Qualcomm Snapdragon 8 Gen 3 Firmware
15 CVEs affecting Qualcomm Snapdragon 8 Gen 3 Firmware. Latest disclosed: 2025-03-03. Critical: 0, High: 11.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-33045 | High | 8.4 | 2024-09-02 | Memory corruption when BTFM client sends new messages over Slimbus to ADSP. |
CVE-2025-21424 | High | 7.8 | 2025-03-03 | Memory corruption while calling the NPU driver APIs concurrently. |
CVE-2024-53024 | High | 7.8 | 2025-03-03 | Memory corruption in display driver while detaching a device. |
CVE-2024-53014 | High | 7.8 | 2025-03-03 | Memory corruption may occur while validating ports and channels in Audio driver. |
CVE-2024-49836 | High | 7.8 | 2025-03-03 | Memory corruption may occur during the synchronization of the camera`s frame processing pipeline. |
CVE-2024-45580 | High | 7.8 | 2025-03-03 | Memory corruption while handling multuple IOCTL calls from userspace for remote invocation. |
CVE-2024-33042 | High | 7.8 | 2024-09-02 | Memory corruption when Alternative Frequency offset value is set to 255. |
CVE-2024-33038 | High | 7.8 | 2024-09-02 | Memory corruption while passing untrusted/corrupted pointers from DSP to EVA. |
CVE-2024-53027 | High | 7.5 | 2025-03-03 | Transient DOS may occur while processing the country IE. |
CVE-2024-33051 | High | 7.5 | 2024-09-02 | Transient DOS while processing TIM IE from beacon frame as there is no check for IE length. |
CVE-2024-33050 | High | 7.5 | 2024-09-02 | Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper. |
CVE-2024-53025 | Medium | 5.5 | 2025-03-03 | Transient DOS can occur while processing UCI command. |
CVE-2024-43056 | Medium | 5.5 | 2025-03-03 | Transient DOS during hypervisor virtual I/O operation in a virtual machine. |
CVE-2024-43051 | Medium | 5.5 | 2025-03-03 | Information disclosure while deriving keys for a session for any Widevine use case. |
CVE-2024-38426 | Medium | 5.4 | 2025-03-03 | While processing the authentication message in UE, improper authentication may lead to information disclosure. |