# Qualcomm SC8380XP Firmware vulnerabilities Source: https://junglewise.ai/threats/technologies/sc8380xp-firmware Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/sc8380xp-firmware.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 33 vulnerabilities in Qualcomm SC8380XP Firmware: 0 in the last 7 days and 7 in the last 90 days, 1 of them critical and 1 exploited in the wild. The most recent, CVE-2026-25294, was published on 17 September 2026. Nothing in the last four weeks, down from 7 vulnerabilities in the four before. ## Counts - Last 7 days: 0 - Last 30 days: 0 - Last 90 days: 7 - All time: 33 (1 critical, 1 exploited in the wild) ## About Qualcomm SC8380XP Firmware Firmware for Qualcomm SC8380XP mobile system-on-chip processor. ## Latest Qualcomm SC8380XP Firmware vulnerabilities - [CVE-2026-25294: Qualcomm transient denial of service while parsing frame during channel usage](https://junglewise.ai/threats/cve-2026-25294-qualcomm-transient-denial-of-service-while-parsing-frame-during) (high, CVSS 7.4, published 17 Sep 2026) - [CVE-2026-25280: Qualcomm component memory corruption in escape handling](https://junglewise.ai/threats/cve-2026-25280-qualcomm-component-memory-corruption-in-escape-handling) (high, CVSS 7.8, published 17 Sep 2026) - [CVE-2026-25261: Qualcomm rear sensor driver memory corruption in IOCTL handling](https://junglewise.ai/threats/cve-2026-25261-qualcomm-rear-sensor-driver-memory-corruption-in-ioctl-handling) (medium, CVSS 6.7, published 17 Sep 2026) - [CVE-2026-24075: Qualcomm device control handler memory corruption via concurrent IOCTL requests](https://junglewise.ai/threats/cve-2026-24075-qualcomm-device-control-handler-memory-corruption-via-concurrent) (high, CVSS 7.8, published 17 Sep 2026) - [CVE-2026-24074: Qualcomm firmware memory corruption in data copy operations](https://junglewise.ai/threats/cve-2026-24074-qualcomm-firmware-memory-corruption-in-data-copy-operations) (high, CVSS 7.8, published 17 Sep 2026) - [CVE-2026-24073: Qualcomm decode statistics memory corruption](https://junglewise.ai/threats/cve-2026-24073-qualcomm-decode-statistics-memory-corruption) (high, CVSS 7.8, published 17 Sep 2026) - [CVE-2025-59607: Qualcomm component memory corruption on large input allocation](https://junglewise.ai/threats/cve-2025-59607-qualcomm-component-memory-corruption-on-large-input-allocation) (high, CVSS 7.8, published 17 Sep 2026) - [CVE-2026-24076: Qualcomm memory corruption in registry value processing](https://junglewise.ai/threats/cve-2026-24076-qualcomm-memory-corruption-in-registry-value-processing) (medium, CVSS 6.7, published 4 Aug 2026) - [CVE-2026-25266: Memory corruption while processing IOCTL command when device is in power-save state.](https://junglewise.ai/threats/cve-2026-25266-memory-corruption-while-processing-ioctl-command-when-device-is) (medium, CVSS 5.5, published 4 May 2026) - [CVE-2025-47408: Memory corruption when another driver calls an IOCTL with invalid input/output buffer.](https://junglewise.ai/threats/cve-2025-47408-memory-corruption-when-another-driver-calls-an-ioctl-with-invalid) (high, CVSS 7.8, published 4 May 2026) - [CVE-2025-47406: Information Disclosure while processing IOCTL handler callbacks without verifying buffer size.](https://junglewise.ai/threats/cve-2025-47406-information-disclosure-while-processing-ioctl-handler-callbacks) (medium, CVSS 6.1, published 4 May 2026) - [CVE-2025-47405: Memory corruption when processing camera sensor input/output control codes with invalid output buffers.](https://junglewise.ai/threats/cve-2025-47405-memory-corruption-when-processing-camera-sensor-input-output) (high, CVSS 7.8, published 4 May 2026) - [CVE-2026-21382: