Qualcomm Snapdragon 8cx Compute Platform "poipu Pro" Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Qualcomm Snapdragon 8cx Compute Platform "poipu Pro" Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (11)

• CVE-2026-21379 — CVSS 7.8 (high): Memory Corruption when allocating memory with sizes that exceed the maximum allowed value.
• CVE-2026-24075 — CVSS 7.8 (high): Memory Corruption when multiple threads issue concurrent IOCTL requests to the device control handler due to improper synchronization and…
• CVE-2026-21371 — CVSS 7.8 (high): Memory Corruption when retrieving output buffer with insufficient size validation.
• CVE-2026-21373 — CVSS 7.8 (high): Memory Corruption when accessing an output buffer without validating its size during IOCTL processing.
• CVE-2026-21374 — CVSS 7.8 (high): Memory Corruption when processing auxiliary sensor input/output control commands with insufficient buffer size validation.
• CVE-2026-21376 — CVSS 7.8 (high): Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver.
• CVE-2026-25275 — CVSS 7.5 (high): Transient DOS when processing authentication frames with invalid FILS information element header lengths.
• CVE-2025-47383 — CVSS 7.2 (high): Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE.
• CVE-2025-59611 — CVSS 6.7 (medium): Memory corruption in diagnostic services due to absence of input validation
• CVE-2026-24076 — CVSS 6.7 (medium): Memory Corruption when processing registry values with incorrect types using a direct query method.
• CVE-2026-24077 — CVSS 6.5 (medium): Information Disclosure when processing wireless network channel switch information with improperly formatted length fields.