Cologne Firmware vulnerabilities

3 known vulnerabilities in Cologne Firmware from Qualcomm. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  Snapdragon: Improper Verification of Cryptographic Signature

  CVE-2026-25302Oct 6, 2026Qualcomm

  Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed.

• 7.0 High severity

  Snapdragon: Buffer Over-read

  CVE-2026-24075Sep 17, 2026Qualcomm

  Memory Corruption when multiple threads issue concurrent IOCTL requests to the device control handler due to improper synchronization and race conditions.

• 7.5 High severity

  Snapdragon: Buffer Over-read

  CVE-2026-21381Apr 6, 2026Qualcomm

  Transient DOS when receiving a service data frame with excessive length during device matching over a neighborhood awareness network protocol connection.