Nixpkgs security tracker

Untriaged

Permalink CVE-2025-47392

8.8 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Adjacent (A)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Adjacent (A)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

created 1 month, 2 weeks ago Activity log

Created suggestion 1 month, 2 weeks ago

Integer Overflow or Wraparound in GPS

Memory corruption when decoding corrupted satellite data files with invalid signature offsets.

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-b…

Affected products

Snapdragon

==Snapdragon X53 5G Modem-RF System
==FastConnect 6800
==Snapdragon X72 5G Modem-RF System
==Snapdragon X35 5G Modem-RF System
==WCD9335
==WCD9395
==SW5100P
==WSA8815
==Snapdragon 460 Mobile Platform
==Snapdragon 4 Gen 1 Mobile Platform
==WCN7861
==WCN6755
==Snapdragon 865 5G Mobile Platform
==SM7550P
==Milos
==QCS4290
==FSM20055
==SDX61
==SW6100
==WCN3980
==SW5100
==WCD9375
==QCN9012
==QCN9024
==Themisto
==Snapdragon 8 Elite
==SM7435
==Snapdragon X65 5G Modem-RF System
==FastConnect 6200
==WCN7881
==FastConnect 6900
==FWA Gen 3 Ultra Platform
==QCA8081
==Snapdragon 7c+ Gen 3 Compute
==SM7325P
==Snapdragon 7s Gen 3 Mobile Platform
==QCM2290
==WCD9341
==Snapdragon 480 5G Mobile Platform
==Snapdragon X75 5G Modem-RF System
==QMP1000
==QCM5430
==SM8550P
==Snapdragon 888 5G Mobile Platform
==QCA6698AU
==WCD9371
==SM6250
==Orne
==QFW7124
==Snapdragon 685 4G Mobile Platform
==WSA8835
==Netrani
==QCN6274
==QCS8550
==Snapdragon 6 Gen 4 Mobile Platform
==Snapdragon 778G+ 5G Mobile Platform
==Snapdragon 8+ Gen 1 Mobile Platform
==WCN3988
==QCA8337
==SM7635P
==Snapdragon 865+ 5G Mobile Platform
==Snapdragon 690 5G Mobile Platform
==Snapdragon Auto 5G Modem-RF Gen 2
==Palawan25
==FastConnect 6700
==WCN3950
==WSA8832
==QCN9011
==WCD9378
==WSA8845
==QCA6688AQ
==SM6225P
==Robotics RB2 Platform
==Snapdragon 8 Gen 3 Mobile Platform
==WCD9370
==Snapdragon X55 5G Modem-RF System
==Snapdragon 662 Mobile Platform
==WCD9385
==SDX57M
==QCN6024
==SM8635
==QCA6696
==Snapdragon 7+ Gen 2 Mobile Platform
==WCN7860
==Snapdragon X70 Modem-RF System
==Snapdragon X32 5G Modem-RF System
==Snapdragon 7 Gen 1 Mobile Platform
==WSA8810
==SD662
==QCA6595AU
==QCA6797AQ
==SM7675P
==QCA6574A
==Snapdragon 8 Gen 2 Mobile Platform
==SD 8 Gen1 5G
==Snapdragon X80 5G Modem-RF System
==QCN6224
==Snapdragon 4 Gen 2 Mobile Platform
==QFW7114
==QCS2290
==Snapdragon 480+ 5G Mobile Platform
==SW6100P
==WSA8830
==QEP8111
==QCM6490
==WCD9390
==WCN7880
==Snapdragon 8+ Gen 2 Mobile Platform
==Snapdragon 7c Gen 2 Compute Platform "Rennell Pro"
==QCA6174A
==SM8650Q
==SM8635P
==CSRA6620
==G1 Gen 1
==5G Fixed Wireless Access Platform
==AR8035
==SM6650P
==FastConnect 7800
==Snapdragon 778G 5G Mobile Platform
==WCD9360
==WCN6650
==WSA8840
==QCS4490
==Snapdragon 888+ 5G Mobile Platform
==Snapdragon 870 5G Mobile Platform
==Snapdragon Auto 5G Modem-RF
==WCN3910
==Snapdragon W5+ Gen 1 Wearable Platform
==QCC710
==WSA8845H
==SM8475P
==Snapdragon 7c Compute Platform
==Snapdragon 8 Gen 1 Mobile Platform
==WCD9380
==Snapdragon 6 Gen 1 Mobile Platform
==QCA6698AQ
==Snapdragon 680 4G Mobile Platform
==Snapdragon 695 5G Mobile Platform
==SM8750P
==QCM4490
==QCA6574AU
==SM7675
==Qualcomm Video Collaboration VC3 Platform
==FSM200 Platform
==SM7550
==QCM4325
==QCA6584AU
==QCA6678AQ
==CSRA6640
==Snapdragon 6 Gen 3 Mobile Platform
==WCD9340
==QCA6391
==SDX71M
==Snapdragon 782G Mobile Platform

