What’s Vulnerable › Products

Qualcomm Themisto Firmware vulnerabilities

29 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 29 published in the last 12 months.

Check whether your Qualcomm Themisto Firmware version is affected

Exploited Qualcomm Themisto Firmware vulnerabilities

• CVE-2026-21385 — Qualcomm Multiple Chipsets Memory Corruption Vulnerability

Latest Qualcomm Themisto Firmware vulnerabilities

• CVE-2026-57545 — Untrusted Pointer Dereference in Graphics (CVSS 7.8)
• CVE-2026-57537 — Use After Free in DSP Service (CVSS 7.8)
• CVE-2026-25302 — Improper Verification of Cryptographic Signature in Boot (CVSS 7.1)
• CVE-2026-25291 — Use After Free in Graphics (CVSS 7.8)
• CVE-2026-25270 — Out-of-bounds Write in Camera Driver (CVSS 6.7)
• CVE-2026-25292 — Improper Validation of Syntactic Correctness of Input in Automotive Linux OS (CVSS 7.6)
• CVE-2026-25289 — Stack-based Buffer Overflow in WLAN Firmware (CVSS 9.6)
• CVE-2026-24080 — Buffer Copy Without Checking Size of Input in Biometrics (CVSS 7.8)
• CVE-2026-24079 — Missing Authentication for Critical Function in Data Modem (CVSS 8.1)
• CVE-2026-24078 — Exposure of Private Personal Information to an Unauthorized Actor in Data Modem (CVSS 6.5)
• CVE-2026-21369 — Out-of-bounds Write in Camera Driver (CVSS 5.3)
• CVE-2026-24092 — Improper Validation of Syntactic Correctness of Input in Display (CVSS 7.2)
• CVE-2026-24091 — Improper Validation of Syntactic Correctness of Input in Display (CVSS 7.2)
• CVE-2026-24090 — Missing Authentication for Critical Function in HLOS (CVSS 7.1)
• CVE-2026-24089 — Improper Validation of Syntactic Correctness of Input in Kernel (CVSS 7.2)
• CVE-2026-24088 — Missing Authentication for Critical Function in Boot (CVSS 8.2)
• CVE-2026-24087 — Improper Validation of Syntactic Correctness of Input in Kernel (CVSS 7.2)
• CVE-2026-24085 — Stack-based Buffer Overflow in Display (CVSS 7.2)
• CVE-2025-59610 — Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver (CVSS 6.4)
• CVE-2025-59606 — NULL Pointer Dereference in HLOS (CVSS 7.8)
• CVE-2025-59604 — NULL Pointer Dereference in SPS Applications (CVSS 7.8)
• CVE-2025-47407 — Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service (CVSS 7.0)
• CVE-2025-47400 — Buffer Over-read in Computer Vision (CVSS 7.1)
• CVE-2025-47392 — Integer Overflow or Wraparound in GPS (CVSS 8.8)
• CVE-2025-47389 — Buffer Copy Without Checking Size of Input in Automotive Platform (CVSS 7.8)