# Qualcomm Cologne Firmware


- [CVE-2026-25289](https://insights.sbomify.com/CVE-2026-25289/): Stack-based Buffer Overflow in WLAN Firmware (critical 9.6)
- [CVE-2026-25283](https://insights.sbomify.com/CVE-2026-25283/): Stack-based Buffer Overflow in OOBM (high 8.8)
- [CVE-2026-25282](https://insights.sbomify.com/CVE-2026-25282/): Out-of-bounds Read in OOBM (high 7.9)
- [CVE-2026-57545](https://insights.sbomify.com/CVE-2026-57545/): Untrusted Pointer Dereference in Graphics (high 7.8)
- [CVE-2026-57555](https://insights.sbomify.com/CVE-2026-57555/): Use After Free in DSP Service (high 7.8)
- [CVE-2026-57559](https://insights.sbomify.com/CVE-2026-57559/): Use After Free in DSP_Services (high 7.8)
- [CVE-2025-59607](https://insights.sbomify.com/CVE-2025-59607/): Untrusted Pointer Dereference in Windows Compute (high 7.8)
- [CVE-2026-24073](https://insights.sbomify.com/CVE-2026-24073/): Out-of-bounds Write in Video (high 7.8)
- [CVE-2026-24074](https://insights.sbomify.com/CVE-2026-24074/): Out-of-bounds Write in Video (high 7.8)
- [CVE-2026-24075](https://insights.sbomify.com/CVE-2026-24075/): Buffer Over-read in Qualcomm IPC (high 7.8)
- [CVE-2026-25280](https://insights.sbomify.com/CVE-2026-25280/): Out-of-bounds Write in DSP Service (high 7.8)
- [CVE-2026-25290](https://insights.sbomify.com/CVE-2026-25290/): Integer Overflow or Wraparound in OOBM (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/products/qualcomm/cologne-firmware/