Matching in nixpkgs

pkgs.snapdragon-profiler

An profiler for Android devices running Snapdragon chips

nixos-unstable 2021.2
- nixpkgs-unstable 2021.2
- nixos-unstable-small 2021.2
nixos-25.11 2021.2
- nixos-25.11-small 2021.2
- nixpkgs-25.11-darwin 2021.2

Untriaged

Permalink CVE-2025-47390

7.8 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

created 1 month, 2 weeks ago Activity log

Created suggestion 1 month, 2 weeks ago

Buffer Over-read in Camera

Memory corruption while preprocessing IOCTL request in JPEG driver.

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-b…

Affected products

Snapdragon

==X2000092
==QCM5430
==X2000090
==FastConnect 7800
==WSA8840
==XG101039
==Snapdragon 8cx Gen 3 Compute Platform
==WSA8835
==XG101032
==X2000094
==WSA8845H
==WCD9380
==FastConnect 6700
==X2000086
==QCA0000
==WSA8845
==WCD9378C
==Qualcomm Video Collaboration VC3 Platform
==WCD9375
==WSA8830
==Cologne
==XG101002
==SC8380XP
==X2000077
==QCM6490
==WCD9370
==FastConnect 6900
==Snapdragon 7c+ Gen 3 Compute
==WCD9385

Matching in nixpkgs

pkgs.snapdragon-profiler

An profiler for Android devices running Snapdragon chips

nixos-unstable 2021.2
- nixpkgs-unstable 2021.2
- nixos-unstable-small 2021.2
nixos-25.11 2021.2
- nixos-25.11-small 2021.2
- nixpkgs-25.11-darwin 2021.2

Untriaged

Permalink CVE-2026-21376

7.8 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

created 1 month, 2 weeks ago Activity log

Created suggestion 1 month, 2 weeks ago

Buffer Over-read in Camera

Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver.

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-b…

Affected products

Snapdragon

==FastConnect 6800
==X2000092
==QCM5430
==X2000090
==FastConnect 7800
==Snapdragon 8cx Compute Platform "Poipu Pro"
==WSA8815
==Snapdragon 460 Mobile Platform
==WSA8840
==SM6250
==WSA8810
==Snapdragon 8cx Gen 3 Compute Platform
==XG101039
==Snapdragon 8c Compute Platform "Poipu Lite"
==WSA8835
==XG101032
==X2000094
==QCA6420
==WSA8845H
==WCN3988
==Snapdragon 7c Compute Platform
==Snapdragon 8cx Gen 2 5G Compute Platform "Poipu Pro"
==WCD9380
==Snapdragon 8c Compute Platform (SC8180XP-AD) "Poipu Lite"
==FastConnect 6700
==Snapdragon 8cx Compute Platform
==X2000086
==WCN3950
==WSA8832
==QCA0000
==Snapdragon AR1 Gen 1 Platform
==WSA8845
==WCD9378C
==Qualcomm Video Collaboration VC3 Platform
==WCD9375
==WSA8830
==Snapdragon 8cx Gen 2 5G Compute Platform
==Cologne
==QCA6430
==XG101002
==SC8380XP
==WCD9340
==X2000077
==FastConnect 6200
==QCM6490
==FastConnect 6900
==QCA6391
==AQT1000
==Snapdragon 662 Mobile Platform
==Snapdragon 7c+ Gen 3 Compute
==WCD9370
==WCD9385
==Snapdragon 7c Gen 2 Compute Platform "Rennell Pro"
==WCD9341

Matching in nixpkgs

pkgs.snapdragon-profiler

An profiler for Android devices running Snapdragon chips

nixos-unstable 2021.2
- nixpkgs-unstable 2021.2
- nixos-unstable-small 2021.2
nixos-25.11 2021.2
- nixos-25.11-small 2021.2
- nixpkgs-25.11-darwin 2021.2

Untriaged

Permalink CVE-2026-21372

7.8 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

created 1 month, 2 weeks ago Activity log

Created suggestion 1 month, 2 weeks ago

Heap-Based Buffer Overflow in Power Management IC

Memory Corruption when sending IOCTL requests with invalid buffer sizes during memcpy operations.

