Vulnerabilidades do Qualcomm Sdx55 Firmware

CVE-2025-47339 Alta · 7.8 CWE-416 07/01/2026

Use After Free in HLOS

Memory corruption while deinitializing a HDCP session.

CVE-2025-47333 Média · 6.6 CWE-416 07/01/2026

Use After Free in HLOS

Memory corruption while handling buffer mapping operations in the cryptographic driver.

CVE-2025-47331 Média · 6.1 CWE-126 07/01/2026

Buffer Over-read in Video

Information disclosure while processing a firmware event.

CVE-2025-47325 Média · 5.5 CWE-822 18/12/2025

Untrusted Pointer Dereference in TZ Firmware

Information disclosure while processing system calls with invalid parameters.

CVE-2025-47320 Alta · 7.8 CWE-787 18/12/2025

Out-of-bounds Write in Audio

Memory corruption while processing MFC channel configuration during music playback.

CVE-2025-47370 Média · 6.5 CWE-617 04/11/2025

Reachable Assertion in BT Controller

Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan.

CVE-2025-27074 Alta · 7.8 CWE-131 04/11/2025

Incorrect Calculation of Buffer Size in SCE-Mink

Memory corruption while processing a GP command response.

CVE-2025-27054 Alta · 7.8 CWE-787 09/10/2025

Out-of-bounds Write in Display

Memory corruption while processing a malformed license file during reboot.

CVE-2025-27053 Alta · 7.8 CWE-131 09/10/2025

Incorrect Calculation of Buffer Size in HLOS

Memory corruption during PlayReady APP usecase while processing TA commands.

CVE-2025-27040 Média · 6.5 CWE-20 09/10/2025

Improper Input Validation in TZ Firmware

Information disclosure may occur while processing the hypervisor log.

CVE-2023-33107 Alta · 7.8 KEV Alta · 55 Exploit público CWE-190 05/12/2023

Qualcomm Multiple Chipsets Integer Overflow Vulnerability

Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.

CVE-2023-33063 Alta · 7.8 KEV Alta · 49 CWE-416 05/12/2023

Qualcomm Multiple Chipsets Use-After-Free Vulnerability

Memory corruption in DSP Services during a remote call from HLOS to DSP.

CVE-2022-22071 Alta · 7.8 KEV Alta · 46 CWE-416 14/06/2022

Qualcomm Multiple Chipsets Use-After-Free Vulnerability

Possible use after free when process shell memory is freed using IOCTL munmap call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

CVE-2020-11261 Alta · 7.8 KEV Alta · 52 CWE-787 09/06/2021

Qualcomm Multiple Chipsets Improper Input Validation Vulnerability

Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CVE-2021-1905 Alta · 7.8 KEV Alta · 58 Exploit público CWE-416 07/05/2021

Qualcomm Multiple Chipsets Use-After-Free Vulnerability

Possible use after free due to improper handling of memory mapping of multiple processes simultaneously. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CVE-2021-1906 Média · 5.5 KEV 07/05/2021

Qualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerability

Improper handling of address deregistration on failure can lead to new GPU address allocation failure. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables