Qualcomm
Qualcomm Sdx57m Firmware: vulnerabilidades y CVE
Qualcomm Sdx57m Firmware tiene 133 vulnerabilidades publicadas, 5 de ellas en los últimos 12 meses. 6 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE133
Últimos 12 meses5
Críticas6
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-24084 | Alta (7.5) | 0.25% | — | 4 ago 2026 | Weak configuration when UE does not verify the consistency of its additional security capabilities with the replayed capabilities. |
| CVE-2026-24078 | Media (6.5) | 0.17% | — | 4 ago 2026 | Information Disclosure when IPSec negotiation fails or is not established properly during NG-eCall SIP signaling. |
| CVE-2025-47392 | Alta (8.8) | 0.17% | — | 6 abr 2026 | Memory corruption when decoding corrupted satellite data files with invalid signature offsets. |
| CVE-2025-47384 | Media (6.5) | 0.11% | — | 2 mar 2026 | Transient DOS when MAC configures config id greater than supported maximum value. |
| CVE-2025-47383 | Alta (7.2) | 0.14% | — | 2 mar 2026 | Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE. |
| CVE-2025-27034 | Crítica (9.8) | 0.40% | — | 24 sept 2025 | Memory corruption while selecting the PLMN from SOR failed list. |
| CVE-2025-27032 | Alta (7.8) | 0.08% | — | 24 sept 2025 | memory corruption while loading a PIL authenticated VM, when authenticated VM image is loaded without maintaining cache coherency. |
| CVE-2025-21482 | Alta (7.1) | 0.08% | — | 24 sept 2025 | Cryptographic issue while performing RSA PKCS padding decoding. |
| CVE-2025-21477 | Alta (7.5) | 0.21% | — | 6 ago 2025 | Transient DOS while processing CCCH data when NW sends data with invalid length. |
| CVE-2025-21465 | Media (6.5) | 0.09% | — | 6 ago 2025 | Information disclosure while processing the hash segment in an MBN file. |
| CVE-2025-21464 | Media (6.5) | 0.09% | — | 6 ago 2025 | Information disclosure while reading data from an image using specified offset and size parameters. |
| CVE-2025-21452 | Alta (7.5) | 0.21% | — | 6 ago 2025 | Transient DOS while processing a random-access response (RAR) with an invalid PDU length on LTE network. |
| CVE-2025-21422 | Alta (7.8) | 0.10% | — | 8 jul 2025 | Cryptographic issue while processing crypto API calls, missing checks may lead to corrupted key usage or IV reuses. |
| CVE-2024-53009 | Alta (7.8) | 0.09% | — | 8 jul 2025 | Memory corruption while operating the mailbox in Automotive. |
| CVE-2024-53010 | Alta (7.8) | 0.08% | — | 3 jun 2025 | Memory corruption may occur while attaching VM when the HLOS retains access to VM. |
| CVE-2024-49842 | Alta (7.8) | 0.09% | — | 6 may 2025 | Memory corruption during memory mapping into protected VM address space due to incorrect API restrictions. |
| CVE-2024-49841 | Alta (7.8) | 0.11% | — | 6 may 2025 | Memory corruption during memory assignment to headless peripheral VM due to incorrect error code handling. |
| CVE-2024-43046 | Media (5.5) | 0.11% | — | 7 abr 2025 | There may be information disclosure during memory re-allocation in TZ Secure OS. |
| CVE-2024-33058 | Alta (7.5) | 0.09% | — | 7 abr 2025 | Memory corruption while assigning memory from the source DDR memory(HLOS) to ADSP. |
| CVE-2024-43056 | Media (6.5) | 0.11% | — | 3 mar 2025 | Transient DOS during hypervisor virtual I/O operation in a virtual machine. |
| CVE-2024-38426 | Media (5.3) | 0.27% | — | 3 mar 2025 | While processing the authentication message in UE, improper authentication may lead to information disclosure. |
| CVE-2024-38420 | Alta (7.8) | 0.10% | — | 3 feb 2025 | Memory corruption while configuring a Hypervisor based input virtual device. |
| CVE-2024-33056 | Alta (7.8) | 0.10% | — | 2 dic 2024 | Memory corruption when allocating and accessing an entry in an SMEM partition continuously. |
| CVE-2024-33044 | Alta (7.8) | 0.10% | — | 2 dic 2024 | Memory corruption while Configuring the SMR/S2CR register in Bypass mode. |
| CVE-2024-23385 | Media (6.5) | 0.25% | — | 4 nov 2024 | Transient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at UE. |
| CVE-2024-33016 | Media (6.8) | 0.15% | — | 2 sept 2024 | memory corruption when an invalid firehose patch command is invoked. |
| CVE-2024-23362 | Alta (7.1) | 0.12% | — | 2 sept 2024 | Cryptographic issue while parsing RSA keys in COBR format. |
| CVE-2024-23359 | Alta (8.2) | 0.26% | — | 2 sept 2024 | Information disclosure while decoding Tracking Area Update Accept or Attach Accept message received from network. |
| CVE-2024-23353 | Alta (7.5) | 0.35% | — | 5 ago 2024 | Transient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI. |
| CVE-2024-23352 | Alta (7.5) | 0.35% | — | 5 ago 2024 | Transient DOS when NAS receives ODAC criteria of length 1 and type 1 in registration accept OTA. |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.