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-b…

Affected products

Snapdragon

==X2000092
==QCM5430
==X2000090
==FastConnect 7800
==Snapdragon 460 Mobile Platform
==WSA8840
==XG101039
==XG101032
==X2000094
==WSA8845H
==WCN3988
==WCD9380
==FastConnect 6700
==X2000086
==WCN3950
==WSA8845
==WCD9378C
==Qualcomm Video Collaboration VC3 Platform
==WCD9375
==Cologne
==XG101002
==X2000077
==QCM6490
==WCD9370
==FastConnect 6900
==Snapdragon 662 Mobile Platform
==Snapdragon 7c+ Gen 3 Compute
==WCD9385

Matching in nixpkgs

pkgs.snapdragon-profiler

An profiler for Android devices running Snapdragon chips

nixos-unstable 2021.2
- nixpkgs-unstable 2021.2
- nixos-unstable-small 2021.2
nixos-25.11 2021.2
- nixos-25.11-small 2021.2
- nixpkgs-25.11-darwin 2021.2

Untriaged

Permalink CVE-2026-21382

7.8 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

created 1 month, 2 weeks ago Activity log

Created suggestion 1 month, 2 weeks ago

Buffer Copy Without Checking Size of Input in Power Management IC

Memory Corruption when handling power management requests with improperly sized input/output buffers.

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-b…

Affected products

Snapdragon

==X2000092
==X2000090
==FastConnect 7800
==WSA8840
==XG101039
==XG101032
==X2000094
==WSA8845H
==WCD9380
==X2000086
==QCA0000
==WSA8845
==WCD9378C
==Cologne
==XG101002
==SC8380XP
==X2000077
==FastConnect 6900
==WCD9385

Matching in nixpkgs

pkgs.snapdragon-profiler

An profiler for Android devices running Snapdragon chips

nixos-unstable 2021.2
- nixpkgs-unstable 2021.2
- nixos-unstable-small 2021.2
nixos-25.11 2021.2
- nixos-25.11-small 2021.2
- nixpkgs-25.11-darwin 2021.2

Untriaged

Permalink CVE-2025-47389

7.8 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

created 1 month, 2 weeks ago Activity log

Created suggestion 1 month, 2 weeks ago

Buffer Copy Without Checking Size of Input in Automotive Platform

Memory corruption when buffer copy operation fails due to integer overflow during attestation report generation.

