Qualcomm Qmp1000 vulnerabilities, page 3
129 vulnerabilities
Known vulnerabilities in Qualcomm Qmp1000, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2025-47397qualcomm, inc. · snapdragon +144 moreImproper Release of Memory Before Removing Last Reference in GraphicsMemory Corruption when initiating GPU memory mapping using scatter-gather lists due to unchecked IOMMU mapping errors.EPSS0.11%HighCVE-2025-47366qualcomm, inc. · snapdragon +157 moreExposed Dangerous Method or Function in HLOSCryptographic issue when a Trusted Zone with outdated code is triggered by a HLOS providing incorrect input.EPSS0.10%MediumCVE-2025-47333qualcomm, inc. · snapdragon +237 moreUse After Free in HLOSMemory corruption while handling buffer mapping operations in the cryptographic driver.EPSS0.08%MediumCVE-2025-47402qualcomm, inc. · snapdragon +94 moreBuffer Over-read in WLAN FirmwareTransient DOS when processing a received frame with an excessively large authentication information element.EPSS0.16%MediumCVE-2025-47370qualcomm, inc. · snapdragon +135 moreReachable Assertion in BT ControllerTransient DOS when a remote device sends an invalid connection request during BT connectable LE scan.EPSS0.12%HighCVE-2025-47346qualcomm, inc. · snapdragon +113 moreOut-of-bounds Write in HLOSMemory corruption while processing a secure logging command in the trusted application.EPSS0.08%HighCVE-2025-47382qualcomm, inc. · snapdragon +99 moreIncorrect Authorization in BootMemory corruption while loading an invalid firmware in boot loader.EPSS0.09%HighCVE-2025-47354qualcomm, inc. · snapdragon +38 moreUse After Free in DSP ServiceMemory corruption while allocating buffers in DSP service.EPSS0.09%HighCVE-2025-47407qualcomm, inc. · snapdragon +100 moreTime-of-check Time-of-use (TOCTOU) Race Condition in DSP ServiceMemory corruption while creating a process on the digital signal processor due to allocation failure at the kernel level.EPSS0.05%HighCVE-2025-47373qualcomm, inc. · snapdragon +184 moreOut-of-bounds Write in AutomotiveMemory Corruption when accessing buffers with invalid length during TA invocation.EPSS0.07%MediumCVE-2025-47344qualcomm, inc. · snapdragon +82 moreTime-of-check Time-of-use (TOCTOU) Race Condition in Camera DriverMemory corruption while handling sensor utility operations.EPSS0.06%HighCVE-2025-47403qualcomm, inc. · snapdragon +254 moreBuffer Over-read in WLAN FirmwareTransient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming.EPSS0.22%MediumCVE-2025-47337qualcomm, inc. · snapdragon +63 moreUse After Free in Camera DriverMemory corruption while accessing a synchronization object during concurrent operations.EPSS0.08%MediumCVE-2025-47331qualcomm, inc. · snapdragon +297 moreBuffer Over-read in VideoInformation disclosure while processing a firmware event.EPSS0.08%MediumCVE-2025-47319qualcomm, inc. · snapdragon +118 moreExposure of Sensitive System Information to an Unauthorized Control Sphere in HLOSInformation disclosure while exposing internal TA-to-TA communication APIs to HLOSEPSS0.09%HighCVE-2025-47321qualcomm, inc. · snapdragon +115 moreBuffer Copy Without Checking Size of Input in Core ServicesMemory corruption while copying packets received from unix clients.EPSS0.08%MediumCVE-2025-47332qualcomm, inc. · snapdragon +73 moreTime-of-check Time-of-use (TOCTOU) Race Condition in Camera DriverMemory corruption while processing a config call from userspace.EPSS0.06%MediumCVE-2025-47369qualcomm, inc. · snapdragon +173 moreInformation Exposure in Computer VisionInformation disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID.EPSS0.08%HighCVE-2025-47383qualcomm, inc. · snapdragon +200 moreMissing Cryptographic Step in Data ModemWeak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE.EPSS0.14%HighCVE-2025-47394qualcomm, inc. · snapdragon +45 moreBuffer Copy Without Checking Size of Input in DSP ServiceMemory corruption when copying overlapping buffers during memory operations due to incorrect offset calculations.EPSS0.08%