Nixpkgs security tracker

Dismissed

(not in Nixpkgs)

Permalink CVE-2026-24084

7.5 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): None (N)
Availability (A): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): None (N)

updated 1 month, 2 weeks ago by @LeSuisse Activity log

Created suggestion 1 month, 2 weeks ago
@LeSuisse dismissed (not in Nixpkgs) 1 month, 2 weeks ago

Insecure Security Identifier Mechanism in Multi-Mode Call Processor

Weak configuration when UE does not verify the consistency of its additional security capabilities with the replayed capabilities.

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2026-…

Affected products

Snapdragon

==QCA6574AU
==Snapdragon 888+ 5G Mobile Platform
==QCA6696
==Snapdragon 778G+ 5G Mobile Platform
==Snapdragon 865 5G Mobile Platform
==QCM4490
==QCN6024
==Snapdragon Auto 5G Modem-RF Gen 2
==QFW7124
==QCA6688AQ
==WCD9341
==WCD9371
==QCN9024
==QCA6584AU
==QCA6595AU
==SM7550
==Snapdragon 6 Gen 4 Mobile Platform
==Snapdragon 870 5G Mobile Platform
==Snapdragon X70 Modem-RF System
==Snapdragon 4 Gen 1 Mobile Platform
==QCA6391
==Snapdragon 7+ Gen 2 Mobile Platform
==Qualcomm Video Collaboration VC3 Platform
==Snapdragon 7 Gen 1 Mobile Platform
==Snapdragon 480 5G Mobile Platform
==Snapdragon Auto 5G Modem-RF
==Snapdragon 8cx Compute Platform
==WCN7880
==FWA Gen 3 Ultra Platform
==WSA8845H
==WSA8840
==Snapdragon X72 5G Modem-RF System
==WSA8835
==SM6650P
==WCN7861
==Milos
==WCN6755
==5G Fixed Wireless Access Platform
==FastConnect 6200
==SM8650Q
==Snapdragon 4 Gen 2 Mobile Platform
==Snapdragon 8 Gen 1 Mobile Platform
==WCN7881
==WSA8845
==QCN9012
==Snapdragon X55 5G Modem-RF System
==Snapdragon 8+ Gen 1 Mobile Platform
==SM8635P
==Snapdragon 8 Gen 3 Mobile Platform
==QCS8550
==Snapdragon 480+ 5G Mobile Platform
==FastConnect 6800
==QFW7114
==WSA8810
==SDX71M
==WCD9340
==Snapdragon 8c Compute Platform "Poipu Lite"
==WCD9395
==Snapdragon 695 5G Mobile Platform
==Palawan25
==SM7675P
==FastConnect 7800
==WCD9375
==QCA6430
==Snapdragon 7s Gen 3 Mobile Platform
==Snapdragon 888 5G Mobile Platform
==WCD9380
==Snapdragon 8+ Gen 2 Mobile Platform
==QCA6420
==Snapdragon 8cx Gen 2 5G Compute Platform "Poipu Pro"
==FastConnect 6700
==WSA8830
==SnapdragonAuto 4GModem
==WSA8815
==WSA8832
==AR8035
==QCC710
==AQT1000
==WCD9385
==QCM6490
==QCA8337
==SD 8 Gen1 5G
==SM8475P
==Snapdragon 778G 5G Mobile Platform
==SM8635
==WCD9390
==Snapdragon 8 Elite
==Snapdragon X65 5G Modem-RF System
==QCN6224
==Netrani
==SM7635P
==SM8750P
==Snapdragon X75 5G Modem-RF System
==QCA8081
==QCS4490
==Snapdragon 6 Gen 3 Mobile Platform
==WCD9370
==WCD9378
==Snapdragon 782G Mobile Platform
==QCM5430
==Snapdragon X80 5G Modem-RF System
==SDX57M
==SM7675
==FastConnect 6900
==QMP1000
==WCN3950
==Snapdragon 6 Gen 1 Mobile Platform
==SM7550P
==QCA6678AQ
==SM7325P
==Snapdragon 8 Gen 2 Mobile Platform
==WCN7860
==WCN3988
==Snapdragon 865+ 5G Mobile Platform
==QCA6698AU
==QCA6698AQ
==QCA6797AQ
==Orne
==Snapdragon 7c+ Gen 3 Compute
==Snapdragon 690 5G Mobile Platform
==QCA6174A
==SDX61
==Snapdragon X53 5G Modem-RF System
==QCN9011
==QCN6274
==SM8550P
==WCN6650
==SM7435

Matching in nixpkgs

pkgs.snapdragon-profiler

None

nixos-unstable 2021.2
- nixpkgs-unstable 2021.2
nixos-26.05 2021.2
- nixos-26.05-small 2021.2
- nixpkgs-26.05-darwin 2021.2

Dismissed

(not in Nixpkgs)

Permalink CVE-2026-24078

6.5 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Adjacent (A)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): None (N)
Availability (A): None (N)
Modified Attack Vector (MAV): Adjacent (A)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): None (N)

updated 1 month, 2 weeks ago by @LeSuisse Activity log

Created suggestion 1 month, 2 weeks ago
@LeSuisse dismissed (not in Nixpkgs) 1 month, 2 weeks ago

Exposure of Private Personal Information to an Unauthorized Actor in Data Modem

Information Disclosure when IPSec negotiation fails or is not established properly during NG-eCall SIP signaling.

