Qualcomm
Qualcomm Snapdragon 8C Compute Platform Firmware: vulnerabilidades y CVE
Qualcomm Snapdragon 8C Compute Platform Firmware tiene 46 vulnerabilidades publicadas, 13 de ellas en los últimos 12 meses. 1 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE46
Últimos 12 meses13
Críticas1
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-25275 | Alta (7.5) | 0.19% | — | 17 sept 2026 | Transient DOS when processing authentication frames with invalid FILS information element header lengths. |
| CVE-2026-24075 | Alta (7) | 0.06% | — | 17 sept 2026 | Memory Corruption when multiple threads issue concurrent IOCTL requests to the device control handler due to improper synchronization and race conditions. |
| CVE-2026-24084 | Alta (7.5) | 0.25% | — | 4 ago 2026 | Weak configuration when UE does not verify the consistency of its additional security capabilities with the replayed capabilities. |
| CVE-2026-24077 | Media (6.5) | 0.17% | — | 4 ago 2026 | Information Disclosure when processing wireless network channel switch information with improperly formatted length fields. |
| CVE-2026-24076 | Media (6.7) | 0.11% | — | 4 ago 2026 | Memory Corruption when processing registry values with incorrect types using a direct query method. |
| CVE-2026-21379 | Alta (7.8) | 0.10% | — | 6 jul 2026 | Memory Corruption when allocating memory with sizes that exceed the maximum allowed value. |
| CVE-2025-59611 | Media (6.7) | 0.08% | — | 1 jun 2026 | Memory corruption in diagnostic services due to absence of input validation |
| CVE-2026-21378 | Alta (7.8) | 0.07% | — | 6 abr 2026 | Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver. |
| CVE-2026-21376 | Alta (7.8) | 0.10% | — | 6 abr 2026 | Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver. |
| CVE-2026-21374 | Alta (7.8) | 0.11% | — | 6 abr 2026 | Memory Corruption when processing auxiliary sensor input/output control commands with insufficient buffer size validation. |
| CVE-2026-21373 | Alta (7.8) | 0.08% | — | 6 abr 2026 | Memory Corruption when accessing an output buffer without validating its size during IOCTL processing. |
| CVE-2026-21371 | Alta (7.8) | 0.10% | — | 6 abr 2026 | Memory Corruption when retrieving output buffer with insufficient size validation. |
| CVE-2025-47383 | Alta (7.2) | 0.14% | — | 2 mar 2026 | Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE. |
| CVE-2024-43050 | Alta (7.8) | 0.10% | — | 2 dic 2024 | Memory corruption while invoking IOCTL calls from user space to issue factory test command inside WLAN driver. |
| CVE-2024-33056 | Alta (7.8) | 0.10% | — | 2 dic 2024 | Memory corruption when allocating and accessing an entry in an SMEM partition continuously. |
| CVE-2024-33044 | Alta (7.8) | 0.10% | — | 2 dic 2024 | Memory corruption while Configuring the SMR/S2CR register in Bypass mode. |
| CVE-2023-43536 | Alta (7.5) | 0.32% | — | 6 feb 2024 | Transient DOS while parse fils IE with length equal to 1. |
| CVE-2023-43533 | Alta (7.5) | 0.32% | — | 6 feb 2024 | Transient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame. |
| CVE-2023-43522 | Alta (7.5) | 0.32% | — | 6 feb 2024 | Transient DOS while key unwrapping process, when the given encrypted key is empty or NULL. |
| CVE-2023-33076 | Alta (7.8) | 0.11% | — | 6 feb 2024 | Memory corruption in Core when updating rollback version for TA and OTA feature is enabled. |
| CVE-2023-33072 | Alta (7.8) | 0.11% | — | 6 feb 2024 | Memory corruption in Core while processing control functions. |
| CVE-2023-43511 | Alta (7.5) | 0.32% | — | 2 ene 2024 | Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header. |
| CVE-2023-33110 | Alta (7) | 0.08% | — | 2 ene 2024 | The session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may lead to race condition between event callback - PCM close… |
| CVE-2023-33109 | Alta (7.5) | 0.34% | — | 2 ene 2024 | Transient DOS while processing a WMI P2P listen start command (0xD00A) sent from host. |
| CVE-2023-33062 | Alta (7.5) | 0.34% | — | 2 ene 2024 | Transient DOS in WLAN Firmware while parsing a BTM request. |
| CVE-2023-33040 | Alta (7.5) | 0.34% | — | 2 ene 2024 | Transient DOS in Data Modem during DTLS handshake. |
| CVE-2023-33038 | Alta (7.8) | 0.12% | — | 2 ene 2024 | Memory corruption while receiving a message in Bus Socket Transport Server. |
| CVE-2023-33036 | Media (5.5) | 0.10% | — | 2 ene 2024 | Permanent DOS in Hypervisor while untrusted VM without PSCI support makes a PSCI call. |
| CVE-2023-33033 | Alta (7.8) | 0.12% | — | 2 ene 2024 | Memory corruption in Audio during playback with speaker protection. |
| CVE-2023-33032 | Alta (7.8) | 0.12% | — | 2 ene 2024 | Memory corruption in TZ Secure OS while requesting a memory allocation from TA region. |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.