Vulnerabilidades do Qualcomm Qca6595au Firmware

CVE-2025-47322 Alta · 7.8 CWE-416 18/12/2025

Use After Free in Automotive Linux OS

Memory corruption while handling IOCTL calls to set mode.

CVE-2025-47321 Alta · 7.8 CWE-120 18/12/2025

Buffer Copy Without Checking Size of Input in Core Services

Memory corruption while copying packets received from unix clients.

CVE-2025-47320 Alta · 7.8 CWE-787 18/12/2025

Out-of-bounds Write in Audio

Memory corruption while processing MFC channel configuration during music playback.

CVE-2025-47319 Média · 6.7 CWE-497 18/12/2025

Exposure of Sensitive System Information to an Unauthorized Control Sphere in HLOS

Information disclosure while exposing internal TA-to-TA communication APIs to HLOS

CVE-2025-27063 Alta · 7.8 CWE-416 18/12/2025

Use After Free in Video

Memory corruption during video playback when video session open fails with time out error.

CVE-2025-47370 Média · 6.5 CWE-617 04/11/2025

Reachable Assertion in BT Controller

Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan.

CVE-2025-47365 Alta · 7.8 CWE-190 04/11/2025

Integer Overflow or Wraparound in Automotive Platform

Memory corruption while processing large input data from a remote source via a communication interface.

CVE-2025-47362 Média · 6.1 CWE-126 04/11/2025

Buffer Over-read in Automotive Software platform based on QNX

Information disclosure while processing message from client with invalid payload.

CVE-2025-47361 Alta · 7.8 CWE-129 04/11/2025

Improper Validation of Array Index in Automotive Software platform based on QNX

Memory corruption when triggering a subsystem crash with an out-of-range identifier.

CVE-2025-47360 Alta · 7.8 CWE-121 04/11/2025

Stack-based Buffer Overflow in Automotive Software platform based on QNX

Memory corruption while processing client message during device management.

CVE-2025-47357 Alta · 7.8 CWE-306 04/11/2025

Missing Authentication for Critical Function in SMSS

Information Disclosure when a user-level driver performs QFPROM read or write operations on Fuse regions.

CVE-2025-27070 Alta · 7.8 CWE-787 04/11/2025

Out-of-bounds Write in Windows Compute

Memory corruption while performing encryption and decryption commands.

CVE-2025-27064 Média · 6.1 CWE-126 04/11/2025

Buffer Over-read in Core Services

Information disclosure while registering commands from clients with diag through diagHal.

CVE-2025-47347 Alta · 7.8 CWE-121 09/10/2025

Stack-based Buffer Overflow in Automotive Software platform based on QNX

Memory corruption while processing control commands in the virtual memory management interface.

CVE-2025-27054 Alta · 7.8 CWE-787 09/10/2025

Out-of-bounds Write in Display

Memory corruption while processing a malformed license file during reboot.

CVE-2025-27053 Alta · 7.8 CWE-131 09/10/2025

Incorrect Calculation of Buffer Size in HLOS

Memory corruption during PlayReady APP usecase while processing TA commands.

CVE-2025-27041 Média · 5.5 CWE-126 09/10/2025

Buffer Over-read in Video

Transient DOS while processing video packets received from video firmware.

CVE-2024-43047 Alta · 7.8 KEV Alta · 49 CWE-416 07/10/2024

Qualcomm Multiple Chipsets Use-After-Free Vulnerability

Memory corruption while maintaining memory maps of HLOS memory.

CVE-2023-33106 Alta · 7.8 KEV Alta · 49 CWE-119 05/12/2023

Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability

Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.

CVE-2023-33107 Alta · 7.8 KEV Alta · 55 Exploit público CWE-190 05/12/2023

Qualcomm Multiple Chipsets Integer Overflow Vulnerability

Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.

CVE-2023-33063 Alta · 7.8 KEV Alta · 49 CWE-416 05/12/2023

Qualcomm Multiple Chipsets Use-After-Free Vulnerability

Memory corruption in DSP Services during a remote call from HLOS to DSP.

CVE-2022-22071 Alta · 7.8 KEV Alta · 46 CWE-416 14/06/2022

Qualcomm Multiple Chipsets Use-After-Free Vulnerability

Possible use after free when process shell memory is freed using IOCTL munmap call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

CVE-2020-11261 Alta · 7.8 KEV Alta · 52 CWE-787 09/06/2021

Qualcomm Multiple Chipsets Improper Input Validation Vulnerability

Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CVE-2021-1905 Alta · 7.8 KEV Alta · 58 Exploit público CWE-416 07/05/2021

Qualcomm Multiple Chipsets Use-After-Free Vulnerability

Possible use after free due to improper handling of memory mapping of multiple processes simultaneously. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CVE-2021-1906 Média · 5.5 KEV Alta · 45 07/05/2021

Qualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerability

Improper handling of address deregistration on failure can lead to new GPU address allocation failure. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables