Qualcomm
Qualcomm 215 Mobile Platform Firmware: vulnerabilidades y CVE
Qualcomm 215 Mobile Platform Firmware tiene 43 vulnerabilidades publicadas, 14 de ellas en los últimos 12 meses. 4 son críticas y 3 figuran en el catálogo de explotación activa de CISA.
CVE43
Últimos 12 meses14
Críticas4
Explotadas activamente3
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
🔴 Explotadas activamente (CISA KEV)
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-21385 | Alta (7.8) | 1.3% | ⚠ Explotación activa | 2 mar 2026 | Memory corruption while using alignments for memory allocation. |
| CVE-2023-33106 | Alta (7.8) | 0.75% | ⚠ Explotación activa | 5 dic 2023 | Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND. |
| CVE-2023-33107 | Alta (7.8) | 0.72% | ⚠ Explotación activa | 5 dic 2023 | Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call. |
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-24088 | Alta (8.2) | 0.07% | — | 1 jun 2026 | Cryptographic Issue while processing a specific partition which allows unauthorized write access to load a customized bootloader. |
| CVE-2025-59610 | Media (6.4) | 0.06% | — | 1 jun 2026 | Memory Corruption when processing IOCTL requests with mismatched API versions due to concurrent modification of user-space buffer. |
| CVE-2026-21385 | Alta (7.8) | 1.3% | ⚠ Explotación activa | 2 mar 2026 | Memory corruption while using alignments for memory allocation. |
| CVE-2025-47386 | Alta (7.8) | 0.07% | — | 2 mar 2026 | Memory Corruption while invoking IOCTL calls when concurrent access to shared buffer occurs. |
| CVE-2025-47383 | Alta (7.2) | 0.14% | — | 2 mar 2026 | Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE. |
| CVE-2025-47379 | Alta (7.8) | 0.07% | — | 2 mar 2026 | Memory Corruption when concurrent access to shared buffer occurs due to improper synchronization between assignment and deallocation of buffer resources. |
| CVE-2025-47376 | Alta (7.8) | 0.07% | — | 2 mar 2026 | Memory Corruption when concurrent access to shared buffer occurs during IOCTL calls. |
| CVE-2025-47375 | Alta (7.8) | 0.07% | — | 2 mar 2026 | Memory corruption while handling different IOCTL calls from the user-space simultaneously. |
| CVE-2025-47369 | Media (5.5) | 0.08% | — | 7 ene 2026 | Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID. |
| CVE-2025-47333 | Media (6.6) | 0.08% | — | 7 ene 2026 | Memory corruption while handling buffer mapping operations in the cryptographic driver. |
| CVE-2025-47331 | Media (6.1) | 0.08% | — | 7 ene 2026 | Information disclosure while processing a firmware event. |
| CVE-2025-47330 | Media (5.5) | 0.07% | — | 7 ene 2026 | Transient DOS while parsing video packets received from the video firmware. |
| CVE-2025-47320 | Alta (7.8) | 0.08% | — | 18 dic 2025 | Memory corruption while processing MFC channel configuration during music playback. |
| CVE-2025-27063 | Alta (7.8) | 0.10% | — | 18 dic 2025 | Memory corruption during video playback when video session open fails with time out error. |
| CVE-2025-21483 | Crítica (9.8) | 0.40% | — | 24 sept 2025 | Memory corruption when the UE receives an RTP packet from the network, during the reassembly of NALUs. |
| CVE-2025-21484 | Alta (8.2) | 0.26% | — | 24 sept 2025 | Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet. |
| CVE-2025-21482 | Alta (7.1) | 0.08% | — | 24 sept 2025 | Cryptographic issue while performing RSA PKCS padding decoding. |
| CVE-2025-21428 | Alta (7.5) | 0.25% | — | 7 abr 2025 | Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request from the AP to establish a TSpec session. |
| CVE-2024-45552 | Alta (8.2) | 0.26% | — | 7 abr 2025 | Information disclosure may occur during a video call if a device resets due to a non-conforming RTCP packet that doesn`t adhere to RFC standards. |
| CVE-2024-23368 | Alta (7.8) | 0.10% | — | 1 jul 2024 | Memory corruption when allocating and accessing an entry in an SMEM partition. |
| CVE-2023-43518 | Crítica (9.8) | 0.26% | — | 6 feb 2024 | Memory corruption in video while parsing invalid mp2 clip. |
| CVE-2023-43513 | Alta (7.8) | 0.11% | — | 6 feb 2024 | Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element. |
| CVE-2023-33120 | Alta (7.8) | 0.11% | — | 2 ene 2024 | Memory corruption in Audio when memory map command is executed consecutively in ADSP. |
| CVE-2023-33118 | Alta (7.8) | 0.11% | — | 2 ene 2024 | Memory corruption while processing Listen Sound Model client payload buffer when there is a request for Listen Sound session get parameter from ST HAL. |
| CVE-2023-33117 | Alta (7.8) | 0.11% | — | 2 ene 2024 | Memory corruption when HLOS allocates the response payload buffer to copy the data received from ADSP in response to AVCS_LOAD_MODULE command. |
| CVE-2023-33094 | Alta (7.8) | 0.12% | — | 2 ene 2024 | Memory corruption while running VK synchronization with KASAN enabled. |
| CVE-2023-33033 | Alta (7.8) | 0.12% | — | 2 ene 2024 | Memory corruption in Audio during playback with speaker protection. |
| CVE-2023-33030 | Alta (7.8) | 0.12% | — | 2 ene 2024 | Memory corruption in HLOS while running playready use-case. |
| CVE-2023-33107 | Alta (7.8) | 0.72% | ⚠ Explotación activa | 5 dic 2023 | Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call. |
| CVE-2023-33106 | Alta (7.8) | 0.75% | ⚠ Explotación activa | 5 dic 2023 | Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND. |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.