What’s Vulnerable › Products

Qualcomm Cologne Firmware vulnerabilities

67 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 67 published in the last 12 months.

Check whether your Qualcomm Cologne Firmware version is affected

Latest Qualcomm Cologne Firmware vulnerabilities

• CVE-2026-57559 — Use After Free in DSP_Services (CVSS 7.8)
• CVE-2026-57555 — Use After Free in DSP Service (CVSS 7.8)
• CVE-2026-57545 — Untrusted Pointer Dereference in Graphics (CVSS 7.8)
• CVE-2026-25302 — Improper Verification of Cryptographic Signature in Boot (CVSS 7.1)
• CVE-2026-25274 — Use After Free in Windows WLAN Host (CVSS 6.7)
• CVE-2026-25272 — Out-of-bounds Write in Camera Driver (CVSS 6.7)
• CVE-2026-25270 — Out-of-bounds Write in Camera Driver (CVSS 6.7)
• CVE-2026-25269 — Out-of-bounds Write in Camera Driver (CVSS 6.7)
• CVE-2026-25294 — Buffer Over-read in WLAN Firmware (CVSS 7.4)
• CVE-2026-25290 — Integer Overflow or Wraparound in OOBM (CVSS 7.8)
• CVE-2026-25284 — Buffer Over-read in OOBM (CVSS 7.3)
• CVE-2026-25283 — Stack-based Buffer Overflow in OOBM (CVSS 8.8)
• CVE-2026-25282 — Out-of-bounds Read in OOBM (CVSS 7.9)
• CVE-2026-25281 — Allocation of Resources Without Limits or Throttling in OOBM (CVSS 7.4)
• CVE-2026-25280 — Out-of-bounds Write in DSP Service (CVSS 7.8)
• CVE-2026-25275 — Buffer Over-read in WLAN Firmware (CVSS 7.5)
• CVE-2026-25261 — Untrusted Pointer Dereference in Camera (CVSS 7.8)
• CVE-2026-24081 — Buffer Over-read in BT Controller (CVSS 7.4)
• CVE-2026-24075 — Buffer Over-read in Qualcomm IPC (CVSS 7.0)
• CVE-2026-24074 — Out-of-bounds Write in Video (CVSS 7.8)
• CVE-2026-24073 — Out-of-bounds Write in Video (CVSS 7.8)
• CVE-2025-59607 — Untrusted Pointer Dereference in Windows Compute (CVSS 7.8)
• CVE-2026-25289 — Stack-based Buffer Overflow in WLAN Firmware (CVSS 9.6)
• CVE-2026-25288 — Buffer Over-read in WLAN Firmware (CVSS 7.4)
• CVE-2026-24080 — Buffer Copy Without Checking Size of Input in Biometrics (CVSS 7.8)