Qualcomm
Qualcomm Snapdragon 480 5G Mobile Firmware: vulnerabilidades y CVE
Qualcomm Snapdragon 480 5G Mobile Firmware tiene 51 vulnerabilidades publicadas, 5 de ellas en los últimos 12 meses. 4 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE51
Últimos 12 meses5
Críticas4
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-24082 | Alta (7.8) | 0.07% | — | 4 may 2026 | Memory Corruption when copying data from a freed source while executing performance counter deselect operation. |
| CVE-2025-47404 | Alta (7.8) | 0.07% | — | 4 may 2026 | Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified. |
| CVE-2025-47398 | Alta (7.8) | 0.11% | — | 2 feb 2026 | Memory Corruption while deallocating graphics processing unit memory buffers due to improper handling of memory pointers. |
| CVE-2025-47397 | Alta (7.8) | 0.11% | — | 2 feb 2026 | Memory Corruption when initiating GPU memory mapping using scatter-gather lists due to unchecked IOMMU mapping errors. |
| CVE-2025-47366 | Alta (7.8) | 0.10% | — | 2 feb 2026 | Cryptographic issue when a Trusted Zone with outdated code is triggered by a HLOS providing incorrect input. |
| CVE-2025-27061 | Alta (7.8) | 0.09% | — | 8 jul 2025 | Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmware. |
| CVE-2025-27052 | Alta (7.8) | 0.09% | — | 8 jul 2025 | Memory corruption while processing data packets in diag received from Unix clients. |
| CVE-2025-27043 | Alta (7.8) | 0.09% | — | 8 jul 2025 | Memory corruption while processing manipulated payload in video firmware. |
| CVE-2025-27042 | Alta (7.8) | 0.09% | — | 8 jul 2025 | Memory corruption while processing video packets received from video firmware. |
| CVE-2025-21454 | Alta (7.5) | 0.22% | — | 8 jul 2025 | Transient DOS while processing received beacon frame. |
| CVE-2025-21450 | Crítica (9.1) | 0.31% | — | 8 jul 2025 | Cryptographic issue occurs due to use of insecure connection method while downloading. |
| CVE-2025-21449 | Alta (7.5) | 0.22% | — | 8 jul 2025 | Transient DOS may occur while processing malformed length field in SSID IEs. |
| CVE-2025-21433 | Media (5.5) | 0.08% | — | 8 jul 2025 | Transient DOS when importing a PKCS#8-encoded RSA private key with a zero-sized modulus. |
| CVE-2025-21432 | Alta (7.8) | 0.09% | — | 8 jul 2025 | Memory corruption while retrieving the CBOR data from TA. |
| CVE-2025-21427 | Alta (8.2) | 0.22% | — | 8 jul 2025 | Information disclosure while decoding this RTP packet Payload when UE receives the RTP packet from the network. |
| CVE-2025-21422 | Alta (7.8) | 0.10% | — | 8 jul 2025 | Cryptographic issue while processing crypto API calls, missing checks may lead to corrupted key usage or IV reuses. |
| CVE-2025-21468 | Alta (7.8) | 0.11% | — | 6 may 2025 | Memory corruption while reading response from FW, when buffer size is changed by FW while driver is using this size to write null character at the end of buffer. |
| CVE-2025-21453 | Alta (7.8) | 0.11% | — | 6 may 2025 | Memory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential failures occur. |
| CVE-2024-49835 | Alta (7.8) | 0.11% | — | 6 may 2025 | Memory corruption while reading secure file. |
| CVE-2024-49843 | Alta (7.8) | 0.11% | — | 3 feb 2025 | Memory corruption while processing IOCTL from user space to handle GPU AHB bus error. |
| CVE-2024-49838 | Alta (7.5) | 0.31% | — | 3 feb 2025 | Information disclosure while parsing the OCI IE with invalid length. |
| CVE-2024-49834 | Alta (7.8) | 0.11% | — | 3 feb 2025 | Memory corruption while power-up or power-down sequence of the camera sensor. |
| CVE-2024-45584 | Alta (7.8) | 0.10% | — | 3 feb 2025 | Memory corruption can occur when a compat IOCTL call is followed by a normal IOCTL call from userspace. |
| CVE-2024-45553 | Alta (7.8) | 0.13% | — | 6 ene 2025 | Memory corruption can occur when process-specific maps are added to the global list. If a map is removed from the global list while another thread is using it for a process-specific task, issues may arise. |
| CVE-2024-38402 | Alta (7.8) | 0.16% | — | 2 sept 2024 | Memory corruption while processing IOCTL call for getting group info. |
| CVE-2024-33060 | Alta (7.8) | 0.17% | — | 2 sept 2024 | Memory corruption when two threads try to map and unmap a single node simultaneously. |
| CVE-2024-33052 | Alta (7.8) | 0.13% | — | 2 sept 2024 | Memory corruption when user provides data for FM HCI command control operations. |
| CVE-2023-43555 | Alta (7.5) | 0.24% | — | 3 jun 2024 | Information disclosure in Video while parsing mp2 clip with invalid section length. |
| CVE-2023-43551 | Alta (7.5) | 0.26% | — | 3 jun 2024 | Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command. |
| CVE-2023-43542 | Alta (7.8) | 0.10% | — | 3 jun 2024 | Memory corruption while copying a keyblob`s material when the key material`s size is not accurately checked. |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.