Qualcomm
Qualcomm Snapdragon 8 GEN 3 Mobile Firmware: vulnerabilidades y CVE
Qualcomm Snapdragon 8 GEN 3 Mobile Firmware tiene 90 vulnerabilidades publicadas, 8 de ellas en los últimos 12 meses. 6 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE90
Últimos 12 meses8
Críticas6
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-24082 | Alta (7.8) | 0.07% | — | 4 may 2026 | Memory Corruption when copying data from a freed source while executing performance counter deselect operation. |
| CVE-2025-47404 | Alta (7.8) | 0.07% | — | 4 may 2026 | Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified. |
| CVE-2025-47403 | Alta (7.5) | 0.22% | — | 4 may 2026 | Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming. |
| CVE-2025-47401 | Alta (7.5) | 0.22% | — | 4 may 2026 | Transient DOS when processing target power rate tables during channel configuration. |
| CVE-2025-47402 | Media (6.5) | 0.16% | — | 2 feb 2026 | Transient DOS when processing a received frame with an excessively large authentication information element. |
| CVE-2025-47398 | Alta (7.8) | 0.11% | — | 2 feb 2026 | Memory Corruption while deallocating graphics processing unit memory buffers due to improper handling of memory pointers. |
| CVE-2025-47397 | Alta (7.8) | 0.11% | — | 2 feb 2026 | Memory Corruption when initiating GPU memory mapping using scatter-gather lists due to unchecked IOMMU mapping errors. |
| CVE-2025-47366 | Alta (7.8) | 0.10% | — | 2 feb 2026 | Cryptographic issue when a Trusted Zone with outdated code is triggered by a HLOS providing incorrect input. |
| CVE-2025-27061 | Alta (7.8) | 0.09% | — | 8 jul 2025 | Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmware. |
| CVE-2025-27057 | Alta (7.5) | 0.23% | — | 8 jul 2025 | Transient DOS while handling beacon frames with invalid IE header length. |
| CVE-2025-27056 | Alta (7.8) | 0.09% | — | 8 jul 2025 | Memory corruption during sub-system restart while processing clean-up to free up resources. |
| CVE-2025-27052 | Alta (7.8) | 0.09% | — | 8 jul 2025 | Memory corruption while processing data packets in diag received from Unix clients. |
| CVE-2025-27043 | Alta (7.8) | 0.09% | — | 8 jul 2025 | Memory corruption while processing manipulated payload in video firmware. |
| CVE-2025-27042 | Alta (7.8) | 0.09% | — | 8 jul 2025 | Memory corruption while processing video packets received from video firmware. |
| CVE-2025-21454 | Alta (7.5) | 0.22% | — | 8 jul 2025 | Transient DOS while processing received beacon frame. |
| CVE-2025-21450 | Crítica (9.1) | 0.31% | — | 8 jul 2025 | Cryptographic issue occurs due to use of insecure connection method while downloading. |
| CVE-2025-21449 | Alta (7.5) | 0.22% | — | 8 jul 2025 | Transient DOS may occur while processing malformed length field in SSID IEs. |
| CVE-2025-21446 | Alta (7.5) | 0.22% | — | 8 jul 2025 | Transient DOS may occur when processing vendor-specific information elements while parsing a WLAN frame for BTM requests. |
| CVE-2025-21433 | Media (5.5) | 0.08% | — | 8 jul 2025 | Transient DOS when importing a PKCS#8-encoded RSA private key with a zero-sized modulus. |
| CVE-2025-21432 | Alta (7.8) | 0.09% | — | 8 jul 2025 | Memory corruption while retrieving the CBOR data from TA. |
| CVE-2025-21427 | Alta (8.2) | 0.22% | — | 8 jul 2025 | Information disclosure while decoding this RTP packet Payload when UE receives the RTP packet from the network. |
| CVE-2025-21422 | Alta (7.8) | 0.10% | — | 8 jul 2025 | Cryptographic issue while processing crypto API calls, missing checks may lead to corrupted key usage or IV reuses. |
| CVE-2024-53009 | Alta (7.8) | 0.09% | — | 8 jul 2025 | Memory corruption while operating the mailbox in Automotive. |
| CVE-2025-21468 | Alta (7.8) | 0.11% | — | 6 may 2025 | Memory corruption while reading response from FW, when buffer size is changed by FW while driver is using this size to write null character at the end of buffer. |
| CVE-2025-21467 | Alta (7.8) | 0.11% | — | 6 may 2025 | Memory corruption while reading the FW response from the shared queue. |
| CVE-2025-21459 | Alta (7.5) | 0.34% | — | 6 may 2025 | Transient DOS while parsing per STA profile in ML IE. |
| CVE-2025-21453 | Alta (7.8) | 0.11% | — | 6 may 2025 | Memory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential failures occur. |
| CVE-2024-49847 | Alta (7.5) | 0.26% | — | 6 may 2025 | Transient DOS while processing of a registration acceptance OTA due to incorrect ciphering key data IE. |
| CVE-2024-49845 | Alta (7.8) | 0.11% | — | 6 may 2025 | Memory corruption during the FRS UDS generation process. |
| CVE-2024-49844 | Alta (7.8) | 0.11% | — | 6 may 2025 | Memory corruption while triggering commands in the PlayReady Trusted application. |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.