« Volver al listado

Qualcomm

Qualcomm Qdu1000 Firmware: vulnerabilidades y CVE

Qualcomm Qdu1000 Firmware tiene 105 vulnerabilidades publicadas, 15 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.

CVE105
Últimos 12 meses15
Críticas0
Explotadas activamente0

Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología

Últimas vulnerabilidades

CVESeveridadEPSSExplotación activaPublicadaDescripción
CVE-2026-25292Alta (7.6)0.15%—4 ago 2026
Memory Corruption when processing untrusted user input in the fastboot command handler for audio framework configuration.
CVE-2026-21383Alta (7.1)0.10%—6 jul 2026
Cryptographic Issue when using a static initialization vector for AES-GCM key wrapping, which requires a unique value for each call to ensure security.
CVE-2026-24092Alta (7.2)0.10%—1 jun 2026
Memory Corruption when processing fastboot commands to set display mode.
CVE-2026-24091Alta (7.2)0.10%—1 jun 2026
Memory corruption while processing fastboot commands with improperly formatted input.
CVE-2026-24090Alta (7.1)0.06%—1 jun 2026
Cryptographic issue while processing partition table entries allows unauthorized modification of boot flow.
CVE-2026-24089Alta (7.2)0.10%—1 jun 2026
Memory corruption while processing fastboot commands with invalid input.
CVE-2026-24087Alta (7.2)0.10%—1 jun 2026
Memory corruption while processing fastboot OEM commands.
CVE-2026-24085Alta (7.2)0.10%—1 jun 2026
Memory Corruption when processing display command line information due to improper initialization of a variable.
CVE-2025-59606Alta (7.8)0.07%—1 jun 2026
Memory Corruption when writing to invalid memory locations occurs due to heap memory exhaustion during secure data initialization.
CVE-2025-59605Alta (7.8)0.07%—1 jun 2026
Memory Corruption when processing device identifier strings that exceed the expected maximum length.
CVE-2025-59604Alta (7.8)0.07%—1 jun 2026
Memory Corruption when running a memory copy operation due to invalid writes caused by a null pointer.
CVE-2026-24082Alta (7.8)0.07%—4 may 2026
Memory Corruption when copying data from a freed source while executing performance counter deselect operation.
CVE-2025-27070Alta (7.8)0.06%—4 nov 2025
Memory corruption while performing encryption and decryption commands.
CVE-2025-27054Alta (7.8)0.09%—9 oct 2025
Memory corruption while processing a malformed license file during reboot.
CVE-2025-27053Alta (7.8)0.09%—9 oct 2025
Memory corruption during PlayReady APP usecase while processing TA commands.
CVE-2025-27032Alta (7.8)0.08%—24 sept 2025
memory corruption while loading a PIL authenticated VM, when authenticated VM image is loaded without maintaining cache coherency.
CVE-2025-21481Alta (7.8)0.07%—24 sept 2025
Memory corruption while performing private key encryption in trusted application.
CVE-2025-21465Media (6.5)0.09%—6 ago 2025
Information disclosure while processing the hash segment in an MBN file.
CVE-2025-21464Media (6.5)0.09%—6 ago 2025
Information disclosure while reading data from an image using specified offset and size parameters.
CVE-2025-27061Alta (7.8)0.09%—8 jul 2025
Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmware.
CVE-2025-27043Alta (7.8)0.09%—8 jul 2025
Memory corruption while processing manipulated payload in video firmware.
CVE-2025-27042Alta (7.8)0.09%—8 jul 2025
Memory corruption while processing video packets received from video firmware.
CVE-2025-21433Media (5.5)0.08%—8 jul 2025
Transient DOS when importing a PKCS#8-encoded RSA private key with a zero-sized modulus.
CVE-2025-21432Alta (7.8)0.09%—8 jul 2025
Memory corruption while retrieving the CBOR data from TA.
CVE-2025-21422Alta (7.8)0.10%—8 jul 2025
Cryptographic issue while processing crypto API calls, missing checks may lead to corrupted key usage or IV reuses.
CVE-2024-53009Alta (7.8)0.09%—8 jul 2025
Memory corruption while operating the mailbox in Automotive.
CVE-2024-53010Alta (7.8)0.08%—3 jun 2025
Memory corruption may occur while attaching VM when the HLOS retains access to VM.
CVE-2024-49845Alta (7.8)0.11%—6 may 2025
Memory corruption during the FRS UDS generation process.
CVE-2024-49844Alta (7.8)0.11%—6 may 2025
Memory corruption while triggering commands in the PlayReady Trusted application.
CVE-2024-49842Alta (7.8)0.09%—6 may 2025
Memory corruption during memory mapping into protected VM address space due to incorrect API restrictions.

🎯 Cómo se explota (técnicas ATT&CK)

  1. T1068 Exploitation for Privilege Escalation38
  2. T1059 Command and Scripting Interpreter34
  3. T1091 Replication Through Removable Media6
  4. T1005 Data from Local System2
  5. T1552.004 Private Keys1
  6. T1556 Modify Authentication Process1

Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.

Otros productos de Qualcomm