« Volver al listado

Qualcomm

Qualcomm Ipq9554 Firmware: vulnerabilidades y CVE

Qualcomm Ipq9554 Firmware tiene 95 vulnerabilidades publicadas, 8 de ellas en los últimos 12 meses. 8 son críticas y 0 figuran en el catálogo de explotación activa de CISA.

CVE95
Últimos 12 meses8
Críticas8
Explotadas activamente0

Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología

Últimas vulnerabilidades

CVESeveridadEPSSExplotación activaPublicadaDescripción
CVE-2026-25275Alta (7.5)0.19%—17 sept 2026
Transient DOS when processing authentication frames with invalid FILS information element header lengths.
CVE-2026-25289Crítica (9.6)0.19%—4 ago 2026
Memory Corruption when processing Device Capability Extended attributes in certain NAN Service Discovery Frames with invalid length values.
CVE-2026-25268Alta (8.8)0.11%—6 jul 2026
Memory Corruption when processing invalid HT40 channel layouts during dynamic channel switching operations.
CVE-2025-59609Media (5.5)0.09%—1 jun 2026
Information Disclosure when processing advertisement frames with malformed MBSSID elements of insufficient length.
CVE-2025-47403Alta (7.5)0.22%—4 may 2026
Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming.
CVE-2025-47401Alta (7.5)0.22%—4 may 2026
Transient DOS when processing target power rate tables during channel configuration.
CVE-2025-47331Media (6.1)0.08%—7 ene 2026
Information disclosure while processing a firmware event.
CVE-2025-27064Media (6.1)0.08%—4 nov 2025
Information disclosure while registering commands from clients with diag through diagHal.
CVE-2025-47328Alta (7.5)0.22%—24 sept 2025
Transient DOS while processing power control requests with invalid antenna or stream values.
CVE-2025-47326Alta (7.5)0.24%—24 sept 2025
Transient DOS while handling command data during power control processing.
CVE-2025-21482Alta (7.1)0.08%—24 sept 2025
Cryptographic issue while performing RSA PKCS padding decoding.
CVE-2025-27073Alta (7.5)0.21%—6 ago 2025
Transient DOS while creating NDP instance.
CVE-2025-27066Alta (7.5)0.28%—6 ago 2025
Transient DOS while processing an ANQP message.
CVE-2025-27065Alta (7.5)0.21%—6 ago 2025
Transient DOS while processing a frame with malformed shared-key descriptor.
CVE-2025-21465Media (6.5)0.09%—6 ago 2025
Information disclosure while processing the hash segment in an MBN file.
CVE-2025-21464Media (6.5)0.09%—6 ago 2025
Information disclosure while reading data from an image using specified offset and size parameters.
CVE-2025-27061Alta (7.8)0.09%—8 jul 2025
Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmware.
CVE-2025-27057Alta (7.5)0.23%—8 jul 2025
Transient DOS while handling beacon frames with invalid IE header length.
CVE-2025-27042Alta (7.8)0.09%—8 jul 2025
Memory corruption while processing video packets received from video firmware.
CVE-2025-21446Alta (7.5)0.22%—8 jul 2025
Transient DOS may occur when processing vendor-specific information elements while parsing a WLAN frame for BTM requests.
CVE-2025-27029Alta (7.5)0.24%—3 jun 2025
Transient DOS while processing the tone measurement response buffer when the response buffer is out of range.
CVE-2025-21463Alta (7.5)0.23%—3 jun 2025
Transient DOS while processing the EHT operation IE in the received beacon frame.
CVE-2025-21448Alta (7.5)0.26%—7 abr 2025
Transient DOS may occur while parsing SSID in action frames.
CVE-2025-21435Alta (7.5)0.26%—7 abr 2025
Transient DOS may occur while parsing extended IE in beacon.
CVE-2024-45556Media (6.5)0.09%—7 abr 2025
Cryptographic issue may arise because the access control configuration permits Linux to read key registers in TCSR.
CVE-2024-43046Media (5.5)0.11%—7 abr 2025
There may be information disclosure during memory re-allocation in TZ Secure OS.
CVE-2024-43057Alta (7.8)0.12%—3 mar 2025
Memory corruption while processing command in Glink linux.
CVE-2024-49839Crítica (9.8)0.29%—3 feb 2025
Memory corruption during management frame processing due to mismatch in T2LM info element.
CVE-2024-45571Alta (7.8)0.10%—3 feb 2025
Memory corruption may occour occur when stopping the WLAN interface after processing a WMI command from the interface.
CVE-2024-45569Crítica (9.8)0.58%—3 feb 2025
Memory corruption while parsing the ML IE due to invalid frame content.

🎯 Cómo se explota (técnicas ATT&CK)

  1. T1190 Exploit Public-Facing Application17
  2. T1499.004 Application or System Exploitation11
  3. T1059 Command and Scripting Interpreter8
  4. T1068 Exploitation for Privilege Escalation6
  5. T1499 Endpoint Denial of Service4
  6. T1210 Exploitation of Remote Services1

Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.

Otros productos de Qualcomm