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-b…

Affected products

Snapdragon

==Snapdragon X53 5G Modem-RF System
==FastConnect 6800
==Snapdragon X72 5G Modem-RF System
==X2000090
==Snapdragon X35 5G Modem-RF System
==WCD9335
==WCD9395
==WSA8815
==Snapdragon 460 Mobile Platform
==XRV9209
==Snapdragon 4 Gen 1 Mobile Platform
==Snapdragon 8 Elite Gen 5
==SA8295P
==WCN7861
==SA8155P
==WCN6755
==Snapdragon 865 5G Mobile Platform
==LeMans_AU_LGIT
==XRV7209
==Milos
==SA8255P
==QAM8397P
==SW6100
==WCN3980
==QXM1086
==SA8145P
==WCD9375
==Themisto
==XG101002
==Pandeiro
==Snapdragon 8 Elite
==SM7435
==WCN7881
==FastConnect 6200
==FastConnect 6900
==FWA Gen 3 Ultra Platform
==QCA8081
==Snapdragon 7c+ Gen 3 Compute
==SM7325P
==Snapdragon 7s Gen 3 Mobile Platform
==Monaco_IOT
==QCM2290
==Snapdragon 480 5G Mobile Platform
==Snapdragon X75 5G Modem-RF System
==QMP1000
==QCM5430
==Snapdragon 888 5G Mobile Platform
==Snapdragon XR2 5G Platform
==Orne
==QFW7124
==XG101039
==WSA8835
==Netrani
==QCN6274
==XG101032
==Snapdragon 6 Gen 4 Mobile Platform
==LeMansAU
==QPA1083BD
==Snapdragon 778G+ 5G Mobile Platform
==WCN3988
==SD865 5G
==QCA8337
==SM7635P
==Snapdragon 865+ 5G Mobile Platform
==Snapdragon 690 5G Mobile Platform
==Snapdragon AR1+ Gen 1 Platform
==Palawan25
==FastConnect 6700
==QLN1086BD
==Snapdragon Auto 5G Modem-RF Gen 2
==QAM8620P
==SA6145P
==SA6155P
==IQ8 Series Platform
==WCN3950
==WSA8832
==Snapdragon AR1 Gen 1 Platform
==WCD9378
==WCD9378C
==QCA8695AU
==WSA8845
==QXM1093
==QCA6688AQ
==Robotics RB2 Platform
==Snapdragon 8 Gen 3 Mobile Platform
==WCD9370
==Snapdragon X55 5G Modem-RF System
==Snapdragon 662 Mobile Platform
==WCD9385
==SM8635
==X2000092
==QCA6696
==WCN7860
==SRV1H
==Snapdragon X32 5G Modem-RF System
==WSA8810
==QCA6595AU
==SA6150P
==QCA6797AQ
==SM7675P
==QXM1096
==QCA6574A
==SXR2330P
==QCA6574
==SRV1L
==QCN6224
==QXM1095
==Snapdragon 4 Gen 2 Mobile Platform
==X2000086
==QFW7114
==QAMSRV1M
==QCS2290
==Snapdragon 480+ 5G Mobile Platform
==SW6100P
==WSA8830
==QEP8111
==Cologne
==QPA1086BD
==SA7255P
==Snapdragon XR2+ Gen 1 Platform
==SC8380XP
==X2000077
==QCM6490
==WCD9390
==QAM8255P
==WCN7880
==QCA6174A
==SA8195P
==SM8635P
==CSRA6620
==SM8650Q
==QXM1094
==AR8035
==IQ9 Series Platform
==SM6650P
==FastConnect 7800
==SA8540P
==Snapdragon 778G 5G Mobile Platform
==WCN6650
==WSA8840
==Snapdragon 888+ 5G Mobile Platform
==Snapdragon 870 5G Mobile Platform
==SAR1165P
==WCN3910
==QAMSRV1H
==X2000094
==SRV1M
==SA8770P
==QXM1083
==QCC710
==QLN1083BD
==WCN6450
==WSA8845H
==QCA6595
==QAM8295P
==SA8620P
==WCD9380
==Snapdragon 6 Gen 1 Mobile Platform
==QCA6698AQ
==Snapdragon 695 5G Mobile Platform
==QCM6125
==Qualcomm Video Collaboration VC1 Platform
==SA9000P
==G2 Gen 1
==SM8750P
==QCA6574AU
==SM7675
==SA7775P
==Qualcomm Video Collaboration VC3 Platform
==SA8150P
==QCA6584AU
==QCA6678AQ
==SXR2350P
==CSRA6640
==Snapdragon 6 Gen 3 Mobile Platform
==WCD9340
==QCA6391
==IQ6 Series Platform
==Snapdragon 782G Mobile Platform

Matching in nixpkgs

pkgs.snapdragon-profiler

An profiler for Android devices running Snapdragon chips

nixos-unstable 2021.2
- nixpkgs-unstable 2021.2
- nixos-unstable-small 2021.2
nixos-25.11 2021.2
- nixos-25.11-small 2021.2
- nixpkgs-25.11-darwin 2021.2

Untriaged

Permalink CVE-2026-21374

7.8 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

created 1 month, 2 weeks ago Activity log

Created suggestion 1 month, 2 weeks ago

Buffer Over-read in Camera

Memory Corruption when processing auxiliary sensor input/output control commands with insufficient buffer size validation.

