Qualcomm
Qualcomm Snapdragon Auto 4G Modem Firmware: vulnerabilidades y CVE
Qualcomm Snapdragon Auto 4G Modem Firmware tiene 124 vulnerabilidades publicadas, 14 de ellas en los últimos 12 meses. 3 son críticas y 2 figuran en el catálogo de explotación activa de CISA.
CVE124
Últimos 12 meses14
Críticas3
Explotadas activamente2
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
🔴 Explotadas activamente (CISA KEV)
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2023-33063 | Alta (7.8) | 0.67% | ⚠ Explotación activa | 5 dic 2023 | Memory corruption in DSP Services during a remote call from HLOS to DSP. |
| CVE-2023-33107 | Alta (7.8) | 0.74% | ⚠ Explotación activa | 5 dic 2023 | Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call. |
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-25275 | Alta (7.5) | 0.19% | — | 17 sept 2026 | Transient DOS when processing authentication frames with invalid FILS information element header lengths. |
| CVE-2026-24084 | Alta (7.5) | 0.25% | — | 4 ago 2026 | Weak configuration when UE does not verify the consistency of its additional security capabilities with the replayed capabilities. |
| CVE-2026-24091 | Alta (7.2) | 0.10% | — | 1 jun 2026 | Memory corruption while processing fastboot commands with improperly formatted input. |
| CVE-2026-24085 | Alta (7.2) | 0.10% | — | 1 jun 2026 | Memory Corruption when processing display command line information due to improper initialization of a variable. |
| CVE-2025-59610 | Media (6.4) | 0.06% | — | 1 jun 2026 | Memory Corruption when processing IOCTL requests with mismatched API versions due to concurrent modification of user-space buffer. |
| CVE-2025-47404 | Alta (7.8) | 0.07% | — | 4 may 2026 | Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified. |
| CVE-2025-47383 | Alta (7.2) | 0.14% | — | 2 mar 2026 | Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE. |
| CVE-2025-47379 | Alta (7.8) | 0.07% | — | 2 mar 2026 | Memory Corruption when concurrent access to shared buffer occurs due to improper synchronization between assignment and deallocation of buffer resources. |
| CVE-2025-47333 | Media (6.6) | 0.08% | — | 7 ene 2026 | Memory corruption while handling buffer mapping operations in the cryptographic driver. |
| CVE-2025-47330 | Media (5.5) | 0.07% | — | 7 ene 2026 | Transient DOS while parsing video packets received from the video firmware. |
| CVE-2025-47320 | Alta (7.8) | 0.08% | — | 18 dic 2025 | Memory corruption while processing MFC channel configuration during music playback. |
| CVE-2025-47370 | Media (6.5) | 0.12% | — | 4 nov 2025 | Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan. |
| CVE-2025-27054 | Alta (7.8) | 0.09% | — | 9 oct 2025 | Memory corruption while processing a malformed license file during reboot. |
| CVE-2025-27053 | Alta (7.8) | 0.09% | — | 9 oct 2025 | Memory corruption during PlayReady APP usecase while processing TA commands. |
| CVE-2025-47318 | Alta (7.5) | 0.21% | — | 24 sept 2025 | Transient DOS while parsing the EPTM test control message to get the test pattern. |
| CVE-2025-21481 | Alta (7.8) | 0.07% | — | 24 sept 2025 | Memory corruption while performing private key encryption in trusted application. |
| CVE-2025-21482 | Alta (7.1) | 0.08% | — | 24 sept 2025 | Cryptographic issue while performing RSA PKCS padding decoding. |
| CVE-2025-27066 | Alta (7.5) | 0.28% | — | 6 ago 2025 | Transient DOS while processing an ANQP message. |
| CVE-2025-21465 | Media (6.5) | 0.09% | — | 6 ago 2025 | Information disclosure while processing the hash segment in an MBN file. |
| CVE-2025-21464 | Media (6.5) | 0.09% | — | 6 ago 2025 | Information disclosure while reading data from an image using specified offset and size parameters. |
| CVE-2025-27042 | Alta (7.8) | 0.09% | — | 8 jul 2025 | Memory corruption while processing video packets received from video firmware. |
| CVE-2025-21454 | Alta (7.5) | 0.22% | — | 8 jul 2025 | Transient DOS while processing received beacon frame. |
| CVE-2025-21453 | Alta (7.8) | 0.11% | — | 6 may 2025 | Memory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential failures occur. |
| CVE-2025-21448 | Alta (7.5) | 0.26% | — | 7 abr 2025 | Transient DOS may occur while parsing SSID in action frames. |
| CVE-2025-21430 | Alta (7.5) | 0.26% | — | 7 abr 2025 | Transient DOS while connecting STA to AP and initiating ADD TS request from AP to establish TSpec session. |
| CVE-2025-21429 | Alta (7.5) | 0.26% | — | 7 abr 2025 | Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request. |
| CVE-2024-43066 | Alta (7.8) | 0.11% | — | 7 abr 2025 | Memory corruption while handling file descriptor during listener registration/de-registration. |
| CVE-2024-38418 | Alta (7) | 0.07% | — | 3 feb 2025 | Memory corruption while parsing the memory map info in IOCTL calls. |
| CVE-2024-33067 | Media (5.5) | 0.10% | — | 6 ene 2025 | Information disclosure while invoking callback function of sound model driver from ADSP for every valid opcode received from sound model driver. |
| CVE-2024-33056 | Alta (7.8) | 0.10% | — | 2 dic 2024 | Memory corruption when allocating and accessing an entry in an SMEM partition continuously. |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.