Nixpkgs security tracker

Dismissed

(not in Nixpkgs)

Permalink CVE-2025-59604

7.8 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

updated 3 months, 3 weeks ago by @LeSuisse Activity log

Created suggestion 3 months, 3 weeks ago
@LeSuisse dismissed (not in Nixpkgs) 3 months, 3 weeks ago

NULL Pointer Dereference in SPS Applications

Memory Corruption when running a memory copy operation due to invalid writes caused by a null pointer.

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2026-bu…

Affected products

Snapdragon

==CSRA6640
==QCA6574AU
==Snapdragon 888+ 5G Mobile Platform
==SRV1M
==G2 Gen 1
==QCA6696
==Snapdragon 778G+ 5G Mobile Platform
==QAM8620P
==Snapdragon 865 5G Mobile Platform
==QCM4490
==QCN6024
==Snapdragon Auto 5G Modem-RF Gen 2
==SXR2230P
==SA8155P
==QFW7124
==X2000092
==QCA6688AQ
==SXR2250P
==WCD9371
==QAM8255P
==QCN9024
==QCA6584AU
==QCA6595AU
==QCM6125
==SM7550
==IQ9 Series Platform
==QAMSRV1H
==Snapdragon 6 Gen 4 Mobile Platform
==SA8540P
==Snapdragon 870 5G Mobile Platform
==Snapdragon 4 Gen 1 Mobile Platform
==QCA6391
==Snapdragon 7+ Gen 2 Mobile Platform
==Qualcomm Video Collaboration VC3 Platform
==QCS2290
==Snapdragon 460 Mobile Platform
==Snapdragon 480 5G Mobile Platform
==Snapdragon 7 Gen 1 Mobile Platform
==WCN3980
==Snapdragon 680 4G Mobile Platform
==Snapdragon 662 Mobile Platform
==WCN7880
==FWA Gen 3 Ultra Platform
==WSA8845H
==WSA8840
==Snapdragon X72 5G Modem-RF System
==Snapdragon 720G Mobile Platform
==WSA8835
==Monaco_IOT
==QCM2290
==SM6650P
==QXM1096
==SA6145P
==SA8770P
==WCN7861
==Milos
==Snapdragon 8cx Gen 3 Compute Platform
==SA8145P
==SA8295P
==WCN6755
==QLN1086BD
==SRV1H
==FastConnect 6200
==QEP8111
==SM8650Q
==Snapdragon 4 Gen 2 Mobile Platform
==Snapdragon 8 Gen 1 Mobile Platform
==WCN7881
==WSA8845
==QCN9012
==SD662
==QCM4325
==Snapdragon 8+ Gen 1 Mobile Platform
==Snapdragon X55 5G Modem-RF System
==SM8635P
==X2000090
==XG101032
==SA8150P
==LeMans_AU_LGIT
==Snapdragon 8 Gen 3 Mobile Platform
==QCS8550
==Snapdragon 480+ 5G Mobile Platform
==FastConnect 6800
==QFW7114
==Pandeiro
==WSA8810
==QRU1032
==SA8620P
==QAMSRV1M
==G1 Gen 1
==SA8255P
==Snapdragon XR2+ Gen 1 Platform
==CSRA6620
==QXM1095
==WCD9340
==X2000077
==WCD9395
==Snapdragon 695 5G Mobile Platform
==Snapdragon 685 4G Mobile Platform
==QXM1093
==IQ6 Series Platform
==Palawan25
==SA4155P
==SM7675P
==FastConnect 7800
==QDX1010
==WCD9375
==Snapdragon 7s Gen 3 Mobile Platform
==Snapdragon 888 5G Mobile Platform
==WCD9380
==SC8380XP
==Snapdragon 8+ Gen 2 Mobile Platform
==QCA6595
==FastConnect 6700
==XG101039
==WSA8830
==WSA8815
==WSA8832
==Qualcomm Video Collaboration VC1 Platform
==SM6225P
==WCD9378C
==Qualcomm Dragonwing QRU100 Platform
==AR8035
==QCC710
==WCD9385
==QCM6490
==SW5100P
==QCA8337
==SAR2130P
==LeMansAU
==SA7775P
==SD 8 Gen1 5G
==SM8475P
==Snapdragon 778G 5G Mobile Platform
==SM8635
==QCA0000
==WCD9390
==XG101002
==Snapdragon 8 Elite
==Snapdragon X65 5G Modem-RF System
==QCN6224
==Netrani
==SM7635P
==SM8750P
==SAR2230P
==Snapdragon X75 5G Modem-RF System
==Cologne
==QCA8081
==SD865 5G
==QLN1083BD
==SA4150P
==QCS4490
==Snapdragon X32 5G Modem-RF System
==SRV1L
==Snapdragon X35 5G Modem-RF System
==Snapdragon 6 Gen 3 Mobile Platform
==WCD9370
==QDX1011
==Snapdragon 782G Mobile Platform
==QCA8695AU
==WCD9335
==QCM5430
==WCD9378
==IQ8 Series Platform
==SM7675
==FastConnect 6900
==SA7255P
==QMP1000
==Snapdragon 768G 5G Mobile Platform
==Snapdragon 765 5G Mobile Platform
==QCS4290
==Snapdragon XR2 5G Platform
==WCN3950
==Snapdragon 6 Gen 1 Mobile Platform
==SM7550P
==QPA1083BD
==QPA1086BD
==SA8195P
==SAR1250P
==QCA6678AQ
==SM7325P
==QAM8295P
==X2000094
==QXM1094
==Snapdragon 8 Gen 2 Mobile Platform
==WCN7860
==WCN3988
==QCA6574A
==Snapdragon 865+ 5G Mobile Platform
==QCA6698AU
==QCA6698AQ
==QCA6797AQ
==Orne
==SA6155P
==Snapdragon 7c+ Gen 3 Compute
==Snapdragon 690 5G Mobile Platform
==QCA6174A
==Snapdragon 765G 5G Mobile Platform
==SW5100
==SDX61
==X2000086
==SXR2350P
==Snapdragon X53 5G Modem-RF System
==QCN9011
==QCN6274
==QCA6574
==Robotics RB2 Platform
==SXR2330P
==WCN3910
==Snapdragon W5+ Gen 1 Wearable Platform
==SM8550P
==WCN6650
==SM7250P
==SM7435
==Snapdragon AR1 Gen 1 Platform
==SA6150P
==SA9000P
==Qualcomm Dragonwing X100 Accelerator Card

