C-v2x 9150 Firmware (Qualcomm) - vulnerabilities (CVEs)

120 CVEs, 2 in the last 30 days, 1 known versions, newest CVE from 2026-10-06. Vendor: Qualcomm.

CVEs of C-v2x 9150 Firmware

• CVE-2026-25267 - CVSS 7.8 (high), 2026-10-06: Memory corruption when non-secure loader rewrites page tables before secure memory initialization.
• CVE-2026-25263 - CVSS 6.6 (medium), 2026-10-06: Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters.
• CVE-2026-24091 - CVSS 7.2 (high), 2026-06-01: Memory corruption while processing fastboot commands with improperly formatted input.
• CVE-2026-24085 - CVSS 7.2 (high), 2026-06-01: Memory Corruption when processing display command line information due to improper initialization of a variable.
• CVE-2025-59610 - CVSS 6.4 (medium), 2026-06-01: Memory Corruption when processing IOCTL requests with mismatched API versions due to concurrent modification of user-space buffer.
• CVE-2025-47404 - CVSS 7.8 (high), 2026-05-04: Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified.
• CVE-2026-21385 - CVSS 7.8 (high), 2026-03-02: Memory corruption while using alignments for memory allocation.
• CVE-2025-47383 - CVSS 7.2 (high), 2026-03-02: Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE.
• CVE-2025-47379 - CVSS 7.8 (high), 2026-03-02: Memory Corruption when concurrent access to shared buffer occurs due to improper synchronization between assignment and deallocation of buffer resources.
• CVE-2025-47330 - CVSS 5.5 (medium), 2026-01-07: Transient DOS while parsing video packets received from the video firmware.
• CVE-2025-47333 - CVSS 6.6 (medium), 2026-01-07: Memory corruption while handling buffer mapping operations in the cryptographic driver.
• CVE-2025-47320 - CVSS 7.8 (high), 2025-12-18: Memory corruption while processing MFC channel configuration during music playback.
• CVE-2025-27054 - CVSS 7.8 (high), 2025-10-09: Memory corruption while processing a malformed license file during reboot.
• CVE-2025-27053 - CVSS 7.8 (high), 2025-10-09: Memory corruption during PlayReady APP usecase while processing TA commands.
• CVE-2025-27030 - CVSS 6.1 (medium), 2025-09-24: information disclosure while invoking calibration data from user space to update firmware size.
• CVE-2025-21482 - CVSS 7.1 (high), 2025-09-24: Cryptographic issue while performing RSA PKCS padding decoding.
• CVE-2025-21481 - CVSS 7.8 (high), 2025-09-24: Memory corruption while performing private key encryption in trusted application.
• CVE-2025-27062 - CVSS 7.8 (high), 2025-08-06: Memory corruption while handling client exceptions, allowing unauthorized channel access.
• CVE-2025-21465 - CVSS 6.5 (medium), 2025-08-06: Information disclosure while processing the hash segment in an MBN file.
• CVE-2025-21464 - CVSS 6.5 (medium), 2025-08-06: Information disclosure while reading data from an image using specified offset and size parameters.
• CVE-2025-21456 - CVSS 7.8 (high), 2025-08-06: Memory corruption while processing IOCTL command when multiple threads are called to map/unmap buffer concurrently.
• CVE-2025-27061 - CVSS 7.8 (high), 2025-07-08: Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmware.
• CVE-2025-27042 - CVSS 7.8 (high), 2025-07-08: Memory corruption while processing video packets received from video firmware.
• CVE-2024-53013 - CVSS 6.6 (medium), 2025-06-03: Memory corruption may occur while processing voice call registration with user.
• CVE-2024-45570 - CVSS 7.8 (high), 2025-05-06: Memory corruption may occur during IO configuration processing when the IO port count is invalid.
• CVE-2024-45562 - CVSS 7.8 (high), 2025-05-06: Memory corruption during concurrent access to server info object due to unprotected critical field.
• CVE-2024-45564 - CVSS 7.8 (high), 2025-05-06: Memory corruption during concurrent access to server info object due to incorrect reference count update.
• CVE-2025-21429 - CVSS 7.5 (high), 2025-04-07: Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request.
• CVE-2025-21428 - CVSS 7.5 (high), 2025-04-07: Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request from the AP to establish a TSpec session.
• CVE-2024-45544 - CVSS 6.6 (medium), 2025-04-07: Memory corruption while processing IOCTL calls to add route entry in the HW.
• CVE-2024-45543 - CVSS 6.6 (medium), 2025-04-07: Memory corruption while accessing MSM channel map and mixer functions.
• CVE-2024-45540 - CVSS 6.6 (medium), 2025-04-07: Memory corruption while invoking IOCTL map buffer request from userspace.
• CVE-2024-43067 - CVSS 7.8 (high), 2025-04-07: Memory corruption occurs during the copying of read data from the EEPROM because the IO configuration is exposed as shared memory.
• CVE-2025-21424 - CVSS 7.8 (high), 2025-03-03: Memory corruption while calling the NPU driver APIs concurrently.