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2026-…

Affected products

Snapdragon

==Snapdragon 480 5G Mobile Platform
==SM7635P
==QCM4490
==QCS8550
==FastConnect 6900
==FWA Gen 3 Ultra Platform
==QEP8111
==Snapdragon 685 4G Mobile Platform
==Snapdragon X53 5G Modem-RF System
==WCD9360
==WSA8815
==QFW7114
==QFW7124
==Snapdragon 8+ Gen 2 Mobile Platform
==WCD9378
==QCA8081
==Snapdragon 7c+ Gen 3 Compute
==WCD9371
==QMP1000
==SM7435
==SW6100P
==SW5100P
==FastConnect 6800
==SM7675
==Snapdragon 695 5G Mobile Platform
==G1 Gen 1
==WCN6755
==Palawan25
==WCN7861
==SM7675P
==QCC710
==QCM2290
==QCM6490
==Snapdragon X55 5G Modem-RF System
==Snapdragon 782G Mobile Platform
==WCD9335
==SM6650P
==FastConnect 7800
==Snapdragon 8 Gen 1 Mobile Platform
==Snapdragon W5+ Gen 1 Wearable Platform
==Snapdragon X72 5G Modem-RF System
==Snapdragon 6 Gen 3 Mobile Platform
==QCN6274
==QCA6797AQ
==QCA6688AQ
==Snapdragon 888+ 5G Mobile Platform
==Snapdragon 865+ 5G Mobile Platform
==WCN7860
==Snapdragon 480+ 5G Mobile Platform
==Snapdragon 7+ Gen 2 Mobile Platform
==SM7550
==Snapdragon 6 Gen 4 Mobile Platform
==WSA8840
==Snapdragon Auto 5G Modem-RF
==SM8475P
==Snapdragon 778G+ 5G Mobile Platform
==Snapdragon 8 Elite
==WCD9375
==Snapdragon 662 Mobile Platform
==WCN3988
==Snapdragon 7 Gen 1 Mobile Platform
==Snapdragon 7s Gen 3 Mobile Platform
==CSRA6640
==QCA6174A
==Orne
==SM7325P
==WSA8830
==QCS4290
==FastConnect 6700
==QCM4325
==WCN7880
==QCN9024
==Snapdragon X75 5G Modem-RF System
==FastConnect 6200
==SW6100
==Snapdragon 460 Mobile Platform
==Snapdragon 680 4G Mobile Platform
==Snapdragon 865 5G Mobile Platform
==Robotics RB2 Platform
==SM8635P
==Snapdragon 8 Gen 3 Mobile Platform
==FSM20055
==Snapdragon 888 5G Mobile Platform
==WCN6650
==QCN9011
==Qualcomm Video Collaboration VC3 Platform
==SM7550P
==SD662
==WCN7881
==5G Fixed Wireless Access Platform
==SM8650Q
==QCN6024
==Themisto
==Snapdragon X35 5G Modem-RF System
==QCN6224
==WCD9390
==SM6225P
==QCA6391
==WSA8845H
==QCM5430
==Snapdragon 6 Gen 1 Mobile Platform
==Snapdragon X65 5G Modem-RF System
==SDX61
==WSA8810
==FSM200 Platform
==SM8550P
==QCA6678AQ
==WCD9340
==Snapdragon 778G 5G Mobile Platform
==SDX57M
==QCN9012
==QCS2290
==SM8635
==WSA8832
==SW5100
==SD 8 Gen1 5G
==Snapdragon 8+ Gen 1 Mobile Platform
==WCN3910
==QCS4490
==Snapdragon Auto 5G Modem-RF Gen 2
==WCN3950
==Netrani
==QCA8337
==Snapdragon 870 5G Mobile Platform
==Snapdragon 8 Gen 2 Mobile Platform
==QCA6595AU
==QCA6696
==AR8035
==SM8750P
==Milos
==QCA6574A
==WCN3980
==WSA8835
==CSRA6620
==QCA6698AQ
==WSA8845
==Snapdragon X32 5G Modem-RF System
==WCD9370
==QCA6698AU
==WCD9380
==WCD9395
==WCD9385
==Snapdragon 4 Gen 2 Mobile Platform
==QCA6584AU
==QCA6574AU
==Snapdragon 4 Gen 1 Mobile Platform
==Snapdragon 690 5G Mobile Platform