Matching in nixpkgs

pkgs.snapdragon-profiler

Profiler for Android devices running Snapdragon chips

nixos-unstable 2021.2
- nixpkgs-unstable 2021.2
- nixos-unstable-small 2021.2

Dismissed

(not in Nixpkgs)

Permalink CVE-2026-25277

8.8 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Changed (C)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Changed (C)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

updated 3 months, 3 weeks ago by @LeSuisse Activity log

Created suggestion 3 months, 3 weeks ago
@LeSuisse dismissed (not in Nixpkgs) 3 months, 3 weeks ago

Buffer Copy Without Checking Size of Input in Secure Processor

Memory corruption while using Strongbox due to buffer overflow.

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2026-bu…

Affected products

Snapdragon

==Snapdragon 8 Gen 3 Mobile Platform
==Snapdragon 8 Elite
==Snapdragon 8 Elite Gen 5
==Snapdragon 8+ Gen 2 Mobile Platform
==Snapdragon 8 Gen 2 Mobile Platform

Matching in nixpkgs

pkgs.snapdragon-profiler

Profiler for Android devices running Snapdragon chips

nixos-unstable 2021.2
- nixpkgs-unstable 2021.2
- nixos-unstable-small 2021.2

Dismissed

(not in Nixpkgs)

Permalink CVE-2025-59605

7.8 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

updated 3 months, 3 weeks ago by @LeSuisse Activity log

Created suggestion 3 months, 3 weeks ago
@LeSuisse dismissed (not in Nixpkgs) 3 months, 3 weeks ago

Out-of-bounds Write in HLOS

Memory Corruption when processing device identifier strings that exceed the expected maximum length.

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2026-bu…

Affected products

Snapdragon

==CSRA6640
==QCA6574AU
==Snapdragon 888+ 5G Mobile Platform
==QCA6696
==Snapdragon 778G+ 5G Mobile Platform
==Snapdragon 865 5G Mobile Platform
==QCM4490
==QCN6024
==SXR2230P
==SA8155P
==QCA6688AQ
==SXR2250P
==WCD9371
==QAM8255P
==QCN9024
==QCA6595AU
==QCM6125
==SM7550
==SA8540P
==Snapdragon 870 5G Mobile Platform
==Snapdragon 4 Gen 1 Mobile Platform
==QCA6391
==Snapdragon 7+ Gen 2 Mobile Platform
==Qualcomm Video Collaboration VC3 Platform
==QCS2290
==Snapdragon 460 Mobile Platform
==Snapdragon 480 5G Mobile Platform
==Snapdragon 7 Gen 1 Mobile Platform
==WCN3980
==Snapdragon 680 4G Mobile Platform
==Snapdragon 662 Mobile Platform
==WSA8845H
==WSA8840
==Snapdragon 720G Mobile Platform
==WSA8835
==QCM2290
==SA6145P
==SA8145P
==SA8295P
==WCN6755
==FastConnect 6200
==Snapdragon 4 Gen 2 Mobile Platform
==Snapdragon 8 Gen 1 Mobile Platform
==WSA8845
==QCN9012
==SD662
==QCM4325
==Snapdragon 8+ Gen 1 Mobile Platform
==Snapdragon X55 5G Modem-RF System
==SA8150P
==QCS8550
==Snapdragon 480+ 5G Mobile Platform
==FastConnect 6800
==WSA8810
==QRU1032
==G1 Gen 1
==SA8255P
==Snapdragon XR2+ Gen 1 Platform
==CSRA6620
==WCD9395
==Snapdragon 695 5G Mobile Platform
==Snapdragon 685 4G Mobile Platform
==SA4155P
==FastConnect 7800
==QDX1010
==WCD9375
==Flight RB5 5G Platform
==Snapdragon 888 5G Mobile Platform
==WCD9380
==Snapdragon 8+ Gen 2 Mobile Platform
==QCA6595
==FastConnect 6700
==WSA8830
==WSA8815
==WSA8832
==Qualcomm Video Collaboration VC1 Platform
==SM6225P
==Qualcomm Dragonwing QRU100 Platform
==AR8035
==WCD9385
==QCM6490
==SW5100P
==QCA8337
==SAR2130P
==SD 8 Gen1 5G
==SM8475P
==Snapdragon 778G 5G Mobile Platform
==WCD9390
==Robotics RB5 Platform
==Snapdragon X65 5G Modem-RF System
==QCA8081
==SD865 5G
==SA4150P
==QCS4490
==QRB5165N
==WCD9370
==QDX1011
==Snapdragon 782G Mobile Platform
==WCD9335
==WCD9378
==QCM5430
==FastConnect 6900
==Snapdragon 768G 5G Mobile Platform
==Qualcomm Video Collaboration VC5 Platform
==Snapdragon XR2 5G Platform
==Snapdragon 765 5G Mobile Platform
==QCS4290
==WCN3950
==Snapdragon 6 Gen 1 Mobile Platform
==SM7550P
==SA8195P
==QRB5165M
==QCA6678AQ
==SM7325P
==QAM8295P
==Snapdragon 8 Gen 2 Mobile Platform
==WCN3988
==QCA6574A
==Snapdragon 865+ 5G Mobile Platform
==QCA6698AU
==QCA6698AQ
==QCA6797AQ
==SA6155P
==Snapdragon 7c+ Gen 3 Compute
==Snapdragon 690 5G Mobile Platform
==QCA6174A
==Snapdragon 765G 5G Mobile Platform
==SW5100
==SDX61
==Snapdragon X53 5G Modem-RF System
==QCN9011
==QCA6574
==Robotics RB2 Platform
==WCN3910
==Snapdragon W5+ Gen 1 Wearable Platform
==SM8550P
==WCN6650
==SM7250P
==SM7435
==Snapdragon AR1 Gen 1 Platform
==SA6150P
==SA9000P
==Qualcomm Dragonwing X100 Accelerator Card

Matching in nixpkgs

pkgs.snapdragon-profiler

Profiler for Android devices running Snapdragon chips

nixos-unstable 2021.2
- nixpkgs-unstable 2021.2
- nixos-unstable-small 2021.2

Dismissed

(not in Nixpkgs)

Permalink CVE-2026-24087

7.2 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Physical (P)
Attack Complexity (AC): Low (L)
Privileges Required (PR): High (H)
User Interaction (UI): None (N)
Scope (S): Changed (C)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Physical (P)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): High (H)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Changed (C)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

updated 3 months, 3 weeks ago by @LeSuisse Activity log

Created suggestion 3 months, 3 weeks ago
@LeSuisse dismissed (not in Nixpkgs) 3 months, 3 weeks ago

Improper Validation of Syntactic Correctness of Input in Kernel

Memory corruption while processing fastboot OEM commands.

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2026-bu…

Affected products

Snapdragon

==XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

Matching in nixpkgs

pkgs.snapdragon-profiler

Profiler for Android devices running Snapdragon chips

nixos-unstable 2021.2
- nixpkgs-unstable 2021.2
- nixos-unstable-small 2021.2

Dismissed

(not in Nixpkgs)

Permalink CVE-2025-59606

7.8 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

updated 3 months, 3 weeks ago by @LeSuisse Activity log

Created suggestion 3 months, 3 weeks ago
@LeSuisse dismissed (not in Nixpkgs) 3 months, 3 weeks ago

NULL Pointer Dereference in HLOS

Memory Corruption when writing to invalid memory locations occurs due to heap memory exhaustion during secure data initialization.

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2026-bu…

Affected products

Snapdragon

==SRV1M
==QCA6574AU
==G2 Gen 1
==QCA6696
==QAM8620P
==SA8155P
==X2000092
==QCA6688AQ
==QAM8255P
==QCA6595AU
==IQ9 Series Platform
==QAMSRV1H
==SA8540P
==Qualcomm Video Collaboration VC3 Platform
==WCN7880
==WSA8845H
==WSA8840
==WSA8835
==Monaco_IOT
==QXM1096
==SA6145P
==SA8770P
==WCN7861
==SA8145P
==SA8295P
==WCN6755
==QLN1086BD
==SRV1H
==FastConnect 6200
==Snapdragon 4 Gen 2 Mobile Platform
==WSA8845
==WCN7881
==X2000090
==XG101039
==XG101032
==SA8150P
==LeMans_AU_LGIT
==Pandeiro
==WSA8810
==SA8620P
==QAMSRV1M
==SA8255P
==QXM1095
==X2000077
==WCD9395
==QXM1093
==IQ6 Series Platform
==Palawan25
==FastConnect 7800
==WCD9375
==WCD9380
==QCA6595
==FastConnect 6700
==WSA8830
==WSA8815
==WSA8832
==WCD9378C
==WCD9385
==QCM6490
==LeMansAU
==SA7775P
==XG101002
==Snapdragon 8 Elite
==Netrani
==SM8750P
==SAR2230P
==Cologne
==QLN1083BD
==SRV1L
==Snapdragon 6 Gen 3 Mobile Platform
==WCD9370
==WCD9378
==QCA8695AU
==QCM5430
==IQ8 Series Platform
==FastConnect 6900
==SA7255P
==QMP1000
==WCN3950
==Snapdragon 6 Gen 1 Mobile Platform
==QPA1083BD
==QPA1086BD
==SA8195P
==SAR1250P
==QCA6678AQ
==QAM8295P
==X2000094
==QXM1094
==WCN7860
==WCN3988
==QCA6574A
==QCA6698AQ
==QCA6797AQ
==Orne
==SA6155P
==X2000086
==SXR2350P
==SXR2330P
==QCA6574
==SM7435
==SA6150P
==SA9000P

Matching in nixpkgs

pkgs.snapdragon-profiler

Profiler for Android devices running Snapdragon chips

nixos-unstable 2021.2
- nixpkgs-unstable 2021.2
- nixos-unstable-small 2021.2

Dismissed

(not in Nixpkgs)

Permalink CVE-2026-24085

7.2 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Physical (P)
Attack Complexity (AC): Low (L)
Privileges Required (PR): High (H)
User Interaction (UI): None (N)
Scope (S): Changed (C)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Physical (P)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): High (H)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Changed (C)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

updated 3 months, 3 weeks ago by @LeSuisse Activity log

Created suggestion 3 months, 3 weeks ago
@LeSuisse dismissed (not in Nixpkgs) 3 months, 3 weeks ago

Stack-based Buffer Overflow in Display

Memory Corruption when processing display command line information due to improper initialization of a variable.

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2026-bu…

Affected products

Snapdragon

==XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

Matching in nixpkgs

pkgs.snapdragon-profiler

Profiler for Android devices running Snapdragon chips

nixos-unstable 2021.2
- nixpkgs-unstable 2021.2
- nixos-unstable-small 2021.2

Dismissed

(not in Nixpkgs)

Permalink CVE-2026-24091

7.2 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Physical (P)
Attack Complexity (AC): Low (L)
Privileges Required (PR): High (H)
User Interaction (UI): None (N)
Scope (S): Changed (C)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Physical (P)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): High (H)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Changed (C)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

updated 3 months, 3 weeks ago by @LeSuisse Activity log

Created suggestion 3 months, 3 weeks ago
@LeSuisse dismissed (not in Nixpkgs) 3 months, 3 weeks ago

Improper Validation of Syntactic Correctness of Input in Display

Memory corruption while processing fastboot commands with improperly formatted input.

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2026-bu…

Affected products

Snapdragon

==XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

Matching in nixpkgs

pkgs.snapdragon-profiler

Profiler for Android devices running Snapdragon chips

nixos-unstable 2021.2
- nixpkgs-unstable 2021.2
- nixos-unstable-small 2021.2

Dismissed

(not in Nixpkgs)

Permalink CVE-2025-47405

7.8 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

updated 4 months, 2 weeks ago by @LeSuisse Activity log

Created suggestion 4 months, 2 weeks ago
@LeSuisse dismissed (not in Nixpkgs) 4 months, 2 weeks ago

Untrusted Pointer Dereference in Camera

Memory corruption when processing camera sensor input/output control codes with invalid output buffers.

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2026-bul…

Affected products

Snapdragon

==WCD9380
==WSA8840
==WCD9385
==IQX5121
==IQX7181
==FastConnect 6900
==FastConnect 7800
==QCA0000
==Snapdragon XR2+ Gen 1 Platform
==WSA8810
==WSA8845H
==SD865 5G
==Snapdragon XR2 5G Platform
==SC8380XP
==WSA8845
==WSA8815

Matching in nixpkgs

pkgs.snapdragon-profiler

Profiler for Android devices running Snapdragon chips

nixos-unstable 2021.2
- nixpkgs-unstable 2021.2
- nixos-unstable-small 2021.2

Dismissed

(not in Nixpkgs)

Permalink CVE-2026-25266

5.5 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): None (N)
Integrity (I): None (N)
Availability (A): High (H)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): High (H)

updated 4 months, 2 weeks ago by @LeSuisse Activity log

Created suggestion 4 months, 2 weeks ago
@LeSuisse dismissed (not in Nixpkgs) 4 months, 2 weeks ago

Exposed dangerous function in windows host

Memory corruption while processing IOCTL command when device is in power-save state.

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2026-bul…

Affected products

Snapdragon

==WSA8830
==WCN7861
==FastConnect 6900
==WSA8832
==XG101039
==WSA8845
==X2000090
==XG101032
==WCD9378C
==X2000092
==WCD9385
==X2000094
==X2000077
==XG101002
==X2000086
==FastConnect 7800
==Cologne
==WCN7880
==WSA8845H
==WSA8840
==WCD9380
==SC8380XP
==Snapdragon AR1 Gen 1 Platform
==WSA8835

Matching in nixpkgs

pkgs.snapdragon-profiler

Profiler for Android devices running Snapdragon chips

nixos-unstable 2021.2
- nixpkgs-unstable 2021.2
- nixos-unstable-small 2021.2

Dismissed

(not in Nixpkgs)

Permalink CVE-2025-47407

7.8 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

updated 4 months, 2 weeks ago by @LeSuisse Activity log

Created suggestion 4 months, 2 weeks ago
@LeSuisse dismissed (not in Nixpkgs) 4 months, 2 weeks ago

Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service

Memory corruption while creating a process on the digital signal processor due to allocation failure at the kernel level.