• CVE-2024-53014 - CVSS 7.8 (high), 2025-03-03: Memory corruption may occur while validating ports and channels in Audio driver.
• CVE-2024-43051 - CVSS 5.5 (medium), 2025-03-03: Information disclosure while deriving keys for a session for any Widevine use case.
• CVE-2024-43057 - CVSS 7.8 (high), 2025-03-03: Memory corruption while processing command in Glink linux.
• CVE-2024-38416 - CVSS 6.1 (medium), 2025-02-03: Information disclosure during audio playback.
• CVE-2024-38418 - CVSS 7.8 (high), 2025-02-03: Memory corruption while parsing the memory map info in IOCTL calls.
• CVE-2024-38417 - CVSS 6.1 (medium), 2025-02-03: Information disclosure while processing IO control commands.
• CVE-2024-33067 - CVSS 6.1 (medium), 2025-01-06: Information disclosure while invoking callback function of sound model driver from ADSP for every valid opcode received from sound model driver.
• CVE-2024-33053 - CVSS 6.7 (medium), 2024-12-02: Memory corruption when multiple threads try to unregister the CVP buffer at the same time.
• CVE-2024-33037 - CVSS 6.1 (medium), 2024-12-02: Information disclosure as NPU firmware can send invalid IPC message to NPU driver as the driver doesn`t validate the IPC message received from the firmware.
• CVE-2024-33036 - CVSS 6.7 (medium), 2024-12-02: Memory corruption while parsing sensor packets in camera driver, user-space variable is used while allocating memory in kernel and parsing which can lead to…
• CVE-2024-38423 - CVSS 7.8 (high), 2024-11-04: Memory corruption while processing GPU page table switch.
• CVE-2024-38422 - CVSS 7.8 (high), 2024-11-04: Memory corruption while processing voice packet with arbitrary data received from ADSP.
• CVE-2024-33032 - CVSS 6.7 (medium), 2024-11-04: Memory corruption when the user application modifies the same shared memory asynchronously when kernel is accessing it.
• CVE-2024-38401 - CVSS 7.8 (high), 2024-09-02: Memory corruption while processing concurrent IOCTL calls.
• CVE-2024-33060 - CVSS 8.4 (high), 2024-09-02: Memory corruption when two threads try to map and unmap a single node simultaneously.
• CVE-2024-33016 - CVSS 6.8 (medium), 2024-09-02: memory corruption when an invalid firehose patch command is invoked.
• CVE-2024-33027 - CVSS 8.4 (high), 2024-08-05: Memory corruption can occur when arbitrary user-space app gains kernel level privilege to modify DDR memory by corrupting the GPU page table.
• CVE-2024-23353 - CVSS 7.5 (high), 2024-08-05: Transient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI.
• CVE-2024-23356 - CVSS 7.8 (high), 2024-08-05: Memory corruption during session sign renewal request calls in HLOS.
• CVE-2024-23373 - CVSS 8.4 (high), 2024-07-01: Memory corruption when IOMMU unmap operation fails, the DMA and anon buffers are getting released.
• CVE-2024-21461 - CVSS 8.4 (high), 2024-07-01: Memory corruption while performing finish HMAC operation when context is freed by keymaster.
• CVE-2024-21462 - CVSS 7.1 (high), 2024-07-01: Transient DOS while loading the TA ELF file.
• CVE-2023-43551 - CVSS 9.1 (critical), 2024-06-03: Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode…
• CVE-2024-21471 - CVSS 8.4 (high), 2024-05-06: Memory corruption when IOMMU unmap of a GPU buffer fails in Linux.
• CVE-2024-21475 - CVSS 7.8 (high), 2024-05-06: Memory corruption when the payload received from firmware is not as per the expected protocol size.
• CVE-2023-43528 - CVSS 6.1 (medium), 2024-05-06: Information disclosure when the ADSP payload size received in HLOS in response to Audio Stream Manager matrix session is less than this expected size.
• CVE-2023-43521 - CVSS 7.8 (high), 2024-05-06: Memory corruption when multiple listeners are being registered with the same file descriptor.
• CVE-2024-21468 - CVSS 8.4 (high), 2024-04-01: Memory corruption when there is failed unmap operation in GPU.
• CVE-2024-21454 - CVSS 7.5 (high), 2024-04-01: Transient DOS while decoding the ToBeSignedMessage in Automotive Telematics.
• CVE-2024-21453 - CVSS 7.5 (high), 2024-04-01: Transient DOS while decoding message of size that exceeds the available system memory.
• CVE-2024-21452 - CVSS 7.5 (high), 2024-04-01: Transient DOS while decoding an ASN.1 OER message containing a SEQUENCE of unknown extensions.
• CVE-2023-33111 - CVSS 5.5 (medium), 2024-04-01: Information disclosure when VI calibration state set by ADSP is greater than MAX_FBSP_STATE in the response payload to AFE calibration command.
