Loading story…
Qualcomm published a security bulletin addressing vulnerabilities affecting Qualcomm products, and national cyber authorities subsequently urged organizations to review the vendor guidance and apply the available patches. The Canadian Centre for Cyber Security referenced the issue in advisory AV26-795, while CERT-PY also circulated notice of the Qualcomm product vulnerabilities, amplifying the vendor’s remediation guidance across government channels.
Publicly available notices provide limited technical detail, with no CVE list, impact breakdown, or confirmed exploitation status included in the referenced summaries. Even so, the coordinated advisories indicate that Qualcomm released updates for affected products and that administrators should prioritize validating exposure across Qualcomm-based devices and deploying the recommended fixes from the vendor bulletin.
See real exploitation activity before you spend the cycle.
2 events from the most recent confirmed update back to the earliest known activity.
The Canadian Centre for Cyber Security published advisory AV26-795 referencing Qualcomm's bulletin. It advised users and administrators to review the Qualcomm notice and apply the necessary updates.
Qualcomm published its August 2026 security bulletin to address vulnerabilities affecting Qualcomm products. The bulletin is the primary vendor notice referenced by subsequent advisories urging users to apply updates.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
3 references tracked. Mallory keeps watching after this page renders.
malware.news
Open sourcecert.gov.py
Open sourcedocs.qualcomm.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Google’s March Android security update addressed **129 vulnerabilities**, including one **actively exploited** high-severity memory-corruption flaw in an open-source **Qualcomm display component** tracked as **CVE-2026-21385**. Google warned the issue “may be under limited, targeted exploitation,” and reporting indicated Qualcomm marked the vulnerability as exploited; Qualcomm stated it provided fixes to customers in **January 2026** and urged end users to apply OEM-delivered device updates as they become available. Separately, the Canadian Centre for Cyber Security issued multiple vendor rollups and advisories on March 2, 2026, including an **Android monthly rollup (AV26-187)** pointing organizations to the Android Security Bulletin for patching guidance. Additional Canadian advisories covered unrelated vulnerability sets in **Veeam Kasten for Kubernetes (AV26-188)**, **VMware Tanzu products (AV26-186)**, **Red Hat (including Linux kernel updates) (AV26-184)**, **CISA ICS advisories for multiple OT/IoT products (AV26-183)**, **Dell infrastructure products (AV26-181)**, and **IBM enterprise software (AV26-180)**; these are general patch-notification items and do not provide details tied to the Android/Qualcomm zero-day beyond directing readers to apply vendor updates.
Jun 29, 2026
Qualcomm released security updates for multiple products to fix **one critical** and **five high-severity** vulnerabilities affecting WLAN, modem, and related platform components across a broad set of Snapdragon, FastConnect, QCA, QCN, WCN, WCD, WSA, and modem-RF products. Italy’s national CSIRT said the flaws could enable **arbitrary code execution**, **denial of service**, and **authentication bypass**, and urged organizations to review Qualcomm’s official bulletin for affected versions and remediation details. The most severe issue, **`CVE-2026-25289`**, is a **critical** stack-based buffer overflow in Qualcomm WLAN firmware with a **CVSS 9.6** score, caused by memory corruption when processing malformed Device Capability Extended attributes in certain NAN Service Discovery Frames. Qualcomm also disclosed **`CVE-2026-24079`**, a **high-severity** missing-authentication flaw in data modem registration handling rated **CVSS 8.1**, which can be triggered with malformed or absent authentication parameters; available records indicate no known exploitation for either issue, but customers were advised to apply vendor patches and update affected system software promptly.
Aug 4, 2026
Qualcomm released security updates for October 2024 to address 20 vulnerabilities across its products, including an actively exploited zero-day and a critical memory-corruption issue. The zero-day, **`CVE-2024-43047`**, affects the Qualcomm Digital Signal Processor (DSP) service used by multiple chipsets and stems from a use-after-free condition that could let a local low-privileged attacker trigger memory corruption on vulnerable devices. Qualcomm also fixed **`CVE-2024-33066`**, a critical input-validation flaw in the WLAN Resource Manager that can likewise lead to memory corruption. The company said customers should deploy updated firmware for affected chipsets as soon as possible, including updates related to the **FASTRPC** driver, as part of the broader bulletin covering all 20 patched issues.
Jul 24, 2026