Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2704▼ 598 respecto a la semana anterior
Críticas / altas1288▼ 199 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)299▼ 211 respecto a la semana anterior
–

300 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
ModificadaMedia (5.5)0.13%—Qualcomm Apq8053 FirmwareQualcomm Aqt1000 FirmwareQualcomm Msm8953 FirmwareQualcomm Qca6390 Firmware+5714/6/202217/6/2026
Improper validation of permissions for third party application accessing Telephony service API can lead to information disclosure in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
ModificadaAlta (7.5)0.39%—Qualcomm Aqt1000 FirmwareQualcomm Ar8035 FirmwareQualcomm Csrb31024 FirmwareQualcomm Qca6174a Firmware+10314/6/202217/6/2026
Possible memory leak due to improper validation of certificate chain length while parsing server certificate chain in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
ModificadaAlta (7.5)0.60%—Qualcomm Ar8035 FirmwareQualcomm Qca6390 FirmwareQualcomm Qca6391 FirmwareQualcomm Qca6421 Firmware+5314/6/202217/6/2026
Possible null pointer dereference due to improper validation of RRC connection reconfiguration message in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
ModificadaAlta (7.5)0.60%—Qualcomm Ar8035 FirmwareQualcomm Qca6390 FirmwareQualcomm Qca6391 FirmwareQualcomm Qca6421 Firmware+5214/6/202217/6/2026
Possible assertion due to improper validation of rank restriction field in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
ModificadaMedia (5.5)0.13%—Qualcomm Aqt1000 FirmwareQualcomm Ar8035 FirmwareQualcomm Ar9380 FirmwareQualcomm Csr8811 Firmware+16714/6/202217/6/2026
Possible buffer over read due to lack of size validation while copying data from DBR buffer to RX buffer and can lead to Denial of Service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
ModificadaAlta (7.8)0.16%—Qualcomm Aqt1000 FirmwareQualcomm Ar8035 FirmwareQualcomm Csrb31024 FirmwareQualcomm Qca6390 Firmware+9214/6/202217/6/2026
Lack of MBN header size verification against input buffer can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables
ModificadaMedia (6.7)0.16%—Qualcomm Aqt1000 FirmwareQualcomm Ar8031 FirmwareQualcomm Ar8035 FirmwareQualcomm Csr8811 Firmware+13714/6/202217/6/2026
Improper access control sequence for AC database after memory allocation can lead to possible memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and…
ModificadaAlta (8.1)0.50%—Qualcomm Ar8035 FirmwareQualcomm Qca6390 FirmwareQualcomm Qca6391 FirmwareQualcomm Qca6426 Firmware+6014/6/202217/6/2026
Improper integrity check can lead to race condition between tasks PDCP and RRC? right after a valid RRC Command packet has been received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
ModificadaMedia (5.5)0.16%—Qualcomm Ar8035 FirmwareQualcomm Qca9984 FirmwareQualcomm Qcm2290 FirmwareQualcomm Qcm4290 Firmware+2414/6/202217/6/2026
RPM secure Stream can access any secure resource due to improper SMMU configuration in Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
ModificadaMedia (5.5)0.16%—Qualcomm Ar8035 FirmwareQualcomm Qca9984 FirmwareQualcomm Qcm2290 FirmwareQualcomm Qcm4290 Firmware+2414/6/202217/6/2026
RPM secure Stream can access any secure resource due to improper SMMU configuration in Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
ModificadaAlta (7.5)0.60%—Qualcomm Apq8009w FirmwareQualcomm Apq8017 FirmwareQualcomm Apq8053 FirmwareQualcomm Apq8096au Firmware+14314/6/202217/6/2026
Improper authorization of a replayed LTE security mode command can lead to a denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
ModificadaMedia (5.9)0.48%—Qualcomm Ar8035 FirmwareQualcomm Qca6390 FirmwareQualcomm Qca6391 FirmwareQualcomm Qca6426 Firmware+6014/6/202217/6/2026
Improper integrity check can lead to race condition between tasks PDCP and RRC? after a valid RRC Command packet has been received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