Matching in nixpkgs

pkgs.snapdragon-profiler

None

nixos-unstable 2021.2
- nixpkgs-unstable 2021.2
nixos-26.05 2021.2
- nixos-26.05-small 2021.2
- nixpkgs-26.05-darwin 2021.2

Dismissed

(not in Nixpkgs)

Permalink CVE-2026-25292

7.6 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Physical (P)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Changed (C)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Physical (P)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Changed (C)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

updated 1 month, 2 weeks ago by @LeSuisse Activity log

Created suggestion 1 month, 2 weeks ago
@LeSuisse dismissed (not in Nixpkgs) 1 month, 2 weeks ago

Improper Validation of Syntactic Correctness of Input in Automotive Linux OS

Memory Corruption when processing untrusted user input in the fastboot command handler for audio framework configuration.

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2026-…

Affected products

Snapdragon

==QCM4290
==QDX1011
==QDU1000
==Snapdragon 480 5G Mobile Platform
==QCM4490
==QXM1096
==QCS8550
==FastConnect 6900
==FWA Gen 3 Ultra Platform
==QEP8111
==Snapdragon 685 4G Mobile Platform
==SRV1M
==WSA8815
==CQ7790
==QFW7114
==QFW7124
==Snapdragon 8+ Gen 2 Mobile Platform
==WCD9378
==QCA8081
==Qualcomm Video Collaboration VC5 Platform
==QAM8797P
==WCN3990
==QPA1086BD
==QMP1000
==SW5100P
==QCA9367
==QLN1083BD
==Snapdragon 695 5G Mobile Platform
==SDR753
==G1 Gen 1
==Palawan25
==Flight RB5 5G Platform
==SXR2350P
==QAM8620P
==QCC710
==QCM2290
==WCN6755
==WCN7861
==SA6150P
==QCM6490
==WCD9335
==QCS410
==SA6145P
==Snapdragon XR2+ Gen 1 Platform
==Kalpeni
==FastConnect 7800
==XRV7209
==SA8195P
==CQ8725S
==Snapdragon W5+ Gen 1 Wearable Platform
==QPA1083BD
==Qualcomm Video Collaboration VC1 Platform
==Snapdragon X72 5G Modem-RF System
==SRV1L
==QXM1095
==QCN6274
==SSG2125P
==SAR1165P
==QCA6797AQ
==QCA6688AQ
==SA9000P
==LeMansAU
==Snapdragon 480+ 5G Mobile Platform
==WCN7860
==SXR2330P
==WSA8840
==SDX81
==QAMSRV1H
==SSG2115P
==QCA6595
==SA8295P
==SA510M
==SA8770P
==SA8620P
==SA4150P
==Snapdragon 8 Elite
==WCD9375
==Snapdragon 8 Elite Gen 5
==QAM8255P
==Snapdragon 662 Mobile Platform
==WCN3988
==QCA6174A
==QDU1210
==WCN6450
==Orne
==QCM8838
==Robotics RB5 Platform
==SDA660
==WSA8830
==Snapdragon Wear Elite platform
==QCS4290
==FastConnect 6700
==QCM4325
==WCN7880
==Snapdragon X75 5G Modem-RF System
==FastConnect 6200
==QAMSRV1M
==QAM8295P
==Snapdragon 460 Mobile Platform
==Snapdragon 680 4G Mobile Platform
==Snapdragon 660 Mobile Platform
==Snapdragon 8 Gen 3 Mobile Platform
==SD865 5G
==SXR1230P
==Kobuk
==Qualcomm Video Collaboration VC3 Platform
==QCN9011
==Snapdragon AR1 Gen 1 Platform
==SRV1H
==SA8255P
==QCA6574
==QLN1086BD
==QRU1032
==SD662
==WCN7881
==QXM1083
==Themisto
==QCM6125
==Qualcomm Dragonwing QRU100 Platform
==Snapdragon X35 5G Modem-RF System
==QCN6224
==SM6370
==Snapdragon 7 Gen 4 Mobile Platform
==WCD9390
==X1E80100
==SM6225P
==QCA6391
==IQ10 Series
==WSA8845H
==QXM1086
==QDU1110
==Snapdragon XR2 5G Platform
==QCA9377
==G2 Gen 1
==QXM1094
==QRB5165N
==SA7775P
==WSA8810
==QCA8386
==SM8550P
==QMB715
==QCA6678AQ
==QCF8001
==WCD9340
==QCN9012
==QCS2290
==SA8145P
==SA8150P
==WCD9341
==WSA8832
==SW5100
==XRV9209
==QCA8695AU
==WCN3910
==QCS6690
==Pandeiro
==QCS4490
==Snapdragon Auto 5G Modem-RF Gen 2
==WCN3950
==QCA8337
==LeMans_AU_LGIT
==QXM1093
==SA7255P
==Snapdragon 8 Gen 2 Mobile Platform
==QCA6595AU
==QCA6696
==AR8035
==QCA6564AU
==Milos_IOT
==SM8750P
==WCN3980
==QCA6574A
==WSA8835
==QCA6698AQ
==WSA8845
==SA8155P
==QAM8397P
==SA6155P
==QCA6698AU
==Snapdragon X32 5G Modem-RF System
==WCD9370
==WCD9380
==Snapdragon AR1+ Gen 1 Platform
==Qualcomm Dragonwing X100 Accelerator Card
==WCD9385
==WCD9395
==QDX1010
==QCA6584AU
==QCA6574AU
==Snapdragon 4 Gen 1 Mobile Platform
==FWA Gen 5 Elite Platform

Matching in nixpkgs

pkgs.snapdragon-profiler

None

nixos-unstable 2021.2
- nixpkgs-unstable 2021.2
nixos-26.05 2021.2
- nixos-26.05-small 2021.2
- nixpkgs-26.05-darwin 2021.2

Dismissed

(not in Nixpkgs)

Permalink CVE-2026-24079

8.1 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Adjacent (A)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): None (N)
Modified Attack Vector (MAV): Adjacent (A)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): None (N)

updated 1 month, 2 weeks ago by @LeSuisse Activity log

Created suggestion 1 month, 2 weeks ago
@LeSuisse dismissed (not in Nixpkgs) 1 month, 2 weeks ago

Missing Authentication for Critical Function in Data Modem

Cryptographic Issue while processing registration requests with malformed or missing authentication parameters.

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2026-…

Affected products

Snapdragon

==CSRA6640
==Snapdragon 888+ 5G Mobile Platform
==QCA6574AU
==QCA6696
==Snapdragon 778G+ 5G Mobile Platform
==Snapdragon 865 5G Mobile Platform
==QCM4490
==Snapdragon Auto 5G Modem-RF Gen 2
==QCN6024
==QFW7124
==QCA6688AQ
==WCD9371
==QCN9024
==QCA6584AU
==QCA6595AU
==SM7550
==Snapdragon 6 Gen 4 Mobile Platform
==Snapdragon 870 5G Mobile Platform
==Snapdragon 4 Gen 1 Mobile Platform
==QCA6391
==Snapdragon 7+ Gen 2 Mobile Platform
==Qualcomm Video Collaboration VC3 Platform
==QCS2290
==FSM200 Platform
==Snapdragon 7 Gen 1 Mobile Platform
==Snapdragon Auto 5G Modem-RF
==WCN3980
==Snapdragon 460 Mobile Platform
==Snapdragon 480 5G Mobile Platform
==Snapdragon 680 4G Mobile Platform
==Snapdragon 662 Mobile Platform
==WCN7880
==FWA Gen 3 Ultra Platform
==WSA8845H
==WSA8840
==Snapdragon X72 5G Modem-RF System
==WSA8835
==QCM2290
==SM6650P
==WCN7861
==Milos
==WCN6755
==Snapdragon 8 Gen 1 Mobile Platform
==FastConnect 6200
==WSA8845
==WCN7881
==QEP8111
==SM8650Q
==Snapdragon 4 Gen 2 Mobile Platform
==QCN9012
==Snapdragon X55 5G Modem-RF System
==QCM4325
==Snapdragon 8+ Gen 1 Mobile Platform
==SD662
==SM8635P
==Snapdragon 8 Gen 3 Mobile Platform
==QCS8550
==Snapdragon 480+ 5G Mobile Platform
==FastConnect 6800
==QFW7114
==WSA8810
==G1 Gen 1
==WCD9340
==CSRA6620
==WCD9395
==Snapdragon 695 5G Mobile Platform
==Snapdragon 685 4G Mobile Platform
==FSM20055
==Palawan25
==SM7675P
==FastConnect 7800
==WCD9375
==Snapdragon 7s Gen 3 Mobile Platform
==Snapdragon 888 5G Mobile Platform
==WCD9380
==Snapdragon 8+ Gen 2 Mobile Platform
==FastConnect 6700
==WSA8830
==WSA8815
==WSA8832
==SW6100P
==SM6225P
==Themisto
==AR8035
==QCC710
==WCD9385
==QCM6490
==SW5100P
==QCA8337
==SD 8 Gen1 5G
==SM8475P
==Snapdragon 778G 5G Mobile Platform
==SM8635
==WCD9390
==Snapdragon 8 Elite
==Snapdragon X65 5G Modem-RF System
==QCN6224
==Netrani
==SW6100
==SM7635P
==SM8750P
==Snapdragon X75 5G Modem-RF System
==QCA8081
==QCS4490
==Snapdragon X32 5G Modem-RF System
==Snapdragon X35 5G Modem-RF System
==Snapdragon 6 Gen 3 Mobile Platform
==WCD9370
==WCD9378
==Snapdragon 782G Mobile Platform
==WCD9335
==QCM5430
==SM7675
==FastConnect 6900
==QMP1000
==WCN3950
==QCS4290
==Snapdragon 6 Gen 1 Mobile Platform
==SM7550P
==QCA6678AQ
==SM7325P
==Snapdragon 8 Gen 2 Mobile Platform
==WCN7860
==WCN3988
==Snapdragon 865+ 5G Mobile Platform
==QCA6698AU
==QCA6698AQ
==QCA6797AQ
==Orne
==Snapdragon 7c+ Gen 3 Compute
==Snapdragon 690 5G Mobile Platform
==QCA6174A
==SW5100
==SDX61
==Snapdragon X53 5G Modem-RF System
==QCN9011
==QCN6274
==WCN3910
==Robotics RB2 Platform
==Snapdragon W5+ Gen 1 Wearable Platform
==SM8550P
==WCN6650
==SM7435

Matching in nixpkgs

pkgs.snapdragon-profiler

None

nixos-unstable 2021.2
- nixpkgs-unstable 2021.2
nixos-26.05 2021.2
- nixos-26.05-small 2021.2
- nixpkgs-26.05-darwin 2021.2

Dismissed

(not in Nixpkgs)

Permalink CVE-2026-21366

7.8 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

updated 1 month, 2 weeks ago by @LeSuisse Activity log

Created suggestion 1 month, 2 weeks ago
@LeSuisse dismissed (not in Nixpkgs) 1 month, 2 weeks ago

Integer Overflow or Wraparound in Data Network Stack & Connectivity

Memory corruption while processing a packet with a size close to the maximum allowed value.

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2026-…

Affected products

Snapdragon

==QAMSRV1M
==QAM8295P
==SA8145P
==SA8150P
==QCA6797AQ
==QCA6688AQ
==SA9000P
==SRV1M
==LeMansAU
==SA8540P
==SRV1H
==QCA8695AU
==SA8255P
==QAMSRV1H
==QCA6595
==LeMans_AU_LGIT
==SA8295P
==SA8770P
==SA7255P
==SA8620P
==QCA6595AU
==QCA6696
==QAM8255P
==QCA6698AQ
==QAM8620P
==SA6150P
==SA6155P
==SA8155P
==SA6145P
==SA7775P
==SA8195P
==QCA6574AU
==SRV1L

Matching in nixpkgs

pkgs.snapdragon-profiler

None

nixos-unstable 2021.2
- nixpkgs-unstable 2021.2
nixos-26.05 2021.2
- nixos-26.05-small 2021.2
- nixpkgs-26.05-darwin 2021.2

Dismissed

(not in Nixpkgs)

Permalink CVE-2026-24076

6.7 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): Low (L)
Privileges Required (PR): High (H)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): High (H)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

updated 1 month, 2 weeks ago by @LeSuisse Activity log

Created suggestion 1 month, 2 weeks ago
@LeSuisse dismissed (not in Nixpkgs) 1 month, 2 weeks ago

Buffer Copy Without Checking Size of Input in Bluetooth HOST

Memory Corruption when processing registry values with incorrect types using a direct query method.

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2026-…

Affected products

Snapdragon

==WSA8830
==QCM5430
==WSA8815
==Snapdragon 8cx Gen 3 Compute Platform
==FastConnect 6900
==SM6250
==FastConnect 6200
==XG101039
==WSA8845
==X2000090
==XG101032
==WCD9378C
==X2000092
==WCD9341
==AQT1000
==WCD9385
==QCM6490
==X2000094
==FastConnect 6800
==WSA8810
==QCA2062
==Snapdragon 7c Gen 2 Compute Platform "Rennell Pro"
==Snapdragon 8c Compute Platform (SC8180XP-AD) "Poipu Lite"
==WCD9340
==X2000077
==Snapdragon 8c Compute Platform "Poipu Lite"
==QCA0000
==XG101002
==QCA6391
==Snapdragon 7c+ Gen 3 Compute
==Snapdragon 8cx Compute Platform "Poipu Pro"
==QCA2066
==Snapdragon 7c Compute Platform
==Qualcomm Video Collaboration VC3 Platform
==QCA2065
==X2000086
==QCA2064
==FastConnect 7800
==WCD9375
==Cologne
==QCA6430
==Snapdragon 8cx Compute Platform
==WSA8835
==WSA8845H
==WSA8840
==WCD9380
==SC8380XP
==Snapdragon 8cx Gen 2 5G Compute Platform
==QCA6420
==Snapdragon 8cx Gen 2 5G Compute Platform "Poipu Pro"
==WCD9370
==FastConnect 6700

Matching in nixpkgs

pkgs.snapdragon-profiler

None

nixos-unstable 2021.2
- nixpkgs-unstable 2021.2
nixos-26.05 2021.2
- nixos-26.05-small 2021.2
- nixpkgs-26.05-darwin 2021.2

Dismissed

(not in Nixpkgs)

Permalink CVE-2026-24083

7.8 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

updated 1 month, 2 weeks ago by @LeSuisse Activity log

Created suggestion 1 month, 2 weeks ago
@LeSuisse dismissed (not in Nixpkgs) 1 month, 2 weeks ago

Untrusted Pointer Dereference in Automotive Security

Memory Corruption while processing IOCTL device driver requests with invalid arguments.

