Qualcomm
Qualcomm Sa8775p Firmware: vulnerabilidades y CVE
Qualcomm Sa8775p Firmware tiene 263 vulnerabilidades publicadas, 30 de ellas en los últimos 12 meses. 14 son críticas y 3 figuran en el catálogo de explotación activa de CISA.
CVE263
Últimos 12 meses30
Críticas14
Explotadas activamente3
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
🔴 Explotadas activamente (CISA KEV)
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2023-33063 | Alta (7.8) | 0.69% | ⚠ Explotación activa | 5 dic 2023 | Memory corruption in DSP Services during a remote call from HLOS to DSP. |
| CVE-2023-33106 | Alta (7.8) | 0.92% | ⚠ Explotación activa | 5 dic 2023 | Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND. |
| CVE-2023-33107 | Alta (7.8) | 0.89% | ⚠ Explotación activa | 5 dic 2023 | Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call. |
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2025-47366 | Alta (7.8) | 0.10% | — | 2 feb 2026 | Cryptographic issue when a Trusted Zone with outdated code is triggered by a HLOS providing incorrect input. |
| CVE-2025-47364 | Alta (7.8) | 0.10% | — | 2 feb 2026 | Memory corruption while calculating offset from partition start point. |
| CVE-2025-47363 | Alta (7.8) | 0.10% | — | 2 feb 2026 | Memory corruption when calculating oversized partition sizes without proper checks. |
| CVE-2025-47393 | Alta (7.8) | 0.08% | — | 7 ene 2026 | Memory corruption when accessing resources in kernel driver. |
| CVE-2025-47348 | Alta (7.8) | 0.08% | — | 7 ene 2026 | Memory corruption while processing identity credential operations in the trusted application. |
| CVE-2025-47346 | Alta (7.8) | 0.08% | — | 7 ene 2026 | Memory corruption while processing a secure logging command in the trusted application. |
| CVE-2025-47345 | Alta (8.4) | 0.08% | — | 7 ene 2026 | Cryptographic issue may occur while encrypting license data. |
| CVE-2025-47339 | Alta (7.8) | 0.08% | — | 7 ene 2026 | Memory corruption while deinitializing a HDCP session. |
| CVE-2025-47334 | Media (6.7) | 0.08% | — | 7 ene 2026 | Memory corruption while processing shared command buffer packet between camera userspace and kernel. |
| CVE-2025-47333 | Media (6.6) | 0.08% | — | 7 ene 2026 | Memory corruption while handling buffer mapping operations in the cryptographic driver. |
| CVE-2025-47331 | Media (6.1) | 0.08% | — | 7 ene 2026 | Information disclosure while processing a firmware event. |
| CVE-2025-47330 | Media (5.5) | 0.07% | — | 7 ene 2026 | Transient DOS while parsing video packets received from the video firmware. |
| CVE-2025-47382 | Alta (7.8) | 0.09% | — | 18 dic 2025 | Memory corruption while loading an invalid firmware in boot loader. |
| CVE-2025-47372 | Alta (8.4) | 0.11% | — | 18 dic 2025 | Memory Corruption when a corrupted ELF image with an oversized file size is read into a buffer without authentication. |
| CVE-2025-47322 | Alta (7.8) | 0.10% | — | 18 dic 2025 | Memory corruption while handling IOCTL calls to set mode. |
| CVE-2025-47321 | Alta (7.8) | 0.08% | — | 18 dic 2025 | Memory corruption while copying packets received from unix clients. |
| CVE-2025-47320 | Alta (7.8) | 0.08% | — | 18 dic 2025 | Memory corruption while processing MFC channel configuration during music playback. |
| CVE-2025-47319 | Media (6.7) | 0.09% | — | 18 dic 2025 | Information disclosure while exposing internal TA-to-TA communication APIs to HLOS |
| CVE-2025-47323 | Alta (7.8) | 0.09% | — | 18 dic 2025 | Memory corruption while routing GPR packets between user and root when handling large data packet. |
| CVE-2025-47370 | Media (6.5) | 0.12% | — | 4 nov 2025 | Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan. |
| CVE-2025-47365 | Alta (7.8) | 0.08% | — | 4 nov 2025 | Memory corruption while processing large input data from a remote source via a communication interface. |
| CVE-2025-47362 | Media (6.1) | 0.08% | — | 4 nov 2025 | Information disclosure while processing message from client with invalid payload. |
| CVE-2025-47361 | Alta (7.8) | 0.08% | — | 4 nov 2025 | Memory corruption when triggering a subsystem crash with an out-of-range identifier. |
| CVE-2025-47360 | Alta (7.8) | 0.08% | — | 4 nov 2025 | Memory corruption while processing client message during device management. |
| CVE-2025-47357 | Alta (7.8) | 0.07% | — | 4 nov 2025 | Information Disclosure when a user-level driver performs QFPROM read or write operations on Fuse regions. |
| CVE-2025-47353 | Alta (7.8) | 0.08% | — | 4 nov 2025 | Memory corruption while processing request sent from GVM. |
| CVE-2025-27070 | Alta (7.8) | 0.06% | — | 4 nov 2025 | Memory corruption while performing encryption and decryption commands. |
| CVE-2025-47347 | Alta (7.8) | 0.09% | — | 9 oct 2025 | Memory corruption while processing control commands in the virtual memory management interface. |
| CVE-2025-27054 | Alta (7.8) | 0.09% | — | 9 oct 2025 | Memory corruption while processing a malformed license file during reboot. |
| CVE-2025-27053 | Alta (7.8) | 0.09% | — | 9 oct 2025 | Memory corruption during PlayReady APP usecase while processing TA commands. |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.