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-b…

Affected products

Snapdragon

==FastConnect 6800
==X2000092
==QCM5430
==X2000090
==FastConnect 7800
==Snapdragon 8cx Compute Platform "Poipu Pro"
==WSA8815
==Snapdragon 460 Mobile Platform
==WSA8840
==SM6250
==WSA8810
==Snapdragon 8cx Gen 3 Compute Platform
==XG101039
==Snapdragon 8c Compute Platform "Poipu Lite"
==WSA8835
==XG101032
==X2000094
==QCA6420
==WSA8845H
==WCN3988
==Snapdragon 7c Compute Platform
==Snapdragon 8cx Gen 2 5G Compute Platform "Poipu Pro"
==WCD9380
==Snapdragon 8c Compute Platform (SC8180XP-AD) "Poipu Lite"
==FastConnect 6700
==Snapdragon 8cx Compute Platform
==X2000086
==WCN3950
==WSA8832
==QCA0000
==Snapdragon AR1 Gen 1 Platform
==WSA8845
==WCD9378C
==Qualcomm Video Collaboration VC3 Platform
==WCD9375
==WSA8830
==Snapdragon 8cx Gen 2 5G Compute Platform
==Cologne
==QCA6430
==XG101002
==SC8380XP
==WCD9340
==X2000077
==FastConnect 6200
==QCM6490
==FastConnect 6900
==QCA6391
==AQT1000
==Snapdragon 662 Mobile Platform
==Snapdragon 7c+ Gen 3 Compute
==WCD9370
==WCD9385
==Snapdragon 7c Gen 2 Compute Platform "Rennell Pro"
==WCD9341

Matching in nixpkgs

pkgs.snapdragon-profiler

An profiler for Android devices running Snapdragon chips

nixos-unstable 2021.2
- nixpkgs-unstable 2021.2
- nixos-unstable-small 2021.2
nixos-25.11 2021.2
- nixos-25.11-small 2021.2
- nixpkgs-25.11-darwin 2021.2

Untriaged

Permalink CVE-2026-3888

7.8 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): High (H)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Changed (C)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): High (H)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Changed (C)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

created 2 months, 1 week ago Activity log

Created suggestion 2 months, 1 week ago

Local Privilege Escalation in snapd

Local privilege escalation in snapd on Linux allows local attackers to get root privilege by re-creating snap's private /tmp directory when systemd-tmpfiles is configured to automatically clean up this directory. This issue affects Ubuntu 16.04 LTS, 18.04 LTS, 20.04 LTS, 22.04 LTS, and 24.04 LTS.

References

https://ubuntu.com/security/CVE-2026-3888 issue-trackingvdb-entry
https://ubuntu.com/security/notices/USN-8102-1 vendor-advisory
https://discourse.ubuntu.com/t/snapd-local-privilege-escalation-cve-2026-3888 technical-descriptionvendor-advisory
https://blog.qualys.com/vulnerabilities-threat-research/2026/03/17/cve-2026-388… media-coveragetechnical-description
https://cdn2.qualys.com/advisory/2026/03/17/snap-confine-systemd-tmpfiles.txt media-coveragetechnical-description

Affected products

snapd

<2.75.1
*

Matching in nixpkgs

pkgs.snapdragon-profiler

An profiler for Android devices running Snapdragon chips

nixos-unstable 2021.2
- nixpkgs-unstable 2021.2
- nixos-unstable-small 2021.2
nixos-25.11 2021.2
- nixos-25.11-small 2021.2
- nixpkgs-25.11-darwin 2021.2

Dismissed

Permalink CVE-2025-47397

7.8 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

updated 3 months, 2 weeks ago by @jopejoe1 Activity log

Created suggestion 3 months, 3 weeks ago
@jopejoe1 dismissed 3 months, 2 weeks ago

Improper Release of Memory Before Removing Last Reference in Graphics

Memory Corruption when initiating GPU memory mapping using scatter-gather lists due to unchecked IOMMU mapping errors.

