« Volver al listado

Qualcomm

Qualcomm Iq-9075 Firmware: vulnerabilidades y CVE

Qualcomm Iq-9075 Firmware tiene 23 vulnerabilidades publicadas, 23 de ellas en los últimos 12 meses. 0 son críticas y 1 figuran en el catálogo de explotación activa de CISA.

CVE23
Últimos 12 meses23
Críticas0
Explotadas activamente1

Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología

🔴 Explotadas activamente (CISA KEV)

CVESeveridadEPSSExplotación activaPublicadaDescripción
CVE-2026-21385Alta (7.8)1.3%⚠ Explotación activa2 mar 2026
Memory corruption while using alignments for memory allocation.

Últimas vulnerabilidades

CVESeveridadEPSSExplotación activaPublicadaDescripción
CVE-2026-25275Alta (7.5)0.19%—17 sept 2026
Transient DOS when processing authentication frames with invalid FILS information element header lengths.
CVE-2026-24081Alta (7.4)0.10%—17 sept 2026
Transient DOS when processing a channel map with insufficient used channels and adaptive frequency hopping is fully enabled.
CVE-2026-21370Media (5.3)0.08%—6 jul 2026
Memory Corruption when validating input batch size and buffer plane count exceeds maximum allowed values.
CVE-2026-21369Media (5.3)0.08%—6 jul 2026
Memory Corruption when handling flash commands due to outdated LED count values being used after userspace modification.
CVE-2026-21368Media (5.3)0.08%—6 jul 2026
Memory Corruption when parsing jpeg commands due to unaccounted extra writes to the buffer during validation checks.
CVE-2026-24092Alta (7.2)0.10%—1 jun 2026
Memory Corruption when processing fastboot commands to set display mode.
CVE-2026-24091Alta (7.2)0.10%—1 jun 2026
Memory corruption while processing fastboot commands with improperly formatted input.
CVE-2026-24090Alta (7.1)0.06%—1 jun 2026
Cryptographic issue while processing partition table entries allows unauthorized modification of boot flow.
CVE-2026-24089Alta (7.2)0.10%—1 jun 2026
Memory corruption while processing fastboot commands with invalid input.
CVE-2026-24088Alta (8.2)0.07%—1 jun 2026
Cryptographic Issue while processing a specific partition which allows unauthorized write access to load a customized bootloader.
CVE-2026-24087Alta (7.2)0.10%—1 jun 2026
Memory corruption while processing fastboot OEM commands.
CVE-2026-24085Alta (7.2)0.10%—1 jun 2026
Memory Corruption when processing display command line information due to improper initialization of a variable.
CVE-2025-59610Media (6.4)0.06%—1 jun 2026
Memory Corruption when processing IOCTL requests with mismatched API versions due to concurrent modification of user-space buffer.
CVE-2025-59609Media (5.5)0.09%—1 jun 2026
Information Disclosure when processing advertisement frames with malformed MBSSID elements of insufficient length.
CVE-2025-59606Alta (7.8)0.07%—1 jun 2026
Memory Corruption when writing to invalid memory locations occurs due to heap memory exhaustion during secure data initialization.
CVE-2025-59604Alta (7.8)0.07%—1 jun 2026
Memory Corruption when running a memory copy operation due to invalid writes caused by a null pointer.
CVE-2025-47391Alta (7.8)0.10%—6 abr 2026
Memory corruption while processing a frame request from user.
CVE-2025-47389Alta (7.8)0.10%—6 abr 2026
Memory corruption when buffer copy operation fails due to integer overflow during attestation report generation.
CVE-2026-21385Alta (7.8)1.3%⚠ Explotación activa2 mar 2026
Memory corruption while using alignments for memory allocation.
CVE-2025-59600Alta (7.8)0.07%—2 mar 2026
Memory Corruption when adding user-supplied data without checking available buffer space.
CVE-2025-47373Alta (7.8)0.07%—2 mar 2026
Memory Corruption when accessing buffers with invalid length during TA invocation.
CVE-2025-47398Alta (7.8)0.11%—2 feb 2026
Memory Corruption while deallocating graphics processing unit memory buffers due to improper handling of memory pointers.
CVE-2025-47397Alta (7.8)0.11%—2 feb 2026
Memory Corruption when initiating GPU memory mapping using scatter-gather lists due to unchecked IOMMU mapping errors.

🎯 Cómo se explota (técnicas ATT&CK)

  1. T1068 Exploitation for Privilege Escalation13
  2. T1059 Command and Scripting Interpreter12
  3. T1091 Replication Through Removable Media5
  4. T1190 Exploit Public-Facing Application1
  5. T1210 Exploitation of Remote Services1
  6. T1499 Endpoint Denial of Service1

Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.

Otros productos de Qualcomm