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2026-bul…

Affected products

Snapdragon

==G2 Gen 1
==SXR2230P
==SXR2250P
==WSA8850
==QCA6391
==Snapdragon 8 Elite Gen 5
==Qualcomm Video Collaboration VC3 Platform
==XRV7209
==QCS2290
==Snapdragon 460 Mobile Platform
==WCN3980
==Snapdragon 680 4G Mobile Platform
==Snapdragon 662 Mobile Platform
==WCN7880
==WSA8845H
==WSA8840
==Molokai
==SM7435P
==SM6475Q
==WSA8835
==QCM2290
==QXM1096
==WCN7861
==WCN6755
==QLN1086BD
==FastConnect 6200
==QMP2001
==Snapdragon 4 Gen 2 Mobile Platform
==WCN7881
==WSA8845
==SD662
==QCM4325
==SM6850
==Snapdragon Wear Elite platform
==Pandeiro
==WSA8810
==Snapdragon XR2+ Gen 1 Platform
==QXM1095
==WCD9395
==XRV9209
==Snapdragon 685 4G Mobile Platform
==QXM1093
==Palawan25
==FastConnect 7800
==WCD9375
==WCD9380
==SC8380XP
==FastConnect 6700
==WSA8830
==X1E80100
==WSA8815
==WSA8832
==Qualcomm Video Collaboration VC1 Platform
==CQ7790
==SM6225P
==SM8845P
==Themisto
==WCD9385
==SW5100P
==WSA8855C
==SAR2130P
==Snapdragon 8 Elite
==Netrani
==SM7635P
==SM8750P
==SD865 5G
==QLN1083BD
==QXM1086
==Snapdragon 6 Gen 3 Mobile Platform
==SAR1165P
==WCN7760
==WCN6450
==WCD9370
==WCD9378
==CQ8725S
==SM6450P
==FastConnect 6900
==QMP1000
==Snapdragon XR2 5G Platform
==QCS4290
==QMB715
==WCN3950
==Snapdragon 6 Gen 1 Mobile Platform
==QPA1083BD
==QPA1086BD
==Snapdragon 7 Gen 4 Mobile Platform
==QXM1094
==WCN7860
==SM8735P
==WCN3988
==Snapdragon AR1+ Gen 1 Platform
==Orne
==QXM1083
==SW5100
==SXR2350P
==WSA8850W
==SM6475P
==SXR2330P
==Snapdragon W5+ Gen 1 Wearable Platform
==SM7435

Matching in nixpkgs

pkgs.snapdragon-profiler

Profiler for Android devices running Snapdragon chips

nixos-unstable 2021.2
- nixpkgs-unstable 2021.2
- nixos-unstable-small 2021.2

Suggestions search

References

Affected products

Matching in nixpkgs

pkgs.snapdragon-profiler

References

Affected products

Matching in nixpkgs

pkgs.snapdragon-profiler

References

Affected products

Matching in nixpkgs

pkgs.snapdragon-profiler

References

Affected products

Matching in nixpkgs

pkgs.snapdragon-profiler

References

Affected products

Matching in nixpkgs

pkgs.snapdragon-profiler

References

Affected products

Matching in nixpkgs

pkgs.snapdragon-profiler

References

Affected products

Matching in nixpkgs

pkgs.snapdragon-profiler

References

Affected products

Matching in nixpkgs

pkgs.snapdragon-profiler

References

Affected products

Matching in nixpkgs

pkgs.snapdragon-profiler

References

Affected products

Matching in nixpkgs

pkgs.snapdragon-profiler