Memory Corruption when handling power management requests with improperly sized input/output buffers.](https://junglewise.ai/threats/cve-2026-21382-memory-corruption-when-handling-power-management-requests-with) (high, CVSS 7.8, published 6 Apr 2026) - [CVE-2026-21381: Transient DOS when receiving a service data frame with excessive length during device matching over a neighborhood…](https://junglewise.ai/threats/cve-2026-21381-transient-dos-when-receiving-a-service-data-frame-with-excessive) (high, CVSS 7.6, published 6 Apr 2026) - [CVE-2026-21380: Memory Corruption when using deprecated DMABUF IOCTL calls to manage video memory.](https://junglewise.ai/threats/cve-2026-21380-memory-corruption-when-using-deprecated-dmabuf-ioctl-calls-to) (high, CVSS 7.8, published 6 Apr 2026) - [CVE-2026-21378: Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor…](https://junglewise.ai/threats/cve-2026-21378-memory-corruption-when-accessing-an-output-buffer-without) (high, CVSS 7.8, published 6 Apr 2026) - [CVE-2026-21376: Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor…](https://junglewise.ai/threats/cve-2026-21376-memory-corruption-when-accessing-an-output-buffer-without) (high, CVSS 7.8, published 6 Apr 2026) - [CVE-2026-21375: Memory Corruption when accessing an output buffer without validating its size during IOCTL processing.](https://junglewise.ai/threats/cve-2026-21375-memory-corruption-when-accessing-an-output-buffer-without) (high, CVSS 7.8, published 6 Apr 2026) - [CVE-2026-21371: Memory Corruption when retrieving output buffer with insufficient size validation.](https://junglewise.ai/threats/cve-2026-21371-memory-corruption-when-retrieving-output-buffer-with-insufficient) (high, CVSS 7.8, published 6 Apr 2026) - [CVE-2025-47390: Memory corruption while preprocessing IOCTL request in JPEG driver.](https://junglewise.ai/threats/cve-2025-47390-memory-corruption-while-preprocessing-ioctl-request-in-jpeg) (high, CVSS 7.8, published 6 Apr 2026) - [CVE-2025-47356: Memory Corruption when multiple threads concurrently access and modify shared resources.](https://junglewise.ai/threats/cve-2025-47356-memory-corruption-when-multiple-threads-concurrently-access-and) (high, CVSS 7.8, published 7 Jan 2026) - [CVE-2025-47345: Cryptographic issue may occur while encrypting license data.](https://junglewise.ai/threats/cve-2025-47345-cryptographic-issue-may-occur-while-encrypting-license-data) (high, CVSS 8.4, published 7 Jan 2026) - [CVE-2025-47343: Memory corruption while processing a video session to set video parameters.](https://junglewise.ai/threats/cve-2025-47343-memory-corruption-while-processing-a-video-session-to-set-video) (high, CVSS 7.8, published 7 Jan 2026) - [CVE-2025-47368: Memory corruption when dereferencing an invalid userspace address in a user buffer during MCDM IOCTL processing.](https://junglewise.ai/threats/cve-2025-47368-memory-corruption-when-dereferencing-an-invalid-userspace-address) (high, CVSS 7.8, published 4 Nov 2025) - [CVE-2025-47367: Memory corruption while accessing a buffer during IOCTL processing.](https://junglewise.ai/threats/cve-2025-47367-memory-corruption-while-accessing-a-buffer-during-ioctl) (high, CVSS 7.8, published 4 Nov 2025) ## Most severe Qualcomm SC8380XP Firmware vulnerabilities - [CVE-2025-21480: Qualcomm Multiple Chipsets incorrect authorization in GPU micronode](https://junglewise.ai/threats/cve-2025-21480-qualcomm-multiple-chipsets-incorrect-authorization-in-gpu) (critical, exploited in the wild, CVSS 8.6, published 3 Jun 2025) - [CVE-2025-47345: Cryptographic issue may occur while encrypting license data.](https://junglewise.ai/threats/cve-2025-47345-cryptographic-issue-may-occur-while-encrypting-license-data) (high, CVSS 8.4, published 7 Jan 2026) - [CVE-2026-21376: Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor…](https://junglewise.ai/threats/cve-2026-21376-memory-corruption-when-accessing-an-output-buffer-without) (high, CVSS 7.8, published 6 Apr 2026) - [CVE-2026-21371: Memory Corruption when retrieving output buffer with insufficient size validation.](https://junglewise.ai/threats/cve-2026-21371-memory-corruption-when-retrieving-output-buffer-with-insufficient) (high, CVSS 7.8, published 6 Apr 2026) - [CVE-2025-47390: Memory corruption while preprocessing IOCTL request in JPEG driver.](https://junglewise.ai/threats/cve-2025-47390-memory-corruption-while-preprocessing-ioctl-request-in-jpeg) (high, CVSS 7.8, published 6 Apr 2026) - [CVE-2025-47368: Memory corruption when dereferencing an invalid userspace address in a user buffer during MCDM IOCTL processing.](https://junglewise.ai/threats/cve-2025-47368-memory-corruption-when-dereferencing-an-invalid-userspace-address) (high, CVSS 7.8, published 4 Nov 2025) - [CVE-2025-47367: Memory corruption while accessing a buffer during IOCTL processing.](https://junglewise.ai/threats/cve-2025-47367-memory-corruption-while-accessing-a-buffer-during-ioctl) (high, CVSS 7.8, published 4 Nov 2025) - [CVE-2025-47355: Memory corruption while invoking remote procedure IOCTL calls.](https://junglewise.ai/threats/cve-2025-47355-memory-corruption-while-invoking-remote-procedure-ioctl-calls) (high, CVSS 7.8, published 9 Oct 2025) - [CVE-2025-47349: Memory corruption while processing an escape call.](https://junglewise.ai/threats/cve-2025-47349-memory-corruption-while-processing-an-escape-call) (high, CVSS 7.8, published 9 Oct 2025) - [CVE-2025-47341: memory corruption while processing an image encoding completion event.](https://junglewise.ai/threats/cve-2025-47341-memory-corruption-while-processing-an-image-encoding-completion) (high, CVSS 7.8, published 9 Oct 2025) ## Vulnerabilities per week Nothing in the last four weeks, down from 7 vulnerabilities in the four before. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 7 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other Qualcomm technologies - [Qualcomm FastConnect 7800](https://junglewise.ai/threats/technologies/fastconnect-7800): 54 vulnerabilities - [Qualcomm FastConnect 7800 Firmware](https://junglewise.ai/threats/technologies/fastconnect-7800-firmware): 48 vulnerabilities - [Qualcomm FastConnect 6900](https://junglewise.ai/threats/technologies/fastconnect-6900): 47 vulnerabilities - [Qualcomm WSA8840](https://junglewise.ai/threats/technologies/wsa8840): 45 vulnerabilities - [Qualcomm WSA8845](https://junglewise.ai/threats/technologies/wsa8845): 45 vulnerabilities - [Qualcomm WSA8845H](https://junglewise.ai/threats/technologies/wsa8845h): 45 vulnerabilities - [Qualcomm Wsa8840 Firmware](https://junglewise.ai/threats/technologies/wsa8840-firmware): 44 vulnerabilities - [Qualcomm Wsa8845 Firmware](https://junglewise.ai/threats/technologies/wsa8845-firmware): 44 vulnerabilities - [Qualcomm Wsa8845h Firmware](https://junglewise.ai/threats/technologies/wsa8845h-firmware): 44 vulnerabilities - [Qualcomm FastConnect 6900 Firmware](https://junglewise.ai/threats/technologies/fastconnect-6900-firmware): 41 vulnerabilities - [Qualcomm WCD9380](https://junglewise.ai/threats/technologies/wcd9380): 39 vulnerabilities - [Qualcomm Wcd9380 Firmware](https://junglewise.ai/threats/technologies/wcd9380-firmware): 38 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Qualcomm SC8380XP Firmware vulnerabilities", https://junglewise.ai/threats/technologies/sc8380xp-firmware, 9 November 2026.