Qualcomm
Qualcomm Sd626 Firmware: vulnerabilidades y CVE
Qualcomm Sd626 Firmware tiene 91 vulnerabilidades publicadas, 5 de ellas en los últimos 12 meses. 6 son críticas y 3 figuran en el catálogo de explotación activa de CISA.
CVE91
Últimos 12 meses5
Críticas6
Explotadas activamente3
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
🔴 Explotadas activamente (CISA KEV)
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-21385 | Alta (7.8) | 1.3% | ⚠ Explotación activa | 2 mar 2026 | Memory corruption while using alignments for memory allocation. |
| CVE-2023-33063 | Alta (7.8) | 0.69% | ⚠ Explotación activa | 5 dic 2023 | Memory corruption in DSP Services during a remote call from HLOS to DSP. |
| CVE-2023-33107 | Alta (7.8) | 0.89% | ⚠ Explotación activa | 5 dic 2023 | Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call. |
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-24088 | Alta (8.2) | 0.07% | — | 1 jun 2026 | Cryptographic Issue while processing a specific partition which allows unauthorized write access to load a customized bootloader. |
| CVE-2026-21385 | Alta (7.8) | 1.3% | ⚠ Explotación activa | 2 mar 2026 | Memory corruption while using alignments for memory allocation. |
| CVE-2025-47383 | Alta (7.2) | 0.14% | — | 2 mar 2026 | Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE. |
| CVE-2025-47320 | Alta (7.8) | 0.08% | — | 18 dic 2025 | Memory corruption while processing MFC channel configuration during music playback. |
| CVE-2025-27053 | Alta (7.8) | 0.09% | — | 9 oct 2025 | Memory corruption during PlayReady APP usecase while processing TA commands. |
| CVE-2025-21483 | Crítica (9.8) | 0.40% | — | 24 sept 2025 | Memory corruption when the UE receives an RTP packet from the network, during the reassembly of NALUs. |
| CVE-2025-21487 | Alta (8.2) | 0.26% | — | 24 sept 2025 | Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length. |
| CVE-2025-21484 | Alta (8.2) | 0.26% | — | 24 sept 2025 | Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet. |
| CVE-2025-21482 | Alta (7.1) | 0.08% | — | 24 sept 2025 | Cryptographic issue while performing RSA PKCS padding decoding. |
| CVE-2025-21433 | Media (5.5) | 0.08% | — | 8 jul 2025 | Transient DOS when importing a PKCS#8-encoded RSA private key with a zero-sized modulus. |
| CVE-2025-21427 | Alta (8.2) | 0.22% | — | 8 jul 2025 | Information disclosure while decoding this RTP packet Payload when UE receives the RTP packet from the network. |
| CVE-2024-53026 | Alta (8.2) | 0.30% | — | 3 jun 2025 | Information disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call. |
| CVE-2024-53021 | Alta (8.2) | 0.24% | — | 3 jun 2025 | Information disclosure may occur while processing goodbye RTCP packet from network. |
| CVE-2024-53020 | Alta (8.2) | 0.24% | — | 3 jun 2025 | Information disclosure may occur while decoding the RTP packet with invalid header extension from network. |
| CVE-2025-21453 | Alta (7.8) | 0.11% | — | 6 may 2025 | Memory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential failures occur. |
| CVE-2025-21429 | Alta (7.5) | 0.26% | — | 7 abr 2025 | Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request. |
| CVE-2025-21428 | Alta (7.5) | 0.25% | — | 7 abr 2025 | Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request from the AP to establish a TSpec session. |
| CVE-2024-45552 | Alta (8.2) | 0.26% | — | 7 abr 2025 | Information disclosure may occur during a video call if a device resets due to a non-conforming RTCP packet that doesn`t adhere to RFC standards. |
| CVE-2016-10408 | Alta (7.8) | 0.10% | — | 26 nov 2024 | QSEE will randomly experience a fatal error during execution due to speculative instruction fetches from device memory. Device memory is not valid executable memory. |
| CVE-2024-38423 | Alta (7.8) | 0.10% | — | 4 nov 2024 | Memory corruption while processing GPU page table switch. |
| CVE-2024-38422 | Alta (7.8) | 0.10% | — | 4 nov 2024 | Memory corruption while processing voice packet with arbitrary data received from ADSP. |
| CVE-2024-33060 | Alta (7.8) | 0.17% | — | 2 sept 2024 | Memory corruption when two threads try to map and unmap a single node simultaneously. |
| CVE-2024-33052 | Alta (7.8) | 0.13% | — | 2 sept 2024 | Memory corruption when user provides data for FM HCI command control operations. |
| CVE-2024-33043 | Media (5.5) | 0.09% | — | 2 sept 2024 | Transient DOS while handling PS event when Program Service name length offset value is set to 255. |
| CVE-2024-33042 | Alta (7.8) | 0.13% | — | 2 sept 2024 | Memory corruption when Alternative Frequency offset value is set to 255. |
| CVE-2024-23357 | Media (5.5) | 0.09% | — | 5 ago 2024 | Transient DOS while importing a PKCS#8-encoded RSA key with zero bytes modulus. |
| CVE-2024-23353 | Alta (7.5) | 0.35% | — | 5 ago 2024 | Transient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI. |
| CVE-2024-21461 | Alta (7.8) | 0.10% | — | 1 jul 2024 | Memory corruption while performing finish HMAC operation when context is freed by keymaster. |
| CVE-2023-43551 | Alta (7.5) | 0.26% | — | 3 jun 2024 | Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command. |
| CVE-2024-21468 | Alta (7.8) | 0.11% | — | 1 abr 2024 | Memory corruption when there is failed unmap operation in GPU. |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.