# Qualcomm Xg101002 Firmware


- [CVE-2026-25289](https://insights.sbomify.com/CVE-2026-25289/): Stack-based Buffer Overflow in WLAN Firmware (critical 9.6)
- [CVE-2026-24080](https://insights.sbomify.com/CVE-2026-24080/): Buffer Copy Without Checking Size of Input in Biometrics (high 7.8)
- [CVE-2026-21379](https://insights.sbomify.com/CVE-2026-21379/): Buffer Over-read in Windows Compute (high 7.8)
- [CVE-2026-25271](https://insights.sbomify.com/CVE-2026-25271/): Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service (high 7.8)
- [CVE-2025-59604](https://insights.sbomify.com/CVE-2025-59604/): NULL Pointer Dereference in SPS Applications (high 7.8)
- [CVE-2025-59606](https://insights.sbomify.com/CVE-2025-59606/): NULL Pointer Dereference in HLOS (high 7.8)
- [CVE-2026-25258](https://insights.sbomify.com/CVE-2026-25258/): Out-of-bounds Read in DSP Service (high 7.8)
- [CVE-2026-25259](https://insights.sbomify.com/CVE-2026-25259/): Out-of-bounds Write in DSP Service (high 7.8)
- [CVE-2026-25260](https://insights.sbomify.com/CVE-2026-25260/): Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service (high 7.8)
- [CVE-2025-47389](https://insights.sbomify.com/CVE-2025-47389/): Buffer Copy Without Checking Size of Input in Automotive Platform (high 7.8)
- [CVE-2025-47390](https://insights.sbomify.com/CVE-2025-47390/): Buffer Over-read in Camera (high 7.8)
- [CVE-2026-21371](https://insights.sbomify.com/CVE-2026-21371/): Buffer Over-read in WinBlast Driver (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/products/qualcomm/xg101002-firmware/