hours ago by @LeSuisse Activity log

Created suggestion 6 days, 8 hours ago
@LeSuisse dismissed (not in Nixpkgs) 6 days, 2 hours ago

Time-of-check Time-of-use (TOCTOU) Race Condition in Automotive Software platform based on QNX

Memory Corruption when processing I2C transfer requests due to a race condition between memory allocation and data copying.

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/september-20…

Affected products

Snapdragon

==QCA6696
==QCA6797AQ
==SRV1M
==QCA6595
==LeMansAU
==SA7255P
==QCA6574AU
==SA8770P
==SA8255P
==SA7775P
==SA9000P
==QAMSRV1H
==QCA6688AQ
==QAM8255P
==SA8155P
==QAMSRV1M
==SA6155P
==LeMans_AU_LGIT
==QCA6595AU
==QCA8695AU
==SA8620P
==QAM8620P
==SRV1L
==SRV1H
==QCA6698AQ
==SA8295P
==SA8540P
==QAM8295P
==SA8195P

Matching in nixpkgs

pkgs.snapdragon-profiler

None

nixos-unstable 2021.2
- nixpkgs-unstable 2021.2
nixos-26.05 2021.2
- nixos-26.05-small 2021.2
- nixpkgs-26.05-darwin 2021.2

Dismissed

(not in Nixpkgs)

Permalink CVE-2026-25280

7.8 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

updated 6 days, 2 hours ago by @LeSuisse Activity log

Created suggestion 6 days, 8 hours ago
@LeSuisse dismissed (not in Nixpkgs) 6 days, 2 hours ago

Out-of-bounds Write in DSP Service

Memory corruption when processing escape handling flow with insufficient user buffer sizes.

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/september-20…

Affected products

Snapdragon

==Snapdragon X2 Elite
==SC8380XP
==QCM5430
==FastConnect 6900
==WCD9380
==IQX7181
==Qualcomm Video Collaboration VC3 Platform
==FastConnect 7800
==WCD9385
==WCD9370
==WSA8840
==WCD9378C
==WSA8845H
==WSA8845
==FastConnect 6700
==IQX5121
==WCD9375
==QCM6490
==Cologne
==QCA0000

Matching in nixpkgs

pkgs.snapdragon-profiler

None

nixos-unstable 2021.2
- nixpkgs-unstable 2021.2
nixos-26.05 2021.2
- nixos-26.05-small 2021.2
- nixpkgs-26.05-darwin 2021.2

Dismissed

(not in Nixpkgs)

Permalink CVE-2026-24074

7.8 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

updated 6 days, 2 hours ago by @LeSuisse Activity log

Created suggestion 6 days, 8 hours ago
@LeSuisse dismissed (not in Nixpkgs) 6 days, 2 hours ago

Out-of-bounds Write in Video

Memory Corruption when processing data with large offset and length values exceeds buffer limits during data copy operations.

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/september-20…

Affected products

Snapdragon

==Snapdragon X2 Elite
==SC8380XP
==QCM5430
==FastConnect 6900
==Snapdragon 7c Gen 2 Compute Platform "Rennell Pro"
==WCD9380
==IQX7181
==WCD9370
==Qualcomm Video Collaboration VC3 Platform
==FastConnect 7800
==WCD9385
==Snapdragon 7c+ Gen 3 Compute
==WSA8840
==WCD9378C
==WSA8845H
==WSA8845
==Snapdragon 7c Compute Platform
==FastConnect 6700
==IQX5121
==WCD9375
==SM6250
==FastConnect 6200
==QCM6490
==Cologne
==QCA0000

Matching in nixpkgs

pkgs.snapdragon-profiler

None

nixos-unstable 2021.2
- nixpkgs-unstable 2021.2
nixos-26.05 2021.2
- nixos-26.05-small 2021.2
- nixpkgs-26.05-darwin 2021.2

Dismissed

(not in Nixpkgs)

Permalink CVE-2026-24073

7.8 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

updated 6 days, 2 hours ago by @LeSuisse Activity log

Created suggestion 6 days, 8 hours ago
@LeSuisse dismissed (not in Nixpkgs) 6 days, 2 hours ago

Out-of-bounds Write in Video

Memory corruption when processing decode statistics due to insufficient validation of offset against structure size.

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/september-20…

Affected products

Snapdragon

==Cologne
==Snapdragon X2 Elite
==WSA8840
==FastConnect 6900
==SC8380XP
==WCD9378C
==WSA8845H
==WSA8845
==WCD9380
==IQX7181
==FastConnect 7800
==IQX5121
==QCA0000
==WCD9385

Matching in nixpkgs

pkgs.snapdragon-profiler

None

nixos-unstable 2021.2
- nixpkgs-unstable 2021.2
nixos-26.05 2021.2
- nixos-26.05-small 2021.2
- nixpkgs-26.05-darwin 2021.2

Dismissed

(not in Nixpkgs)

Permalink CVE-2026-25284

7.3 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Changed (C)
Confidentiality (C): High (H)
Integrity (I): None (N)
Availability (A): Low (L)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Changed (C)
Modified Integrity (MI): None (N)
Modified Availability (MA): Low (L)

updated 6 days, 2 hours ago by @LeSuisse Activity log

Created suggestion 6 days, 8 hours ago
@LeSuisse dismissed (not in Nixpkgs) 6 days, 2 hours ago

Buffer Over-read in OOBM

Information Disclosure when a pointer is reused after being deallocated.

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/september-20…

Affected products

Snapdragon

==Snapdragon X2 Elite
==WSA8840
==WCD9378C
==WSA8845H
==WSA8845
==FastConnect 7800
==Cologne

Matching in nixpkgs

pkgs.snapdragon-profiler

None

nixos-unstable 2021.2
- nixpkgs-unstable 2021.2
nixos-26.05 2021.2
- nixos-26.05-small 2021.2
- nixpkgs-26.05-darwin 2021.2

Suggestions search

References

Affected products

Matching in nixpkgs

pkgs.snapdragon-profiler

References

Affected products

Matching in nixpkgs

pkgs.snapdragon-profiler

References

Affected products

Matching in nixpkgs

pkgs.snapdragon-profiler

References

Affected products

Matching in nixpkgs

pkgs.snapdragon-profiler

References

Affected products

Matching in nixpkgs

pkgs.snapdragon-profiler

References

Affected products

Matching in nixpkgs

pkgs.snapdragon-profiler

References

Affected products

Matching in nixpkgs

pkgs.snapdragon-profiler

References

Affected products

Matching in nixpkgs

pkgs.snapdragon-profiler

References

Affected products

Matching in nixpkgs

pkgs.snapdragon-profiler

References

Affected products

Matching in nixpkgs

pkgs.snapdragon-profiler