Qualcomm
Qualcomm Sdx80m Firmware: vulnerabilities and CVEs
Qualcomm Sdx80m Firmware has 21 published vulnerabilities, 1 of them in the last 12 months. 3 are rated critical and 0 are listed by CISA as actively exploited.
CVEs21
Last 12 months1
Critical3
Actively exploited0
All vulnerabilities in the catalogue →⭐ Follow this technology
Latest vulnerabilities
| CVE | Severity | EPSS | Active exploitation | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-47345 | High (8.4) | 0.08% | — | Jan 7, 2026 | Cryptographic issue may occur while encrypting license data. |
| CVE-2025-27034 | Critical (9.8) | 0.40% | — | Sep 24, 2025 | Memory corruption while selecting the PLMN from SOR failed list. |
| CVE-2025-27032 | High (7.8) | 0.08% | — | Sep 24, 2025 | memory corruption while loading a PIL authenticated VM, when authenticated VM image is loaded without maintaining cache coherency. |
| CVE-2025-21482 | High (7.1) | 0.08% | — | Sep 24, 2025 | Cryptographic issue while performing RSA PKCS padding decoding. |
| CVE-2025-21465 | Medium (6.5) | 0.09% | — | Aug 6, 2025 | Information disclosure while processing the hash segment in an MBN file. |
| CVE-2025-21464 | Medium (6.5) | 0.09% | — | Aug 6, 2025 | Information disclosure while reading data from an image using specified offset and size parameters. |
| CVE-2025-21450 | Critical (9.1) | 0.31% | — | Jul 8, 2025 | Cryptographic issue occurs due to use of insecure connection method while downloading. |
| CVE-2025-21422 | High (7.8) | 0.10% | — | Jul 8, 2025 | Cryptographic issue while processing crypto API calls, missing checks may lead to corrupted key usage or IV reuses. |
| CVE-2024-53009 | High (7.8) | 0.09% | — | Jul 8, 2025 | Memory corruption while operating the mailbox in Automotive. |
| CVE-2024-53010 | High (7.8) | 0.08% | — | Jun 3, 2025 | Memory corruption may occur while attaching VM when the HLOS retains access to VM. |
| CVE-2024-49847 | High (7.5) | 0.26% | — | May 6, 2025 | Transient DOS while processing of a registration acceptance OTA due to incorrect ciphering key data IE. |
| CVE-2024-49846 | Critical (9.1) | 0.29% | — | May 6, 2025 | Memory corruption while decoding of OTA messages from T3448 IE. |
| CVE-2024-49842 | High (7.8) | 0.09% | — | May 6, 2025 | Memory corruption during memory mapping into protected VM address space due to incorrect API restrictions. |
| CVE-2024-49841 | High (7.8) | 0.11% | — | May 6, 2025 | Memory corruption during memory assignment to headless peripheral VM due to incorrect error code handling. |
| CVE-2024-45549 | High (7.7) | 0.12% | — | Apr 7, 2025 | Information disclosure while creating MQ channels. |
| CVE-2024-43046 | Medium (5.5) | 0.11% | — | Apr 7, 2025 | There may be information disclosure during memory re-allocation in TZ Secure OS. |
| CVE-2024-33058 | High (7.5) | 0.09% | — | Apr 7, 2025 | Memory corruption while assigning memory from the source DDR memory(HLOS) to ADSP. |
| CVE-2024-43056 | Medium (6.5) | 0.11% | — | Mar 3, 2025 | Transient DOS during hypervisor virtual I/O operation in a virtual machine. |
| CVE-2024-38426 | Medium (5.3) | 0.27% | — | Mar 3, 2025 | While processing the authentication message in UE, improper authentication may lead to information disclosure. |
| CVE-2024-38420 | High (7.8) | 0.10% | — | Feb 3, 2025 | Memory corruption while configuring a Hypervisor based input virtual device. |
| CVE-2024-38404 | High (7.5) | 0.25% | — | Feb 3, 2025 | Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in modem. |
🎯 How it gets exploited (ATT&CK techniques)
Number of CVEs of this technology mapped to each exploitation or primary-impact technique.