Qualcomm
Qualcomm Snapdragon 4 GEN 2 Mobile Firmware: vulnerabilidades y CVE
Qualcomm Snapdragon 4 GEN 2 Mobile Firmware tiene 48 vulnerabilidades publicadas, 6 de ellas en los últimos 12 meses. 4 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE48
Últimos 12 meses6
Críticas4
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2025-47407 | Alta (7) | 0.05% | — | 4 may 2026 | Memory corruption while creating a process on the digital signal processor due to allocation failure at the kernel level. |
| CVE-2025-47403 | Alta (7.5) | 0.22% | — | 4 may 2026 | Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming. |
| CVE-2025-47401 | Alta (7.5) | 0.22% | — | 4 may 2026 | Transient DOS when processing target power rate tables during channel configuration. |
| CVE-2025-47398 | Alta (7.8) | 0.11% | — | 2 feb 2026 | Memory Corruption while deallocating graphics processing unit memory buffers due to improper handling of memory pointers. |
| CVE-2025-47397 | Alta (7.8) | 0.11% | — | 2 feb 2026 | Memory Corruption when initiating GPU memory mapping using scatter-gather lists due to unchecked IOMMU mapping errors. |
| CVE-2025-47366 | Alta (7.8) | 0.10% | — | 2 feb 2026 | Cryptographic issue when a Trusted Zone with outdated code is triggered by a HLOS providing incorrect input. |
| CVE-2025-27061 | Alta (7.8) | 0.09% | — | 8 jul 2025 | Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmware. |
| CVE-2025-27042 | Alta (7.8) | 0.09% | — | 8 jul 2025 | Memory corruption while processing video packets received from video firmware. |
| CVE-2025-21454 | Alta (7.5) | 0.22% | — | 8 jul 2025 | Transient DOS while processing received beacon frame. |
| CVE-2025-21449 | Alta (7.5) | 0.22% | — | 8 jul 2025 | Transient DOS may occur while processing malformed length field in SSID IEs. |
| CVE-2025-21433 | Media (5.5) | 0.08% | — | 8 jul 2025 | Transient DOS when importing a PKCS#8-encoded RSA private key with a zero-sized modulus. |
| CVE-2025-21432 | Alta (7.8) | 0.09% | — | 8 jul 2025 | Memory corruption while retrieving the CBOR data from TA. |
| CVE-2025-21427 | Alta (8.2) | 0.22% | — | 8 jul 2025 | Information disclosure while decoding this RTP packet Payload when UE receives the RTP packet from the network. |
| CVE-2025-21422 | Alta (7.8) | 0.10% | — | 8 jul 2025 | Cryptographic issue while processing crypto API calls, missing checks may lead to corrupted key usage or IV reuses. |
| CVE-2025-21468 | Alta (7.8) | 0.11% | — | 6 may 2025 | Memory corruption while reading response from FW, when buffer size is changed by FW while driver is using this size to write null character at the end of buffer. |
| CVE-2025-21453 | Alta (7.8) | 0.11% | — | 6 may 2025 | Memory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential failures occur. |
| CVE-2024-49838 | Alta (7.5) | 0.31% | — | 3 feb 2025 | Information disclosure while parsing the OCI IE with invalid length. |
| CVE-2024-49834 | Alta (7.8) | 0.11% | — | 3 feb 2025 | Memory corruption while power-up or power-down sequence of the camera sensor. |
| CVE-2024-49833 | Alta (7.8) | 0.10% | — | 3 feb 2025 | Memory corruption can occur in the camera when an invalid CID is used. |
| CVE-2024-45553 | Alta (7.8) | 0.13% | — | 6 ene 2025 | Memory corruption can occur when process-specific maps are added to the global list. If a map is removed from the global list while another thread is using it for a process-specific task, issues may arise. |
| CVE-2024-38402 | Alta (7.8) | 0.16% | — | 2 sept 2024 | Memory corruption while processing IOCTL call for getting group info. |
| CVE-2024-33060 | Alta (7.8) | 0.17% | — | 2 sept 2024 | Memory corruption when two threads try to map and unmap a single node simultaneously. |
| CVE-2024-33052 | Alta (7.8) | 0.13% | — | 2 sept 2024 | Memory corruption when user provides data for FM HCI command control operations. |
| CVE-2023-43556 | Alta (8.8) | 0.10% | — | 3 jun 2024 | Memory corruption in Hypervisor when platform information mentioned is not aligned. |
| CVE-2023-43555 | Alta (7.5) | 0.24% | — | 3 jun 2024 | Information disclosure in Video while parsing mp2 clip with invalid section length. |
| CVE-2023-43542 | Alta (7.8) | 0.10% | — | 3 jun 2024 | Memory corruption while copying a keyblob`s material when the key material`s size is not accurately checked. |
| CVE-2024-23354 | Alta (7.8) | 0.16% | — | 6 may 2024 | Memory corruption when the IOCTL call is interrupted by a signal. |
| CVE-2024-23351 | Alta (7.8) | 0.14% | — | 6 may 2024 | Memory corruption as GPU registers beyond the last protected range can be accessed through LPAC submissions. |
| CVE-2024-21480 | Crítica (9.8) | 0.29% | — | 6 may 2024 | Memory corruption while playing audio file having large-sized input buffer. |
| CVE-2024-21475 | Alta (7.8) | 0.11% | — | 6 may 2024 | Memory corruption when the payload received from firmware is not as per the expected protocol size. |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.