What’s Vulnerable › Products

Qualcomm Sm7435 Firmware vulnerabilities

71 known vulnerabilities, 2 confirmed exploited in the wild (CISA KEV), 65 published in the last 12 months.

Check whether your Qualcomm Sm7435 Firmware version is affected

Exploited Qualcomm Sm7435 Firmware vulnerabilities

• CVE-2026-21385 — Qualcomm Multiple Chipsets Memory Corruption Vulnerability
• CVE-2025-27038 — Qualcomm Multiple Chipsets Use-After-Free Vulnerability

Latest Qualcomm Sm7435 Firmware vulnerabilities

• CVE-2026-57554 — Use After Free in DSP Service (CVSS 7.8)
• CVE-2026-57545 — Untrusted Pointer Dereference in Graphics (CVSS 7.8)
• CVE-2026-25302 — Improper Verification of Cryptographic Signature in Boot (CVSS 7.1)
• CVE-2026-25291 — Use After Free in Graphics (CVSS 7.8)
• CVE-2026-25272 — Out-of-bounds Write in Camera Driver (CVSS 6.7)
• CVE-2026-25270 — Out-of-bounds Write in Camera Driver (CVSS 6.7)
• CVE-2026-25269 — Out-of-bounds Write in Camera Driver (CVSS 6.7)
• CVE-2026-25267 — Missing Authorization in Core (CVSS 7.8)
• CVE-2026-25263 — Out of Bounds write in Linux Camera (CVSS 6.6)
• CVE-2026-25275 — Buffer Over-read in WLAN Firmware (CVSS 7.5)
• CVE-2026-24081 — Buffer Over-read in BT Controller (CVSS 7.4)
• CVE-2026-25292 — Improper Validation of Syntactic Correctness of Input in Automotive Linux OS (CVSS 7.6)
• CVE-2026-25289 — Stack-based Buffer Overflow in WLAN Firmware (CVSS 9.6)
• CVE-2026-24084 — Insecure Security Identifier Mechanism in Multi-Mode Call Processor (CVSS 7.5)
• CVE-2026-24079 — Missing Authentication for Critical Function in Data Modem (CVSS 8.1)
• CVE-2026-24078 — Exposure of Private Personal Information to an Unauthorized Actor in Data Modem (CVSS 6.5)
• CVE-2026-24077 — Integer Underflow (Wrap or Wraparound) in WLAN Host (CVSS 6.5)
• CVE-2026-21384 — Out-of-bounds Write in Camera Driver (CVSS 5.3)
• CVE-2026-21370 — Out-of-bounds Write in Camera Driver (CVSS 5.3)
• CVE-2026-21368 — Out-of-bounds Write in Camera Driver (CVSS 5.3)
• CVE-2026-24092 — Improper Validation of Syntactic Correctness of Input in Display (CVSS 7.2)
• CVE-2026-24091 — Improper Validation of Syntactic Correctness of Input in Display (CVSS 7.2)
• CVE-2026-24090 — Missing Authentication for Critical Function in HLOS (CVSS 7.1)
• CVE-2026-24089 — Improper Validation of Syntactic Correctness of Input in Kernel (CVSS 7.2)
• CVE-2026-24088 — Missing Authentication for Critical Function in Boot (CVSS 8.2)