Qualcomm
Qualcomm Snapdragon X35 5G Modem-rf Firmware: vulnerabilidades y CVE
Qualcomm Snapdragon X35 5G Modem-rf Firmware tiene 47 vulnerabilidades publicadas, 4 de ellas en los últimos 12 meses. 3 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE47
Últimos 12 meses4
Críticas3
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-24082 | Alta (7.8) | 0.07% | — | 4 may 2026 | Memory Corruption when copying data from a freed source while executing performance counter deselect operation. |
| CVE-2025-47404 | Alta (7.8) | 0.07% | — | 4 may 2026 | Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified. |
| CVE-2025-47401 | Alta (7.5) | 0.22% | — | 4 may 2026 | Transient DOS when processing target power rate tables during channel configuration. |
| CVE-2025-47366 | Alta (7.8) | 0.10% | — | 2 feb 2026 | Cryptographic issue when a Trusted Zone with outdated code is triggered by a HLOS providing incorrect input. |
| CVE-2025-27052 | Alta (7.8) | 0.09% | — | 8 jul 2025 | Memory corruption while processing data packets in diag received from Unix clients. |
| CVE-2025-27043 | Alta (7.8) | 0.09% | — | 8 jul 2025 | Memory corruption while processing manipulated payload in video firmware. |
| CVE-2025-27042 | Alta (7.8) | 0.09% | — | 8 jul 2025 | Memory corruption while processing video packets received from video firmware. |
| CVE-2025-21454 | Alta (7.5) | 0.22% | — | 8 jul 2025 | Transient DOS while processing received beacon frame. |
| CVE-2025-21450 | Crítica (9.1) | 0.31% | — | 8 jul 2025 | Cryptographic issue occurs due to use of insecure connection method while downloading. |
| CVE-2025-21449 | Alta (7.5) | 0.22% | — | 8 jul 2025 | Transient DOS may occur while processing malformed length field in SSID IEs. |
| CVE-2025-21446 | Alta (7.5) | 0.22% | — | 8 jul 2025 | Transient DOS may occur when processing vendor-specific information elements while parsing a WLAN frame for BTM requests. |
| CVE-2025-21433 | Media (5.5) | 0.08% | — | 8 jul 2025 | Transient DOS when importing a PKCS#8-encoded RSA private key with a zero-sized modulus. |
| CVE-2025-21432 | Alta (7.8) | 0.09% | — | 8 jul 2025 | Memory corruption while retrieving the CBOR data from TA. |
| CVE-2025-21422 | Alta (7.8) | 0.10% | — | 8 jul 2025 | Cryptographic issue while processing crypto API calls, missing checks may lead to corrupted key usage or IV reuses. |
| CVE-2024-53009 | Alta (7.8) | 0.09% | — | 8 jul 2025 | Memory corruption while operating the mailbox in Automotive. |
| CVE-2025-21453 | Alta (7.8) | 0.11% | — | 6 may 2025 | Memory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential failures occur. |
| CVE-2024-49845 | Alta (7.8) | 0.11% | — | 6 may 2025 | Memory corruption during the FRS UDS generation process. |
| CVE-2024-49844 | Alta (7.8) | 0.11% | — | 6 may 2025 | Memory corruption while triggering commands in the PlayReady Trusted application. |
| CVE-2024-49842 | Alta (7.8) | 0.09% | — | 6 may 2025 | Memory corruption during memory mapping into protected VM address space due to incorrect API restrictions. |
| CVE-2024-49841 | Alta (7.8) | 0.11% | — | 6 may 2025 | Memory corruption during memory assignment to headless peripheral VM due to incorrect error code handling. |
| CVE-2024-49835 | Alta (7.8) | 0.11% | — | 6 may 2025 | Memory corruption while reading secure file. |
| CVE-2024-49838 | Alta (7.5) | 0.31% | — | 3 feb 2025 | Information disclosure while parsing the OCI IE with invalid length. |
| CVE-2024-45584 | Alta (7.8) | 0.10% | — | 3 feb 2025 | Memory corruption can occur when a compat IOCTL call is followed by a normal IOCTL call from userspace. |
| CVE-2024-38420 | Alta (7.8) | 0.10% | — | 3 feb 2025 | Memory corruption while configuring a Hypervisor based input virtual device. |
| CVE-2024-45553 | Alta (7.8) | 0.13% | — | 6 ene 2025 | Memory corruption can occur when process-specific maps are added to the global list. If a map is removed from the global list while another thread is using it for a process-specific task, issues may arise. |
| CVE-2024-38402 | Alta (7.8) | 0.16% | — | 2 sept 2024 | Memory corruption while processing IOCTL call for getting group info. |
| CVE-2024-21480 | Crítica (9.8) | 0.29% | — | 6 may 2024 | Memory corruption while playing audio file having large-sized input buffer. |
| CVE-2024-21475 | Alta (7.8) | 0.11% | — | 6 may 2024 | Memory corruption when the payload received from firmware is not as per the expected protocol size. |
| CVE-2023-43531 | Alta (7.8) | 0.11% | — | 6 may 2024 | Memory corruption while verifying the serialized header when the key pairs are generated. |
| CVE-2023-43530 | Alta (7.8) | 0.11% | — | 6 may 2024 | Memory corruption in HLOS while checking for the storage type. |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.