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/february-202…

Affected products

Snapdragon

==WCD9335
==WCD9395
==QCM8550
==SW5100P
==WSA8815
==Snapdragon 460 Mobile Platform
==Snapdragon 4 Gen 1 Mobile Platform
==Snapdragon 8 Elite Gen 5
==SA8295P
==SAR2130P
==SAR1250P
==WCN7861
==SA8155P
==WCN6755
==Flight RB5 5G Platform
==SXR2250P
==LeMans_AU_LGIT
==Milos
==WCN3990
==QCS4290
==SA8255P
==QAM8397P
==Kalpeni
==SW6100
==WCN3980
==SW5100
==WCD9375
==QCN9012
==Themisto
==Pandeiro
==Snapdragon 8 Elite
==WCN7881
==FastConnect 6200
==FastConnect 6900
==Snapdragon 7s Gen 3 Mobile Platform
==Monaco_IOT
==QCM2290
==WCD9341
==Snapdragon 480 5G Mobile Platform
==QMP1000
==QCM5430
==SM8550P
==QCA6698AU
==Snapdragon XR2 5G Platform
==Snapdragon 685 4G Mobile Platform
==Orne
==WSA8835
==QCS8550
==Snapdragon 6 Gen 4 Mobile Platform
==LeMansAU
==QPA1083BD
==Snapdragon 8+ Gen 1 Mobile Platform
==WCN3988
==SD865 5G
==SM7635P
==Palawan25
==FastConnect 6700
==QLN1086BD
==QAM8620P
==QMB715
==SA6155P
==WSA8832
==IQ8 Series Platform
==QAM8797P
==WCN3950
==WSA8845
==QCN9011
==Snapdragon AR1 Gen 1 Platform
==QCA8695AU
==WCD9378
==QXM1093
==QCA6688AQ
==SM6225P
==Snapdragon 8 Gen 3 Mobile Platform
==WCD9370
==Snapdragon 662 Mobile Platform
==WCD9385
==SM8635
==QMB415
==QCA6696
==WCN7860
==SRV1H
==Robotics RB5 Platform
==Milos_IOT
==WSA8810
==SD662
==QCA6595AU
==QCA6797AQ
==SM7675P
==QXM1096
==QCA6574A
==QCN9274
==Snapdragon 8 Gen 2 Mobile Platform
==SD 8 Gen1 5G
==SXR2330P
==QCA6574
==SRV1L
==QXM1095
==Snapdragon 4 Gen 2 Mobile Platform
==QAMSRV1M
==QCS2290
==Snapdragon 480+ 5G Mobile Platform
==SW6100P
==SDR753
==WSA8830
==SXR1230P
==Vision Intelligence 400 Platform
==SA7255P
==QPA1086BD
==Snapdragon XR2+ Gen 1 Platform
==QCM6490
==WCD9390
==QAM8255P
==WCN7880
==Snapdragon 8+ Gen 2 Mobile Platform
==SA8195P
==QCM8838
==SM8635P
==SM8650Q
==G1 Gen 1
==QXM1094
==IQ9 Series Platform
==SM6650P
==FastConnect 7800
==QCS6690
==WCN6650
==WSA8840
==QCS4490
==WCN3910
==QAMSRV1H
==SRV1M
==SA8770P
==Snapdragon W5+ Gen 1 Wearable Platform
==QLN1083BD
==WSA8845H
==Qualcomm Video Collaboration VC5 Platform
==WCN6450
==QCA6595
==QAM8295P
==SA8620P
==Snapdragon 8 Gen 1 Mobile Platform
==WCD9380
==SXR2230P
==QCA6698AQ
==Snapdragon 680 4G Mobile Platform
==Snapdragon 695 5G Mobile Platform
==QCM6125
==Qualcomm Video Collaboration VC1 Platform
==SA9000P
==G2 Gen 1
==SM8750P
==QCM4490
==TalynPlus
==QCA6574AU
==SM7675
==SA7775P
==IQ10 Series
==Qualcomm Video Collaboration VC3 Platform
==SSG2115P
==QCM4325
==Snapdragon 7 Gen 4 Mobile Platform
==SSG2125P
==QCA6678AQ
==SXR2350P
==QCA6391
==SAR2230P
==IQ6 Series Platform
==QRB5165N

Matching in nixpkgs

pkgs.snapdragon-profiler

An profiler for Android devices running Snapdragon chips

nixos-unstable 2021.2
- nixpkgs-unstable 2021.2
- nixos-unstable-small 2021.2
nixos-25.11 -
- nixos-25.11-small 2021.2
- nixpkgs-25.11-darwin 2021.2

Not present in nixpkgs

Suggestions search

References

Affected products

Matching in nixpkgs

pkgs.snapdragon-profiler

References

Affected products

Matching in nixpkgs

pkgs.snapdragon-profiler

References

Affected products

Matching in nixpkgs

pkgs.snapdragon-profiler

References

Affected products

Matching in nixpkgs

pkgs.snapdragon-profiler

References

Affected products

Matching in nixpkgs

pkgs.snapdragon-profiler

References

Affected products

Matching in nixpkgs

pkgs.snapdragon-profiler

References

Affected products

Matching in nixpkgs

pkgs.snapdragon-profiler

References

Affected products

Matching in nixpkgs

pkgs.snapdragon-profiler

References

Affected products

Matching in nixpkgs

pkgs.snapdragon-profiler