Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2736▼ 485 respecto a la semana anterior
Críticas / altas1304▼ 186 respecto a la semana anterior
Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)226▼ 276 respecto a la semana anterior
346 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Crítica (9.1) | 0.94% | — | Qualcomm Apq8009 FirmwareQualcomm Apq8009w FirmwareQualcomm Apq8017 FirmwareQualcomm Apq8037 Firmware+472 | 7/4/2021 | 17/6/2026 | Out of bound read occurs while processing crafted SDP due to lack of check of null string in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music,… | |
| Modificada | Crítica (9.8) | 1.1% | — | Qualcomm Apq8009 FirmwareQualcomm Apq8009w FirmwareQualcomm Apq8017 FirmwareQualcomm Apq8053 Firmware+377 | 17/3/2021 | 17/6/2026 | Buffer overflow can occur in video while playing the non-standard clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables | |
| Modificada | Alta (7) | 0.18% | — | Qualcomm Apq8009 FirmwareQualcomm Apq8009w FirmwareQualcomm Apq8017 FirmwareQualcomm Apq8053 Firmware+324 | 17/3/2021 | 17/6/2026 | Use after free condition in msm ioctl events due to race between the ioctl register and deregister events in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables | |
| Modificada | Media (6.4) | 0.14% | — | Qualcomm Aqt1000 FirmwareQualcomm Fsm10055 FirmwareQualcomm Pm3003a FirmwareQualcomm Pm7150a Firmware+176 | 17/3/2021 | 17/6/2026 | Potential arbitrary memory corruption when the qseecom driver updates ion physical addresses in the buffer as it exposes a physical address to user land in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile | |
| Modificada | Alta (7.8) | 0.21% | — | Qualcomm Aqt1000 FirmwareQualcomm Ar8035 FirmwareQualcomm Pm4125 FirmwareQualcomm Pm4250 Firmware+127 | 17/3/2021 | 17/6/2026 | Part of RPM region was not protected from xblSec itself due to improper policy and leads to unprivileged access in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking | |
| Modificada | Media (6.4) | 0.14% | — | Qualcomm Aqt1000 FirmwareQualcomm Ar8035 FirmwareQualcomm Pm4125 FirmwareQualcomm Pm4250 Firmware+127 | 17/3/2021 | 17/6/2026 | While processing storage SCM commands there is a time of check or time of use window where a pointer used could be invalid at a specific time while executing the storage SCM call in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired… | |
| Modificada | Alta (7.5) | 0.62% | — | Qualcomm Apq8009 FirmwareQualcomm Apq8017 FirmwareQualcomm Apq8053 FirmwareQualcomm Apq8064au Firmware+528 | 22/2/2021 | 17/6/2026 | Arithmetic overflow can happen while processing NOA IE due to improper error handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music,… | |
| Modificada | Crítica (9.8) | 0.71% | — | Qualcomm Apq8009Qualcomm Apq8009wQualcomm Apq8017Qualcomm Apq8053+375 | 22/2/2021 | 17/6/2026 | A buffer overflow can occur when playing an MKV clip due to lack of input validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables | |
| Modificada | Alta (7.8) | 0.18% | — | Qualcomm Apq8009Qualcomm Apq8009wQualcomm Apq8017Qualcomm Apq8037+421 | 22/2/2021 | 17/6/2026 | Improper access control when using mmap with the kgsl driver with a special offset value that can be provided to map the memstore of the GPU to user space in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,… | |
| Modificada | Alta (7.8) | 0.17% | — | Qualcomm Apq8009 FirmwareQualcomm Apq8016 FirmwareQualcomm Apq8064au FirmwareQualcomm Apq8096au Firmware+389 | 22/2/2021 | 17/6/2026 | Out of bound write and read in TA while processing command from NS side due to improper length check on command and response buffers in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music | |
| Modificada | Alta (7.8) | 0.17% | — | Qualcomm Aqt1000 FirmwareQualcomm Ar8035 FirmwareQualcomm Pm3003a FirmwareQualcomm Pm4125 Firmware+225 | 22/2/2021 | 17/6/2026 | Possible out of bound access in TA while processing a command from NS side due to improper length check of response buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking | |
| Modificada | Crítica (9.8) | 0.83% | — | Qualcomm Apq8009 FirmwareQualcomm Apq8009w FirmwareQualcomm Apq8017 FirmwareQualcomm Apq8030 Firmware+501 | 22/2/2021 | 17/6/2026 | Out of bound memory access while playing music playbacks with crafted vorbis content due to improper checks in header extraction in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon… | |
| Modificada | Media (6.7) | 0.16% | — | Qualcomm Aqt1000 FirmwareQualcomm Pm3003a FirmwareQualcomm Pm456 FirmwareQualcomm Pm6125 Firmware+199 | 22/2/2021 | 17/6/2026 | Use after free issue in audio modules while removing and freeing objects during list iteration due to incorrect usage of macro in Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile | |
| Modificada | Crítica (9.8) | 1.1% | — | Qualcomm Apq8009Qualcomm Apq8009wQualcomm Apq8017Qualcomm Apq8030+502 | 21/1/2021 | 17/6/2026 | Possible out of bound memory access in audio due to integer underflow while processing modified contents in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon… | |
| Modificada | Crítica (9.8) | 1.2% | — | Qualcomm Apq8009Qualcomm Apq8009wQualcomm Apq8017Qualcomm Apq8030+488 | 21/1/2021 | 17/6/2026 | Possible memory out of bound issue during music playback when an incorrect bit stream content is copied into array without checking the length of array in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon… | |
| Modificada | Alta (7.5) | 0.92% | — | Qualcomm Apq8009Qualcomm Apq8009wQualcomm Apq8017Qualcomm Apq8030+502 | 21/1/2021 | 17/6/2026 | Pointer variable which is freed is not cleared can result in memory corruption and leads to denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables,… | |
| Modificada | Alta (7.5) | 0.78% | — | Qualcomm Apq8017Qualcomm Apq8037Qualcomm Apq8052Qualcomm Apq8053+408 | 21/1/2021 | 17/6/2026 | Out of bound memory access while processing frames due to lack of check of invalid frames received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired… | |
| Modificada | Crítica (9.8) | 1.1% | — | Qualcomm Apq8009Qualcomm Apq8009wQualcomm Apq8017Qualcomm Apq8030+487 | 21/1/2021 | 17/6/2026 | Uninitialized pointers accessed during music play back with incorrect bit stream due to an uninitialized heap memory result in instability in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music,… | |
| Modificada | Crítica (9.8) | 1.1% | — | Qualcomm Apq8009Qualcomm Apq8009wQualcomm Apq8017Qualcomm Apq8030+487 | 21/1/2021 | 17/6/2026 | Integer multiplication overflow resulting in lower buffer size allocation than expected causes memory access out of bounds resulting in possible device instability in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile,… | |
| Modificada | Crítica (9.8) | 1.1% | — | Qualcomm Apq8009Qualcomm Apq8009wQualcomm Apq8017Qualcomm Apq8030+502 | 21/1/2021 | 17/6/2026 | Buffer Over-read in audio driver while using malloc management function due to not returning NULL for zero sized memory requirement in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music,… | |
| Modificada | Alta (7.5) | 0.77% | — | Qualcomm Apq8009 FirmwareQualcomm Apq8017 FirmwareQualcomm Apq8053 FirmwareQualcomm Apq8076 Firmware+467 | 21/1/2021 | 17/6/2026 | Buffer over-read can happen when the buffer length received from response handlers is more than the size of the payload in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile,… |