« Volver al listado

Qualcomm

Qualcomm Qcs5430 Firmware: vulnerabilidades y CVE

Qualcomm Qcs5430 Firmware tiene 214 vulnerabilidades publicadas, 26 de ellas en los últimos 12 meses. 8 son críticas y 3 figuran en el catálogo de explotación activa de CISA.

CVE214
Últimos 12 meses26
Críticas8
Explotadas activamente3

Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología

🔴 Explotadas activamente (CISA KEV)

CVESeveridadEPSSExplotación activaPublicadaDescripción
CVE-2023-33106Alta (7.8)0.92%⚠ Explotación activa5 dic 2023
Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.
CVE-2023-33063Alta (7.8)0.69%⚠ Explotación activa5 dic 2023
Memory corruption in DSP Services during a remote call from HLOS to DSP.
CVE-2023-33107Alta (7.8)0.89%⚠ Explotación activa5 dic 2023
Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.

Últimas vulnerabilidades

CVESeveridadEPSSExplotación activaPublicadaDescripción
CVE-2025-47366Alta (7.8)0.10%—2 feb 2026
Cryptographic issue when a Trusted Zone with outdated code is triggered by a HLOS providing incorrect input.
CVE-2025-47369Media (5.5)0.08%—7 ene 2026
Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID.
CVE-2025-47348Alta (7.8)0.08%—7 ene 2026
Memory corruption while processing identity credential operations in the trusted application.
CVE-2025-47346Alta (7.8)0.08%—7 ene 2026
Memory corruption while processing a secure logging command in the trusted application.
CVE-2025-47345Alta (8.4)0.08%—7 ene 2026
Cryptographic issue may occur while encrypting license data.
CVE-2025-47344Media (6.4)0.06%—7 ene 2026
Memory corruption while handling sensor utility operations.
CVE-2025-47339Alta (7.8)0.08%—7 ene 2026
Memory corruption while deinitializing a HDCP session.
CVE-2025-47337Media (6.7)0.08%—7 ene 2026
Memory corruption while accessing a synchronization object during concurrent operations.
CVE-2025-47335Media (6.7)0.08%—7 ene 2026
Memory corruption while parsing clock configuration data for a specific hardware type.
CVE-2025-47334Media (6.7)0.08%—7 ene 2026
Memory corruption while processing shared command buffer packet between camera userspace and kernel.
CVE-2025-47333Media (6.6)0.08%—7 ene 2026
Memory corruption while handling buffer mapping operations in the cryptographic driver.
CVE-2025-47331Media (6.1)0.08%—7 ene 2026
Information disclosure while processing a firmware event.
CVE-2025-47330Media (5.5)0.07%—7 ene 2026
Transient DOS while parsing video packets received from the video firmware.
CVE-2025-47387Alta (7.8)0.10%—18 dic 2025
Memory Corruption when processing IOCTLs for JPEG data without verification.
CVE-2025-47321Alta (7.8)0.08%—18 dic 2025
Memory corruption while copying packets received from unix clients.
CVE-2025-47320Alta (7.8)0.08%—18 dic 2025
Memory corruption while processing MFC channel configuration during music playback.
CVE-2025-47319Media (6.7)0.09%—18 dic 2025
Information disclosure while exposing internal TA-to-TA communication APIs to HLOS
CVE-2025-27063Alta (7.8)0.10%—18 dic 2025
Memory corruption during video playback when video session open fails with time out error.
CVE-2025-47323Alta (7.8)0.09%—18 dic 2025
Memory corruption while routing GPR packets between user and root when handling large data packet.
CVE-2025-47370Media (6.5)0.12%—4 nov 2025
Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan.
CVE-2025-47367Alta (7.8)0.08%—4 nov 2025
Memory corruption while accessing a buffer during IOCTL processing.
CVE-2025-27070Alta (7.8)0.06%—4 nov 2025
Memory corruption while performing encryption and decryption commands.
CVE-2025-47341Alta (7.8)0.09%—9 oct 2025
memory corruption while processing an image encoding completion event.
CVE-2025-27054Alta (7.8)0.09%—9 oct 2025
Memory corruption while processing a malformed license file during reboot.
CVE-2025-27053Alta (7.8)0.09%—9 oct 2025
Memory corruption during PlayReady APP usecase while processing TA commands.
CVE-2025-27049Media (5.5)0.08%—9 oct 2025
Transient DOS while processing IOCTL call for image encoding.
CVE-2025-47327Alta (7.8)0.09%—24 sept 2025
Memory corruption while encoding the image data.
CVE-2025-27034Crítica (9.8)0.40%—24 sept 2025
Memory corruption while selecting the PLMN from SOR failed list.
CVE-2025-27032Alta (7.8)0.08%—24 sept 2025
memory corruption while loading a PIL authenticated VM, when authenticated VM image is loaded without maintaining cache coherency.
CVE-2025-21483Crítica (9.8)0.40%—24 sept 2025
Memory corruption when the UE receives an RTP packet from the network, during the reassembly of NALUs.

🎯 Cómo se explota (técnicas ATT&CK)

  1. T1068 Exploitation for Privilege Escalation79
  2. T1059 Command and Scripting Interpreter76
  3. T1190 Exploit Public-Facing Application28
  4. T1499.004 Application or System Exploitation10
  5. T1005 Data from Local System9
  6. T1499 Endpoint Denial of Service4

Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.

Otros productos de Qualcomm