« Volver al listado

Qualcomm

Qualcomm Snapdragon 855 Mobile Firmware: vulnerabilidades y CVE

Qualcomm Snapdragon 855 Mobile Firmware tiene 38 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 1 son críticas y 0 figuran en el catálogo de explotación activa de CISA.

CVE38
Últimos 12 meses0
Críticas1
Explotadas activamente0

Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología

Últimas vulnerabilidades

CVESeveridadEPSSExplotación activaPublicadaDescripción
CVE-2025-27061Alta (7.8)0.09%—8 jul 2025
Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmware.
CVE-2025-27042Alta (7.8)0.09%—8 jul 2025
Memory corruption while processing video packets received from video firmware.
CVE-2025-21454Alta (7.5)0.22%—8 jul 2025
Transient DOS while processing received beacon frame.
CVE-2025-21449Alta (7.5)0.22%—8 jul 2025
Transient DOS may occur while processing malformed length field in SSID IEs.
CVE-2025-21433Media (5.5)0.08%—8 jul 2025
Transient DOS when importing a PKCS#8-encoded RSA private key with a zero-sized modulus.
CVE-2025-21432Alta (7.8)0.09%—8 jul 2025
Memory corruption while retrieving the CBOR data from TA.
CVE-2025-21427Alta (8.2)0.22%—8 jul 2025
Information disclosure while decoding this RTP packet Payload when UE receives the RTP packet from the network.
CVE-2025-21422Alta (7.8)0.10%—8 jul 2025
Cryptographic issue while processing crypto API calls, missing checks may lead to corrupted key usage or IV reuses.
CVE-2024-53009Alta (7.8)0.09%—8 jul 2025
Memory corruption while operating the mailbox in Automotive.
CVE-2025-21453Alta (7.8)0.11%—6 may 2025
Memory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential failures occur.
CVE-2024-49842Alta (7.8)0.09%—6 may 2025
Memory corruption during memory mapping into protected VM address space due to incorrect API restrictions.
CVE-2024-49841Alta (7.8)0.11%—6 may 2025
Memory corruption during memory assignment to headless peripheral VM due to incorrect error code handling.
CVE-2024-49835Alta (7.8)0.11%—6 may 2025
Memory corruption while reading secure file.
CVE-2024-38420Alta (7.8)0.10%—3 feb 2025
Memory corruption while configuring a Hypervisor based input virtual device.
CVE-2024-33060Alta (7.8)0.17%—2 sept 2024
Memory corruption when two threads try to map and unmap a single node simultaneously.
CVE-2024-33052Alta (7.8)0.13%—2 sept 2024
Memory corruption when user provides data for FM HCI command control operations.
CVE-2023-43555Alta (7.5)0.24%—3 jun 2024
Information disclosure in Video while parsing mp2 clip with invalid section length.
CVE-2023-43551Alta (7.5)0.26%—3 jun 2024
Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command.
CVE-2023-43542Alta (7.8)0.10%—3 jun 2024
Memory corruption while copying a keyblob`s material when the key material`s size is not accurately checked.
CVE-2023-43538Alta (7.8)0.10%—3 jun 2024
Memory corruption in TZ Secure OS while Tunnel Invoke Manager initialization.
CVE-2024-21477Alta (7.5)0.32%—6 may 2024
Transient DOS while parsing a protected 802.11az Fine Time Measurement (FTM) frame.
CVE-2024-21475Alta (7.8)0.11%—6 may 2024
Memory corruption when the payload received from firmware is not as per the expected protocol size.
CVE-2023-43530Alta (7.8)0.11%—6 may 2024
Memory corruption in HLOS while checking for the storage type.
CVE-2023-43529Alta (7.5)0.32%—6 may 2024
Transient DOS while processing IKEv2 Informational request messages, when a malformed fragment packet is received.
CVE-2023-33119Alta (7)0.08%—6 may 2024
Memory corruption while loading a VM from a signed VM image that is not coherent in the processor cache.
CVE-2024-21468Alta (7.8)0.11%—1 abr 2024
Memory corruption when there is failed unmap operation in GPU.
CVE-2023-33115Alta (7.8)0.11%—1 abr 2024
Memory corruption while processing buffer initialization, when trusted report for certain report types are generated.
CVE-2023-33101Alta (7.5)0.32%—1 abr 2024
Transient DOS while processing DL NAS TRANSPORT message with payload length 0.
CVE-2023-33099Alta (7.5)0.32%—1 abr 2024
Transient DOS while processing SMS container of non-standard size received in DL NAS transport in NR.
CVE-2023-33023Alta (7.8)0.11%—1 abr 2024
Memory corruption while processing finish_sign command to pass a rsp buffer.

🎯 Cómo se explota (técnicas ATT&CK)

  1. T1068 Exploitation for Privilege Escalation10
  2. T1059 Command and Scripting Interpreter9
  3. T1190 Exploit Public-Facing Application3
  4. T1005 Data from Local System2
  5. T1499.004 Application or System Exploitation2

Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.

Otros productos de Qualcomm