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2026-…

Affected products

Snapdragon

==SA8295P
==QCA6696
==QAM8295P

Matching in nixpkgs

pkgs.snapdragon-profiler

None

nixos-unstable 2021.2
- nixpkgs-unstable 2021.2
nixos-26.05 2021.2
- nixos-26.05-small 2021.2
- nixpkgs-26.05-darwin 2021.2

Dismissed

(not in Nixpkgs)

Permalink CVE-2026-25289

9.6 CRITICAL

CVSS version (CVSS): 3.1
Attack Vector (AV): Adjacent (A)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Changed (C)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Adjacent (A)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Changed (C)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

updated 1 month, 2 weeks ago by @LeSuisse Activity log

Created suggestion 1 month, 2 weeks ago
@LeSuisse dismissed (not in Nixpkgs) 1 month, 2 weeks ago

Stack-based Buffer Overflow in WLAN Firmware

Memory Corruption when processing Device Capability Extended attributes in certain NAN Service Discovery Frames with invalid length values.

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2026-…

Affected products

Snapdragon

==SRV1M
==Kobuk
==QCA6574AU
==G2 Gen 1
==IPQ5300
==QCA6696
==Snapdragon 865 5G Mobile Platform
==QCF8000
==Snapdragon Auto 5G Modem-RF Gen 2
==SXR2230P
==Milos_IOT
==QCC2076
==QFW7124
==X2000092
==IPQ5332
==QCA6688AQ
==SXR2250P
==QAM8255P
==FWA Gen 5 Elite Platform
==QCA6584AU
==QCA6595AU
==QCM8550
==QAMSRV1H
==Snapdragon 6 Gen 4 Mobile Platform
==SDX81
==Snapdragon 870 5G Mobile Platform
==QCA6391
==Immersive Home 3210 Platform
==Snapdragon 8 Elite Gen 5
==XRV7209
==Networking Pro 1610 Platform
==IPQ9570
==QCN6412
==IPQ9574
==FWA Gen 3 Ultra Platform
==WCN7880
==WSA8840
==WSA8845H
==Snapdragon X72 5G Modem-RF System
==QCN6422
==WSA8835
==QCN6432
==SM6650P
==QXM1096
==SA8770P
==WCN7861
==Milos
==WCN6755
==CQ8750M
==QLN1086BD
==SRV1H
==FastConnect 6200
==SM8650Q
==Snapdragon 8 Gen 1 Mobile Platform
==WCN7881
==IQX5121
==WSA8845
==X2000090
==QCN9012
==XG101039
==XG101032
==Snapdragon Wear Elite platform
==SM8635P
==QCN9274
==LeMans_AU_LGIT
==Snapdragon 8 Gen 3 Mobile Platform
==QCS8550
==FastConnect 6800
==QFW7114
==Pandeiro
==WSA8810
==SA8620P
==QAMSRV1M
==SA8255P
==QXM1095
==WCD9340
==X2000077
==WCD9395
==QCN5124
==SXR1230P
==XRV9209
==QXM1093
==QAM8797P
==Palawan25
==QCA8386
==SM7675P
==FastConnect 7800
==WCD9375
==IPQ9554
==Snapdragon 7s Gen 3 Mobile Platform
==WCD9380
==Networking Pro 1210 Platform
==SC8380XP
==Snapdragon 8+ Gen 2 Mobile Platform
==SSG2115P
==QCA6595
==IQ10 Series
==FastConnect 6700
==WSA8830
==X1E80100
==WSA8815
==WSA8832
==CQ7790
==WCD9378C
==Themisto
==QCA6426
==AR8035
==QCC710
==WCD9385
==QCA6787AQ
==QCA8075
==QAM8397P
==QCA8337
==SAR2130P
==LeMansAU
==SA7775P
==SD 8 Gen1 5G
==Immersive Home 326 Platform
==SM8635
==QCA0000
==WCD9390
==XG101002
==Snapdragon 8 Elite
==QCF8001
==QCN6224
==QCA6777AQ
==SM7635P
==SM8750P
==Snapdragon X75 5G Modem-RF System
==Cologne
==QCA8081
==IPQ5302
==SD865 5G
==QLN1083BD
==QXM1086
==SSG2125P
==QCA6564AU
==SAR1165P
==WCN6450
==QCA6554A
==WCD9370
==WCD9378
==QCA8695AU
==CQ8725S
==QCA6436
==Networking Pro 810 Platform
==SM7675
==FastConnect 6900
==SA7255P
==QMP1000
==Snapdragon XR2 5G Platform
==QMB715
==WCN6740
==QPA1083BD
==QPA1086BD
==Snapdragon 7 Gen 4 Mobile Platform
==QCA6678AQ
==X2000094
==QXM1094
==Snapdragon 8 Gen 2 Mobile Platform
==WCN7860
==WCN3988
==QCA6574A
==Snapdragon 865+ 5G Mobile Platform
==QCA6698AU
==SDR753
==Snapdragon AR1+ Gen 1 Platform
==QCA6698AQ
==QCA6797AQ
==Orne
==QCN6402
==QXM1083
==X2000086
==SXR2350P
==IQX7181
==QCM8838
==QCN9011
==IPQ5312
==QCA6574
==QCN6274
==SXR2330P
==QCS6690
==SM8550P
==WCN6650
==QCC2073
==Snapdragon AR1 Gen 1 Platform
==Networking Pro 610 Platform
==SA9000P

