Qualcomm
Qualcomm Snapdragon AR2 GEN 1 Firmware: vulnerabilidades y CVE
Qualcomm Snapdragon AR2 GEN 1 Firmware tiene 71 vulnerabilidades publicadas, 1 de ellas en los últimos 12 meses. 6 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE71
Últimos 12 meses1
Críticas6
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2025-47366 | Alta (7.8) | 0.10% | — | 2 feb 2026 | Cryptographic issue when a Trusted Zone with outdated code is triggered by a HLOS providing incorrect input. |
| CVE-2025-27061 | Alta (7.8) | 0.09% | — | 8 jul 2025 | Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmware. |
| CVE-2025-27057 | Alta (7.5) | 0.23% | — | 8 jul 2025 | Transient DOS while handling beacon frames with invalid IE header length. |
| CVE-2025-27042 | Alta (7.8) | 0.09% | — | 8 jul 2025 | Memory corruption while processing video packets received from video firmware. |
| CVE-2025-21454 | Alta (7.5) | 0.22% | — | 8 jul 2025 | Transient DOS while processing received beacon frame. |
| CVE-2025-21449 | Alta (7.5) | 0.22% | — | 8 jul 2025 | Transient DOS may occur while processing malformed length field in SSID IEs. |
| CVE-2025-21446 | Alta (7.5) | 0.22% | — | 8 jul 2025 | Transient DOS may occur when processing vendor-specific information elements while parsing a WLAN frame for BTM requests. |
| CVE-2025-21433 | Media (5.5) | 0.08% | — | 8 jul 2025 | Transient DOS when importing a PKCS#8-encoded RSA private key with a zero-sized modulus. |
| CVE-2025-21432 | Alta (7.8) | 0.09% | — | 8 jul 2025 | Memory corruption while retrieving the CBOR data from TA. |
| CVE-2025-21422 | Alta (7.8) | 0.10% | — | 8 jul 2025 | Cryptographic issue while processing crypto API calls, missing checks may lead to corrupted key usage or IV reuses. |
| CVE-2024-53009 | Alta (7.8) | 0.09% | — | 8 jul 2025 | Memory corruption while operating the mailbox in Automotive. |
| CVE-2025-21468 | Alta (7.8) | 0.11% | — | 6 may 2025 | Memory corruption while reading response from FW, when buffer size is changed by FW while driver is using this size to write null character at the end of buffer. |
| CVE-2025-21459 | Alta (7.5) | 0.34% | — | 6 may 2025 | Transient DOS while parsing per STA profile in ML IE. |
| CVE-2024-49842 | Alta (7.8) | 0.09% | — | 6 may 2025 | Memory corruption during memory mapping into protected VM address space due to incorrect API restrictions. |
| CVE-2024-49841 | Alta (7.8) | 0.11% | — | 6 may 2025 | Memory corruption during memory assignment to headless peripheral VM due to incorrect error code handling. |
| CVE-2024-53027 | Alta (7.5) | 0.30% | — | 3 mar 2025 | Transient DOS may occur while processing the country IE. |
| CVE-2024-53024 | Alta (7.8) | 0.12% | — | 3 mar 2025 | Memory corruption in display driver while detaching a device. |
| CVE-2024-53014 | Alta (7.8) | 0.12% | — | 3 mar 2025 | Memory corruption may occur while validating ports and channels in Audio driver. |
| CVE-2024-45580 | Alta (7.8) | 0.12% | — | 3 mar 2025 | Memory corruption while handling multuple IOCTL calls from userspace for remote invocation. |
| CVE-2024-43051 | Media (5.5) | 0.11% | — | 3 mar 2025 | Information disclosure while deriving keys for a session for any Widevine use case. |
| CVE-2024-49839 | Crítica (9.8) | 0.29% | — | 3 feb 2025 | Memory corruption during management frame processing due to mismatch in T2LM info element. |
| CVE-2024-49838 | Alta (7.5) | 0.31% | — | 3 feb 2025 | Information disclosure while parsing the OCI IE with invalid length. |
| CVE-2024-49834 | Alta (7.8) | 0.11% | — | 3 feb 2025 | Memory corruption while power-up or power-down sequence of the camera sensor. |
| CVE-2024-49833 | Alta (7.8) | 0.10% | — | 3 feb 2025 | Memory corruption can occur in the camera when an invalid CID is used. |
| CVE-2024-38420 | Alta (7.8) | 0.10% | — | 3 feb 2025 | Memory corruption while configuring a Hypervisor based input virtual device. |
| CVE-2024-45553 | Alta (7.8) | 0.13% | — | 6 ene 2025 | Memory corruption can occur when process-specific maps are added to the global list. If a map is removed from the global list while another thread is using it for a process-specific task, issues may arise. |
| CVE-2024-33055 | Alta (7.8) | 0.10% | — | 6 ene 2025 | Memory corruption while invoking IOCTL calls to unmap the DMA buffers. |
| CVE-2024-38402 | Alta (7.8) | 0.16% | — | 2 sept 2024 | Memory corruption while processing IOCTL call for getting group info. |
| CVE-2024-33060 | Alta (7.8) | 0.17% | — | 2 sept 2024 | Memory corruption when two threads try to map and unmap a single node simultaneously. |
| CVE-2024-33057 | Alta (7.5) | 0.30% | — | 2 sept 2024 | Transient DOS while parsing the multi-link element Control field when common information length check is missing before updating the location. |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.