ModificadaCrítica (9.8)0.80%—Qualcomm Apq8009w FirmwareQualcomm Apq8096au FirmwareQualcomm Aqt1000 FirmwareQualcomm Ar8035 Firmware+11614/6/202217/6/2026
Improper buffer size validation of DSM packet received can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables
ModificadaAlta (7.5)0.60%—Qualcomm Ar8035 FirmwareQualcomm Qca6390 FirmwareQualcomm Qca6391 FirmwareQualcomm Qca6426 Firmware+4914/6/202217/6/2026
Reachable assertion due to improper validation of coreset in PDCCH configuration in SA mode in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
ModificadaMedia (5.5)0.16%—Qualcomm Ar8035 FirmwareQualcomm Qca6391 FirmwareQualcomm Qca8081 FirmwareQualcomm Qca8337 Firmware+5114/6/202217/6/2026
Reading PRNG output may lead to improper key generation due to lack of buffer validation in Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
ModificadaAlta (7.8)0.16%—Qualcomm Apq8009w FirmwareQualcomm Aqt1000 FirmwareQualcomm Ar8031 FirmwareQualcomm Ar8035 Firmware+12714/6/202217/6/2026
Possible use after free due to lack of null check of DRM file status after file structure is freed in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables
ModificadaAlta (7.8)0.16%—Qualcomm Aqt1000 FirmwareQualcomm Ar8031 FirmwareQualcomm Ar8035 FirmwareQualcomm Csr8811 Firmware+14314/6/202217/6/2026
Possible unauthorized access to secure space due to improper check of data allowed while flashing the no access control device configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon…
ModificadaAlta (7.8)0.19%—Qualcomm Aqt1000 FirmwareQualcomm Ar8031 FirmwareQualcomm Ar8035 FirmwareQualcomm Csra6620 Firmware+1081/4/202217/6/2026
Possible out of bound read due to improper length calculation of WMI message. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
ModificadaAlta (7.8)0.20%—Qualcomm Apq8009w FirmwareQualcomm Apq8017 FirmwareQualcomm Apq8053 FirmwareQualcomm Apq8096au Firmware+1531/4/202217/6/2026
Possible out of bounds access due to improper input validation during graphics profiling in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
ModificadaAlta (7.8)0.20%—Qualcomm Ar8035 FirmwareQualcomm Ar9380 FirmwareQualcomm Csr8811 FirmwareQualcomm Csrb31024 Firmware+1451/4/202217/6/2026
Possible out of bound write due to improper validation of number of timer values received from firmware while syncing timers in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
ModificadaCrítica (9.1)0.85%—Qualcomm Aqt1000 FirmwareQualcomm Ar8035 FirmwareQualcomm Ar9380 FirmwareQualcomm Csr8811 Firmware+1811/4/202217/6/2026
Possible out of bound read due to improper validation of IE length during SSID IE parse when channel is DFS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
ModificadaAlta (7.8)0.14%—Qualcomm Apq8009w FirmwareQualcomm Apq8017 FirmwareQualcomm Apq8053 FirmwareQualcomm Apq8096au Firmware+1251/4/202217/6/2026
Improper validation of buffer size input to the EFS file can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
ModificadaAlta (7.5)0.57%—Qualcomm Ar8035 FirmwareQualcomm Qca6390 FirmwareQualcomm Qca6391 FirmwareQualcomm Qca6426 Firmware+511/4/202217/6/2026
Possible assertion due to improper validation of OTA configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
ModificadaMedia (5.5)0.14%—Qualcomm Ar8035 FirmwareQualcomm Fsm10055 FirmwareQualcomm Fsm10056 FirmwareQualcomm Mdm9150 Firmware+731/4/202217/6/2026
Possible buffer overflow due to improper data validation of external commands sent via DIAG interface in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
ModificadaAlta (7.5)0.58%—Qualcomm Ar8035 FirmwareQualcomm Qca6390 FirmwareQualcomm Qca6391 FirmwareQualcomm Qca6426 Firmware+491/4/202217/6/2026
Possible assertion due to improper validation of TCI configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile