Qualcomm
Qualcomm Sm8475 Firmware: vulnerabilidades y CVE
Qualcomm Sm8475 Firmware tiene 83 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 13 son críticas y 1 figuran en el catálogo de explotación activa de CISA.
CVE83
Últimos 12 meses0
Críticas13
Explotadas activamente1
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
🔴 Explotadas activamente (CISA KEV)
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2023-33063 | Alta (7.8) | 0.69% | ⚠ Explotación activa | 5 dic 2023 | Memory corruption in DSP Services during a remote call from HLOS to DSP. |
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2024-53011 | Alta (7.9) | 0.12% | — | 3 mar 2025 | Information disclosure may occur due to improper permission and access controls to Video Analytics engine. |
| CVE-2023-33080 | Alta (7.5) | 0.34% | — | 5 dic 2023 | Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame. |
| CVE-2023-33063 | Alta (7.8) | 0.69% | ⚠ Explotación activa | 5 dic 2023 | Memory corruption in DSP Services during a remote call from HLOS to DSP. |
| CVE-2023-33054 | Crítica (9.1) | 0.36% | — | 5 dic 2023 | Cryptographic issue in GPS HLOS Driver while downloading Qualcomm GNSS assistance data. |
| CVE-2023-33044 | Alta (7.5) | 0.52% | — | 5 dic 2023 | Transient DOS in Data modem while handling TLB control messages from the Network. |
| CVE-2023-33043 | Alta (7.5) | 0.52% | — | 5 dic 2023 | Transient DOS in Modem when a Beam switch request is made with a non-configured BWP. |
| CVE-2023-33042 | Alta (7.5) | 0.61% | — | 5 dic 2023 | Transient DOS in Modem after RRC Setup message is received. |
| CVE-2023-33018 | Alta (7.8) | 0.11% | — | 5 dic 2023 | Memory corruption while using the UIM diag command to get the operators name. |
| CVE-2023-33017 | Alta (7.8) | 0.16% | — | 5 dic 2023 | Memory corruption in Boot while running a ListVars test in UEFI Menu during boot. |
| CVE-2023-33074 | Alta (7.8) | 0.14% | — | 7 nov 2023 | Memory corruption in Audio when SSR event is triggered after music playback is stopped. |
| CVE-2023-33047 | Alta (7.5) | 0.43% | — | 7 nov 2023 | Transient DOS in WLAN Firmware while parsing no-inherit IES. |
| CVE-2023-33029 | Alta (7.8) | 0.11% | — | 3 oct 2023 | Memory corruption in DSP Service during a remote call from HLOS to DSP. |
| CVE-2023-33028 | Crítica (9.8) | 0.54% | — | 3 oct 2023 | Memory corruption in WLAN Firmware while doing a memory copy of pmk cache. |
| CVE-2023-33027 | Alta (7.5) | 0.32% | — | 3 oct 2023 | Transient DOS in WLAN Firmware while parsing rsn ies. |
| CVE-2023-33026 | Alta (7.5) | 0.32% | — | 3 oct 2023 | Transient DOS in WLAN Firmware while parsing a NAN management frame. |
| CVE-2023-28540 | Alta (7.5) | 0.43% | — | 3 oct 2023 | Cryptographic issue in Data Modem due to improper authentication during TLS handshake. |
| CVE-2022-33275 | Alta (7.8) | 0.12% | — | 5 sept 2023 | Memory corruption due to improper validation of array index in WLAN HAL when received lm_itemNum is out of range. |
| CVE-2023-28555 | Alta (7.5) | 0.41% | — | 8 ago 2023 | Transient DOS in Audio while remapping channel buffer in media codec decoding. |
| CVE-2023-21670 | Alta (7.8) | 0.12% | — | 6 jun 2023 | Memory Corruption in GPU Subsystem due to arbitrary command execution from GPU in privileged mode. |
| CVE-2023-21661 | Alta (7.5) | 0.38% | — | 6 jun 2023 | Transient DOS while parsing WLAN beacon or probe-response frame. |
| CVE-2023-21659 | Alta (7.5) | 0.38% | — | 6 jun 2023 | Transient DOS in WLAN Firmware while processing frames with missing header fields. |
| CVE-2023-21658 | Alta (7.5) | 0.38% | — | 6 jun 2023 | Transient DOS in WLAN Firmware while processing the received beacon or probe response frame. |
| CVE-2023-21656 | Alta (7.8) | 0.12% | — | 6 jun 2023 | Memory corruption in WLAN HOST while receiving an WMI event from firmware. |
| CVE-2022-40536 | Alta (7.5) | 0.40% | — | 6 jun 2023 | Transient DOS due to improper authentication in modem while receiving plain TLB OTA request message from network. |
| CVE-2022-40533 | Media (5.5) | 0.10% | — | 6 jun 2023 | Transient DOS due to untrusted Pointer Dereference in core while sending USB QMI request. |
| CVE-2022-40529 | Alta (7.8) | 0.10% | — | 6 jun 2023 | Memory corruption due to improper access control in kernel while processing a mapping request from root process. |
| CVE-2022-40521 | Alta (7.5) | 0.35% | — | 6 jun 2023 | Transient DOS due to improper authorization in Modem |
| CVE-2022-40507 | Alta (7.8) | 1.3% | — | 6 jun 2023 | Memory corruption due to double free in Core while mapping HLOS address to the list. |
| CVE-2022-33264 | Alta (7.8) | 0.11% | — | 6 jun 2023 | Memory corruption in modem due to stack based buffer overflow while parsing OTASP Key Generation Request Message. |
| CVE-2022-33263 | Alta (7.8) | 0.11% | — | 6 jun 2023 | Memory corruption due to use after free in Core when multiple DCI clients register and deregister. |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.