Matching in nixpkgs

pkgs.snapdragon-profiler

None

nixos-unstable 2021.2
- nixpkgs-unstable 2021.2
nixos-26.05 2021.2
- nixos-26.05-small 2021.2
- nixpkgs-26.05-darwin 2021.2

Dismissed

(not in Nixpkgs)

Permalink CVE-2026-24077

6.5 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Adjacent (A)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): None (N)
Availability (A): None (N)
Modified Attack Vector (MAV): Adjacent (A)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): None (N)

updated 1 month, 2 weeks ago by @LeSuisse Activity log

Created suggestion 1 month, 2 weeks ago
@LeSuisse dismissed (not in Nixpkgs) 1 month, 2 weeks ago

Integer Underflow (Wrap or Wraparound) in WLAN Host

Information Disclosure when processing wireless network channel switch information with improperly formatted length fields.

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2026-…

Affected products

Snapdragon

==CSRA6640
==QCA6574AU
==Snapdragon 888+ 5G Mobile Platform
==G2 Gen 1
==QCA6696
==Snapdragon 778G+ 5G Mobile Platform
==Snapdragon 865 5G Mobile Platform
==QCM4490
==SA8155P
==QFW7124
==WCD9341
==QCA6595AU
==Snapdragon 6 Gen 4 Mobile Platform
==Snapdragon 870 5G Mobile Platform
==Snapdragon 4 Gen 1 Mobile Platform
==QCA6391
==Snapdragon 7+ Gen 2 Mobile Platform
==Qualcomm Video Collaboration VC3 Platform
==QCS2290
==Snapdragon 460 Mobile Platform
==Snapdragon 480 5G Mobile Platform
==Snapdragon 7 Gen 1 Mobile Platform
==WCN3980
==Snapdragon 680 4G Mobile Platform
==Snapdragon 662 Mobile Platform
==Snapdragon 8cx Compute Platform
==WCN7880
==FWA Gen 3 Ultra Platform
==WSA8845H
==WSA8840
==Snapdragon X72 5G Modem-RF System
==WSA8835
==SM6650P
==QCM2290
==WCN7861
==Milos
==Snapdragon 8cx Gen 3 Compute Platform
==WCN6755
==FastConnect 6200
==SM8650Q
==Snapdragon 4 Gen 2 Mobile Platform
==Snapdragon 8 Gen 1 Mobile Platform
==WCN7881
==WSA8845
==QCN9012
==SD662
==QCM4325
==Snapdragon 8+ Gen 1 Mobile Platform
==Snapdragon X55 5G Modem-RF System
==SM8635P
==Snapdragon 8 Gen 3 Mobile Platform
==Snapdragon 480+ 5G Mobile Platform
==FastConnect 6800
==QFW7114
==WSA8810
==G1 Gen 1
==Snapdragon XR2+ Gen 1 Platform
==Snapdragon 8c Compute Platform (SC8180XP-AD) "Poipu Lite"
==CSRA6620
==WCD9340
==Snapdragon 8c Compute Platform "Poipu Lite"
==WCD9395
==Snapdragon 695 5G Mobile Platform
==Snapdragon 685 4G Mobile Platform
==Palawan25
==SM7675P
==FastConnect 7800
==WCD9375
==Flight RB5 5G Platform
==QCA6430
==Snapdragon 7s Gen 3 Mobile Platform
==Snapdragon 888 5G Mobile Platform
==WCD9380
==QCA6420
==Snapdragon 8cx Gen 2 5G Compute Platform "Poipu Pro"
==FastConnect 6700
==WSA8830
==WSA8815
==WSA8832
==SA8155
==SM6225P
==AR8035
==QCC710
==AQT1000
==WCD9385
==QCM6490
==QCA6787AQ
==SW5100P
==QCA8337
==SD 8 Gen1 5G
==SM8475P
==Snapdragon 778G 5G Mobile Platform
==SM8635
==WCD9390
==Robotics RB5 Platform
==Snapdragon 8cx Compute Platform "Poipu Pro"
==Snapdragon 8 Elite
==QCN6224
==Netrani
==QCA6777AQ
==SM7635P
==SM8750P
==Snapdragon X75 5G Modem-RF System
==QCA8081
==SD865 5G
==QCS4490
==QRB5165N
==Snapdragon 6 Gen 3 Mobile Platform
==WCD9370
==WCD9378
==Snapdragon 782G Mobile Platform
==WCD9335
==QCM5430
==SM7675
==FastConnect 6900
==QMP1000
==Qualcomm Video Collaboration VC5 Platform
==Snapdragon XR2 5G Platform
==QCS4290
==WCN3950
==Snapdragon 6 Gen 1 Mobile Platform
==SA8195P
==QRB5165M
==SM7325P
==WCN7860
==WCN3988
==QCA6574A
==Snapdragon 865+ 5G Mobile Platform
==QCA6797AQ
==Orne
==SA6155P
==Snapdragon 7c+ Gen 3 Compute
==Snapdragon 690 5G Mobile Platform
==SW5100
==Snapdragon X53 5G Modem-RF System
==QCN9011
==QCN6274
==QCA6574
==Robotics RB2 Platform
==WCN3910
==Snapdragon W5+ Gen 1 Wearable Platform
==WCN6650
==SM7435
==Snapdragon 8cx Gen 2 5G Compute Platform

