CF
Product
Cologne Firmware
63
CVEs
0
On KEV
9.6
Max CVSS
8
New 30D
Severity mix
Critical 1High 51Medium 11Low 0
Watch
Add Cologne Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-25283 | 8.8 | Sep 17 | Stack-based Buffer Overflow in OOBM Affected: All versions, or not specified |
| CVE-2026-25282 | 7.9 | Sep 17 | Out-of-bounds Read in OOBM Affected: All versions, or not specified |
| CVE-2026-57559 | 7.8 | Oct 6 | Use After Free in DSP_Services Affected: All versions, or not specified |
| CVE-2026-57555 | 7.8 | Oct 6 | Use After Free in DSP Service Affected: All versions, or not specified |
| CVE-2026-57545 | 7.8 | Oct 6 | Untrusted Pointer Dereference in Graphics Affected: All versions, or not specified |
| CVE-2026-25290 | 7.8 | Sep 17 | Integer Overflow or Wraparound in OOBM Affected: All versions, or not specified |
| CVE-2026-25280 | 7.8 | Sep 17 | Out-of-bounds Write in DSP Service Affected: All versions, or not specified |
| CVE-2026-25261 | 7.8 | Sep 17 | Untrusted Pointer Dereference in Camera Affected: All versions, or not specified |
| CVE-2026-24074 | 7.8 | Sep 17 | Out-of-bounds Write in Video Affected: All versions, or not specified |
| CVE-2026-24073 | 7.8 | Sep 17 | Out-of-bounds Write in Video Affected: All versions, or not specified |
| CVE-2025-59607 | 7.8 | Sep 17 | Untrusted Pointer Dereference in Windows Compute Affected: All versions, or not specified |
| CVE-2026-24080 | 7.8 | Aug 4 | Buffer Copy Without Checking Size of Input in Biometrics Affected: All versions, or not specified |
| CVE-2026-21379 | 7.8 | Jul 6 | Buffer Over-read in Windows Compute Affected: All versions, or not specified |
| CVE-2026-25259 | 7.8 | Jun 1 | Out-of-bounds Write in DSP Service Affected: All versions, or not specified |
| CVE-2026-25258 | 7.8 | Jun 1 | Out-of-bounds Read in DSP Service Affected: All versions, or not specified |
| CVE-2025-59606 | 7.8 | Jun 1 | NULL Pointer Dereference in HLOS Affected: All versions, or not specified |
| CVE-2025-59604 | 7.8 | Jun 1 | NULL Pointer Dereference in SPS Applications Affected: All versions, or not specified |
| CVE-2026-25266 | 7.8 | May 4 | Exposed dangerous function in windows host Affected: All versions, or not specified |
| CVE-2026-21382 | 7.8 | Apr 6 | Buffer Copy Without Checking Size of Input in Power Management IC Affected: All versions, or not specified |
| CVE-2026-21380 | 7.8 | Apr 6 | Use After Free in DSP Service Affected: All versions, or not specified |
| CVE-2026-21378 | 7.8 | Apr 6 | Buffer Over-read in Camera Affected: All versions, or not specified |
| CVE-2026-21376 | 7.8 | Apr 6 | Buffer Over-read in Camera Affected: All versions, or not specified |
| CVE-2026-21375 | 7.8 | Apr 6 | Buffer Over-read in Camera Affected: All versions, or not specified |
| CVE-2026-21374 | 7.8 | Apr 6 | Buffer Over-read in Camera Affected: All versions, or not specified |
| CVE-2026-21373 | 7.8 | Apr 6 | Buffer Over-read in Camera Affected: All versions, or not specified |
| CVE-2026-21372 | 7.8 | Apr 6 | Heap-Based Buffer Overflow in Power Management IC Affected: All versions, or not specified |
| CVE-2026-21371 | 7.8 | Apr 6 | Buffer Over-read in WinBlast Driver Affected: All versions, or not specified |
| CVE-2025-47390 | 7.8 | Apr 6 | Buffer Over-read in Camera Affected: All versions, or not specified |
| CVE-2025-47389 | 7.8 | Apr 6 | Buffer Copy Without Checking Size of Input in Automotive Platform Affected: All versions, or not specified |
| CVE-2025-59603 | 7.8 | Mar 2 | Out-of-bounds Write in Computer Vision Affected: All versions, or not specified |
| CVE-2025-47399 | 7.8 | Feb 2 | Buffer Copy Without Checking Size of Input in Camera Affected: All versions, or not specified |
| CVE-2025-47356 | 7.8 | Jan 6 | Double Free in Video Affected: All versions, or not specified |
| CVE-2025-47343 | 7.8 | Jan 6 | Untrusted Pointer Dereference in Video Affected: All versions, or not specified |
| CVE-2025-47403 | 7.5 | May 4 | Buffer Over-read in WLAN Firmware Affected: All versions, or not specified |
| CVE-2026-21381 | 7.5 | Apr 6 | Buffer Over-read in WLAN Firmware Affected: All versions, or not specified |
| CVE-2026-21367 | 7.5 | Apr 6 | Buffer Over-read in WLAN Firmware Affected: All versions, or not specified |
| CVE-2026-25294 | 7.4 | Sep 17 | Buffer Over-read in WLAN Firmware Affected: All versions, or not specified |
| CVE-2026-25281 | 7.4 | Sep 17 | Allocation of Resources Without Limits or Throttling in OOBM Affected: All versions, or not specified |
| CVE-2026-24081 | 7.4 | Sep 17 | Buffer Over-read in BT Controller Affected: All versions, or not specified |
| CVE-2026-25288 | 7.4 | Aug 4 | Buffer Over-read in WLAN Firmware Affected: All versions, or not specified |
| CVE-2026-25284 | 7.3 | Sep 17 | Buffer Over-read in OOBM Affected: All versions, or not specified |
| CVE-2026-24092 | 7.2 | Jun 1 | Improper Validation of Syntactic Correctness of Input in Display Affected: All versions, or not specified |
| CVE-2026-24091 | 7.2 | Jun 1 | Improper Validation of Syntactic Correctness of Input in Display Affected: All versions, or not specified |
| CVE-2026-24089 | 7.2 | Jun 1 | Improper Validation of Syntactic Correctness of Input in Kernel Affected: All versions, or not specified |
| CVE-2026-24087 | 7.2 | Jun 1 | Improper Validation of Syntactic Correctness of Input in Kernel Affected: All versions, or not specified |
| CVE-2026-25302 | 7.1 | Oct 6 | Improper Verification of Cryptographic Signature in Boot Affected: All versions, or not specified |
| CVE-2026-24090 | 7.1 | Jun 1 | Missing Authentication for Critical Function in HLOS Affected: All versions, or not specified |
| CVE-2025-47378 | 7.1 | Mar 2 | Exposure of Sensitive System Information to an Unauthorized Control Sphere in HLOS Affected: All versions, or not specified |
| CVE-2026-24075 | 7.0 | Sep 17 | Buffer Over-read in Qualcomm IPC Affected: All versions, or not specified |
| CVE-2026-25271 | 7.0 | Jul 6 | Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service Affected: All versions, or not specified |