• CVE-2023-33023 - CVSS 8.4 (high), 2024-04-01: Memory corruption while processing finish_sign command to pass a rsp buffer.
• CVE-2023-28547 - CVSS 8.4 (high), 2024-04-01: Memory corruption in SPS Application while requesting for public key in sorter TA.
• CVE-2023-33066 - CVSS 8.4 (high), 2024-03-04: Memory corruption in Audio while processing RT proxy port register driver.
• CVE-2023-28578 - CVSS 9.3 (critical), 2024-03-04: Memory corruption in Core Services while executing the command for removing a single event listener.
• CVE-2023-43513 - CVSS 7.8 (high), 2024-02-06: Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to…
• CVE-2023-33067 - CVSS 7.8 (high), 2024-02-06: Memory corruption in Audio while calling START command on host voice PCM multiple times for the same RX or TX tap points.
• CVE-2023-33077 - CVSS 7.8 (high), 2024-02-06: Memory corruption in HLOS while converting from authorization token to HIDL vector.
• CVE-2023-33069 - CVSS 7.8 (high), 2024-02-06: Memory corruption in Audio while processing the calibration data returned from ACDB loader.
• CVE-2023-33068 - CVSS 7.8 (high), 2024-02-06: Memory corruption in Audio while processing IIR config data from AFE calibration block.
• CVE-2023-33065 - CVSS 7.1 (high), 2024-02-06: Information disclosure in Audio while accessing AVCS services from ADSP payload.
• CVE-2023-33064 - CVSS 5.5 (medium), 2024-02-06: Transient DOS in Audio when invoking callback function of ASM driver.
• CVE-2023-33114 - CVSS 8.4 (high), 2024-01-02: Memory corruption while running NPU, when NETWORK_UNLOAD and (NETWORK_UNLOAD or NETWORK_EXECUTE_V2) commands are submitted at the same time.
• CVE-2023-33120 - CVSS 7.8 (high), 2024-01-02: Memory corruption in Audio when memory map command is executed consecutively in ADSP.
• CVE-2023-33030 - CVSS 9.3 (critical), 2024-01-02: Memory corruption in HLOS while running playready use-case.
• CVE-2023-33033 - CVSS 8.4 (high), 2024-01-02: Memory corruption in Audio during playback with speaker protection.
• CVE-2023-33032 - CVSS 9.3 (critical), 2024-01-02: Memory corruption in TZ Secure OS while requesting a memory allocation from TA region.
• CVE-2023-33107 - CVSS 8.4 (high), 2023-12-05: Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.
• CVE-2023-33063 - CVSS 7.8 (high), 2023-12-05: Memory corruption in DSP Services during a remote call from HLOS to DSP.
• CVE-2023-33070 - CVSS 7.1 (high), 2023-12-05: Transient DOS in Automotive OS due to improper authentication to the secure IO calls.
• CVE-2023-33018 - CVSS 7.8 (high), 2023-12-05: Memory corruption while using the UIM diag command to get the operators name.
• CVE-2023-33017 - CVSS 7.8 (high), 2023-12-05: Memory corruption in Boot while running a ListVars test in UEFI Menu during boot.
• CVE-2023-28586 - CVSS 6.5 (medium), 2023-12-05: Information disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE.
• CVE-2023-28585 - CVSS 8.8 (high), 2023-12-05: Memory corruption while loading an ELF segment in TEE Kernel.
• CVE-2023-28551 - CVSS 7.8 (high), 2023-12-05: Memory corruption in UTILS when modem processes memory specific Diag commands having arbitrary address values as input arguments.
• CVE-2023-28550 - CVSS 7.8 (high), 2023-12-05: Memory corruption in MPP performance while accessing DSM watermark using external memory address.
• CVE-2023-28546 - CVSS 7.8 (high), 2023-12-05: Memory Corruption in SPS Application while exporting public key in sorter TA.
• CVE-2023-22383 - CVSS 7.8 (high), 2023-12-05: Memory Corruption in camera while installing a fd for a particular DMA buffer.
• CVE-2023-33059 - CVSS 7.8 (high), 2023-11-07: Memory corruption in Audio while processing the VOC packet data from ADSP.
• CVE-2023-33031 - CVSS 7.8 (high), 2023-11-07: Memory corruption in Automotive Audio while copying data from ADSP shared buffer to the VOC packet data buffer.
• CVE-2023-28556 - CVSS 7.8 (high), 2023-11-07: Cryptographic issue in HLOS during key management.
• CVE-2023-28554 - CVSS 6.1 (medium), 2023-11-07: Information Disclosure in Qualcomm IPC while reading values from shared memory in VM.
• CVE-2023-24852 - CVSS 8.4 (high), 2023-11-07: Memory Corruption in Core due to secure memory access by user while loading modem image.
• CVE-2023-22388 - CVSS 9.8 (critical), 2023-11-07: Memory Corruption in Multi-mode Call Processor while processing bit mask API.
• CVE-2023-24847 - CVSS 7.5 (high), 2023-10-03: Transient DOS in Modem while allocating DSM items.