Matching in nixpkgs

pkgs.snapdragon-profiler

None

nixos-unstable 2021.2
- nixpkgs-unstable 2021.2
nixos-26.05 2021.2
- nixos-26.05-small 2021.2
- nixpkgs-26.05-darwin 2021.2

Dismissed

(not in Nixpkgs)

Permalink CVE-2026-25288

7.4 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Adjacent (A)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Changed (C)
Confidentiality (C): None (N)
Integrity (I): None (N)
Availability (A): High (H)
Modified Attack Vector (MAV): Adjacent (A)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Changed (C)
Modified Integrity (MI): None (N)
Modified Availability (MA): High (H)

updated 1 month, 2 weeks ago by @LeSuisse Activity log

Created suggestion 1 month, 2 weeks ago
@LeSuisse dismissed (not in Nixpkgs) 1 month, 2 weeks ago

Buffer Over-read in WLAN Firmware

Transient DOS when processing a short target wake time channel usage response frame with insufficient packet size.

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2026-…

Affected products

Snapdragon

==QXM1096
==WCN7861
==FastConnect 6900
==QMP1000
==WCN6755
==QLN1086BD
==QMB715
==CQ7790
==WSA8845
==XG101039
==X2000090
==QPA1083BD
==QPA1086BD
==XG101032
==WCD9378C
==X2000092
==Snapdragon 7 Gen 4 Mobile Platform
==WCD9385
==X2000094
==QXM1094
==Pandeiro
==WCN7860
==SDR753
==QXM1095
==X2000077
==Orne
==WCD9395
==XG101002
==XRV9209
==QXM1093
==Snapdragon 8 Elite Gen 5
==XRV7209
==Palawan25
==X2000086
==QCM8838
==FastConnect 7800
==Cologne
==QLN1083BD
==WSA8845H
==WSA8840
==WCD9380
==SC8380XP
==WCD9378

Matching in nixpkgs

pkgs.snapdragon-profiler

None

nixos-unstable 2021.2
- nixpkgs-unstable 2021.2
nixos-26.05 2021.2
- nixos-26.05-small 2021.2
- nixpkgs-26.05-darwin 2021.2

Suggestions search

References

Affected products

Matching in nixpkgs

pkgs.snapdragon-profiler

References

Affected products

Matching in nixpkgs

pkgs.snapdragon-profiler

References

Affected products

Matching in nixpkgs

pkgs.snapdragon-profiler

References

Affected products

Matching in nixpkgs

pkgs.snapdragon-profiler

References

Affected products

Matching in nixpkgs

pkgs.snapdragon-profiler

References

Affected products

Matching in nixpkgs

pkgs.snapdragon-profiler

References

Affected products

Matching in nixpkgs

pkgs.snapdragon-profiler

References

Affected products

Matching in nixpkgs

pkgs.snapdragon-profiler

References

Affected products

Matching in nixpkgs

pkgs.snapdragon-profiler

References

Affected products

Matching in nixpkgs

pkgs.snapdragon-profiler