What’s Vulnerable › Products

Qualcomm Milos Firmware vulnerabilities

45 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 45 published in the last 12 months.

Check whether your Qualcomm Milos Firmware version is affected

Exploited Qualcomm Milos Firmware vulnerabilities

• CVE-2026-21385 — Qualcomm Multiple Chipsets Memory Corruption Vulnerability

Latest Qualcomm Milos Firmware vulnerabilities

• CVE-2026-57554 — Use After Free in DSP Service (CVSS 7.8)
• CVE-2026-57545 — Untrusted Pointer Dereference in Graphics (CVSS 7.8)
• CVE-2026-25302 — Improper Verification of Cryptographic Signature in Boot (CVSS 7.1)
• CVE-2026-25272 — Out-of-bounds Write in Camera Driver (CVSS 6.7)
• CVE-2026-25270 — Out-of-bounds Write in Camera Driver (CVSS 6.7)
• CVE-2026-25269 — Out-of-bounds Write in Camera Driver (CVSS 6.7)
• CVE-2026-25275 — Buffer Over-read in WLAN Firmware (CVSS 7.5)
• CVE-2026-24081 — Buffer Over-read in BT Controller (CVSS 7.4)
• CVE-2026-25289 — Stack-based Buffer Overflow in WLAN Firmware (CVSS 9.6)
• CVE-2026-24084 — Insecure Security Identifier Mechanism in Multi-Mode Call Processor (CVSS 7.5)
• CVE-2026-24079 — Missing Authentication for Critical Function in Data Modem (CVSS 8.1)
• CVE-2026-24078 — Exposure of Private Personal Information to an Unauthorized Actor in Data Modem (CVSS 6.5)
• CVE-2026-24077 — Integer Underflow (Wrap or Wraparound) in WLAN Host (CVSS 6.5)
• CVE-2026-24092 — Improper Validation of Syntactic Correctness of Input in Display (CVSS 7.2)
• CVE-2026-24091 — Improper Validation of Syntactic Correctness of Input in Display (CVSS 7.2)
• CVE-2026-24090 — Missing Authentication for Critical Function in HLOS (CVSS 7.1)
• CVE-2026-24089 — Improper Validation of Syntactic Correctness of Input in Kernel (CVSS 7.2)
• CVE-2026-24088 — Missing Authentication for Critical Function in Boot (CVSS 8.2)
• CVE-2026-24087 — Improper Validation of Syntactic Correctness of Input in Kernel (CVSS 7.2)
• CVE-2026-24085 — Stack-based Buffer Overflow in Display (CVSS 7.2)
• CVE-2025-59610 — Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver (CVSS 6.4)
• CVE-2025-59609 — Buffer Over-read in WLAN Host Communication (CVSS 5.5)
• CVE-2025-59604 — NULL Pointer Dereference in SPS Applications (CVSS 7.8)
• CVE-2026-24082 — Use After Free in Automotive GPU (CVSS 7.8)
• CVE-2025-47404 — Buffer Copy Without Checking Size of Input in Automotive Audio (CVSS 7.8)