Qualcomm Qdx1011 vulnerabilities, page 4

116 vulnerabilities

Known vulnerabilities in Qualcomm Qdx1011, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.4HighCVE-2024-33028qualcomm, inc. · snapdragon +136 moreUse After Free in Automotive TelematicsMemory corruption as fence object may still be accessed in timeline destruct after isync fence is released.EPSS0.11%8.4HighCVE-2024-33021qualcomm, inc. · snapdragon +136 moreUse of Uninitialized Variable in Automotive GPUMemory corruption while processing IOCTL call to set metainfo.EPSS0.10%6.2MediumCVE-2024-23357qualcomm, inc. · snapdragon +236 moreNULL Pointer Dereference in HLOSTransient DOS while importing a PKCS#8-encoded RSA key with zero bytes modulus.EPSS0.09%7.8HighCVE-2024-23356qualcomm, inc. · snapdragon +208 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in HLOSMemory corruption during session sign renewal request calls in HLOS.EPSS0.11%7.1HighCVE-2024-23362qualcomm, inc. · snapdragon +230 moreImproper Input Validation in Trusted Execution EnvironmentCryptographic issue while parsing RSA keys in COBR format.EPSS0.12%7.8HighCVE-2024-23368qualcomm, inc. · snapdragon +341 moreBuffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Qualcomm IPCMemory corruption when allocating and accessing an entry in an SMEM partition.EPSS0.10%7.8HighCVE-2024-23369qualcomm, inc. · snapdragon +118 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in HLOSMemory corruption when invalid length is provided from HLOS for FRS/UDS request/response buffers.EPSS0.12%7.8HighCVE-2024-23355qualcomm, inc. · snapdragon +141 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in AutomotiveMemory corruption when keymaster operation imports a shared key.EPSS0.11%7.1HighCVE-2026-21383qualcomm, inc. · snapdragon +52 moreReusing a Nonce, Key Pair in Encryption in HLOSCryptographic Issue when using a static initialization vector for AES-GCM key wrapping, which requires a unique value for each call to ensure security.EPSS0.10%7.1HighCVE-2026-25302qualcomm, inc. · snapdragon +285 moreImproper Verification of Cryptographic Signature in BootCryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed.EPSS0.06%7.6HighCVE-2026-25292qualcomm, inc. · snapdragon +208 moreImproper Validation of Syntactic Correctness of Input in Automotive Linux OSMemory Corruption when processing untrusted user input in the fastboot command handler for audio framework configuration.EPSS0.15%7.8HighCVE-2026-57554qualcomm, inc. · snapdragon +212 moreUse After Free in DSP ServiceMemory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC invocations.EPSS0.07%7.2HighCVE-2026-24085qualcomm, inc. · snapdragon +266 moreStack-based Buffer Overflow in DisplayMemory Corruption when processing display command line information due to improper initialization of a variable.EPSS0.10%7.2HighCVE-2026-24091qualcomm, inc. · snapdragon +266 moreImproper Validation of Syntactic Correctness of Input in DisplayMemory corruption while processing fastboot commands with improperly formatted input.EPSS0.10%7.2HighCVE-2026-24092qualcomm, inc. · snapdragon +215 moreImproper Validation of Syntactic Correctness of Input in DisplayMemory Corruption when processing fastboot commands to set display mode.EPSS0.10%7.1HighCVE-2026-24090qualcomm, inc. · snapdragon +214 moreMissing Authentication for Critical Function in HLOSCryptographic issue while processing partition table entries allows unauthorized modification of boot flow.EPSS0.06%7.2HighCVE-2026-24087qualcomm, inc. · snapdragon +212 moreImproper Validation of Syntactic Correctness of Input in KernelMemory corruption while processing fastboot OEM commands.EPSS0.10%7.8HighCVE-2026-24082qualcomm, inc. · snapdragon +173 moreUse After Free in Automotive GPUMemory Corruption when copying data from a freed source while executing performance counter deselect operation.EPSS0.07%7.2HighCVE-2026-24089qualcomm, inc. · snapdragon +216 moreImproper Validation of Syntactic Correctness of Input in KernelMemory corruption while processing fastboot commands with invalid input.EPSS0.10%8.7HighCVE-2023-21673qualcomm, inc. · snapdragon +161 moreImproper Access Control in KernelImproper Access to the VM resource manager can lead to Memory Corruption.EPSS0.10%