Sg4150p Firmware (Qualcomm) - vulnerabilities (CVEs)

226 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-02-02. Vendor: Qualcomm.

CVEs of Sg4150p Firmware

• CVE-2025-47366 - CVSS 7.8 (high), 2026-02-02: Cryptographic issue when a Trusted Zone with outdated code is triggered by a HLOS providing incorrect input.
• CVE-2025-47348 - CVSS 7.8 (high), 2026-01-07: Memory corruption while processing identity credential operations in the trusted application.
• CVE-2025-47334 - CVSS 6.7 (medium), 2026-01-07: Memory corruption while processing shared command buffer packet between camera userspace and kernel.
• CVE-2025-47330 - CVSS 5.5 (medium), 2026-01-07: Transient DOS while parsing video packets received from the video firmware.
• CVE-2025-47333 - CVSS 6.6 (medium), 2026-01-07: Memory corruption while handling buffer mapping operations in the cryptographic driver.
• CVE-2025-47331 - CVSS 6.1 (medium), 2026-01-07: Information disclosure while processing a firmware event.
• CVE-2025-47320 - CVSS 7.8 (high), 2025-12-18: Memory corruption while processing MFC channel configuration during music playback.
• CVE-2025-47323 - CVSS 7.8 (high), 2025-12-18: Memory corruption while routing GPR packets between user and root when handling large data packet.
• CVE-2025-47322 - CVSS 7.8 (high), 2025-12-18: Memory corruption while handling IOCTL calls to set mode.
• CVE-2025-27070 - CVSS 7.8 (high), 2025-11-04: Memory corruption while performing encryption and decryption commands.
• CVE-2025-27054 - CVSS 7.8 (high), 2025-10-09: Memory corruption while processing a malformed license file during reboot.
• CVE-2025-27053 - CVSS 7.8 (high), 2025-10-09: Memory corruption during PlayReady APP usecase while processing TA commands.
• CVE-2025-27041 - CVSS 5.5 (medium), 2025-10-09: Transient DOS while processing video packets received from video firmware.
• CVE-2025-21487 - CVSS 8.2 (high), 2025-09-24: Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.
• CVE-2025-21484 - CVSS 8.2 (high), 2025-09-24: Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet.
• CVE-2025-21488 - CVSS 8.2 (high), 2025-09-24: Information disclosure while decoding this RTP packet headers received by UE from the network when the padding bit is set.
• CVE-2025-21481 - CVSS 7.8 (high), 2025-09-24: Memory corruption while performing private key encryption in trusted application.
• CVE-2025-21483 - CVSS 9.8 (critical), 2025-09-24: Memory corruption when the UE receives an RTP packet from the network, during the reassembly of NALUs.
• CVE-2025-21482 - CVSS 7.1 (high), 2025-09-24: Cryptographic issue while performing RSA PKCS padding decoding.
• CVE-2025-27066 - CVSS 7.5 (high), 2025-08-06: Transient DOS while processing an ANQP message.
• CVE-2025-27062 - CVSS 7.8 (high), 2025-08-06: Memory corruption while handling client exceptions, allowing unauthorized channel access.
• CVE-2025-21465 - CVSS 6.5 (medium), 2025-08-06: Information disclosure while processing the hash segment in an MBN file.
• CVE-2025-21464 - CVSS 6.5 (medium), 2025-08-06: Information disclosure while reading data from an image using specified offset and size parameters.
• CVE-2025-27061 - CVSS 7.8 (high), 2025-07-08: Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmware.
• CVE-2025-27052 - CVSS 7.8 (high), 2025-07-08: Memory corruption while processing data packets in diag received from Unix clients.
• CVE-2025-27043 - CVSS 7.8 (high), 2025-07-08: Memory corruption while processing manipulated payload in video firmware.
• CVE-2025-27042 - CVSS 7.8 (high), 2025-07-08: Memory corruption while processing video packets received from video firmware.
• CVE-2025-21454 - CVSS 7.5 (high), 2025-07-08: Transient DOS while processing received beacon frame.
• CVE-2025-21449 - CVSS 7.5 (high), 2025-07-08: Transient DOS may occur while processing malformed length field in SSID IEs.
• CVE-2025-21432 - CVSS 7.8 (high), 2025-07-08: Memory corruption while retrieving the CBOR data from TA.
• CVE-2025-21427 - CVSS 8.2 (high), 2025-07-08: Information disclosure while decoding this RTP packet Payload when UE receives the RTP packet from the network.
• CVE-2025-21422 - CVSS 7.8 (high), 2025-07-08: Cryptographic issue while processing crypto API calls, missing checks may lead to corrupted key usage or IV reuses.
• CVE-2025-21433 - CVSS 6.2 (medium), 2025-07-08: Transient DOS when importing a PKCS#8-encoded RSA private key with a zero-sized modulus.
• CVE-2024-53021 - CVSS 8.2 (high), 2025-06-03: Information disclosure may occur while processing goodbye RTCP packet from network.
• CVE-2024-53020 - CVSS 8.2 (high), 2025-06-03: Information disclosure may occur while decoding the RTP packet with invalid header extension from network.
• CVE-2024-53026 - CVSS 8.2 (high), 2025-06-03: Information disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call.
• CVE-2025-21453 - CVSS 7.8 (high), 2025-05-06: Memory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential failures occur.
• CVE-2024-49835 - CVSS 7.8 (high), 2025-05-06: Memory corruption while reading secure file.
• CVE-2025-21430 - CVSS 7.5 (high), 2025-04-07: Transient DOS while connecting STA to AP and initiating ADD TS request from AP to establish TSpec session.
• CVE-2024-49848 - CVSS 6.7 (medium), 2025-04-07: Memory corruption while processing multiple IOCTL calls from HLOS to DSP.
• CVE-2024-45552 - CVSS 8.2 (high), 2025-04-07: Information disclosure may occur during a video call if a device resets due to a non-conforming RTCP packet that doesn`t adhere to RFC standards.
• CVE-2024-45551 - CVSS 6.2 (medium), 2025-04-07: Cryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can be dropped on verification failure, potentially leading to…
• CVE-2024-43065 - CVSS 7.1 (high), 2025-04-07: Cryptographic issues while generating an asymmetric key pair for RKP use cases.
• CVE-2024-43066 - CVSS 7.8 (high), 2025-04-07: Memory corruption while handling file descriptor during listener registration/de-registration.
• CVE-2025-21424 - CVSS 7.8 (high), 2025-03-03: Memory corruption while calling the NPU driver APIs concurrently.
• CVE-2024-53027 - CVSS 7.5 (high), 2025-03-03: Transient DOS may occur while processing the country IE.
• CVE-2024-53024 - CVSS 7.8 (high), 2025-03-03: Memory corruption in display driver while detaching a device.
• CVE-2024-53023 - CVSS 7.8 (high), 2025-03-03: Memory corruption may occur while accessing a variable during extended back to back tests.
• CVE-2024-53014 - CVSS 7.8 (high), 2025-03-03: Memory corruption may occur while validating ports and channels in Audio driver.
• CVE-2024-38426 - CVSS 5.4 (medium), 2025-03-03: While processing the authentication message in UE, improper authentication may lead to information disclosure.
• CVE-2024-43051 - CVSS 5.5 (medium), 2025-03-03: Information disclosure while deriving keys for a session for any Widevine use case.
• CVE-2024-49838 - CVSS 8.2 (high), 2025-02-03: Information disclosure while parsing the OCI IE with invalid length.
• CVE-2024-45584 - CVSS 7.8 (high), 2025-02-03: Memory corruption can occur when a compat IOCTL call is followed by a normal IOCTL call from userspace.
• CVE-2024-45553 - CVSS 7.8 (high), 2025-01-06: Memory corruption can occur when process-specific maps are added to the global list. If a map is removed from the global list while another thread is using it…
• CVE-2024-43048 - CVSS 7.8 (high), 2024-12-02: Memory corruption when invalid input is passed to invoke GPU Headroom API call.
• CVE-2024-33056 - CVSS 8.4 (high), 2024-12-02: Memory corruption when allocating and accessing an entry in an SMEM partition continuously.
• CVE-2024-38424 - CVSS 7.8 (high), 2024-11-04: Memory corruption during GNSS HAL process initialization.
• CVE-2024-38422 - CVSS 7.8 (high), 2024-11-04: Memory corruption while processing voice packet with arbitrary data received from ADSP.
• CVE-2024-38419 - CVSS 7.8 (high), 2024-11-04: Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node.
• CVE-2024-43047 - CVSS 7.8 (high), 2024-10-07: Memory corruption while maintaining memory maps of HLOS memory.
• CVE-2024-38399 - CVSS 8.4 (high), 2024-10-07: Memory corruption while processing user packets to generate page faults.
• CVE-2024-33049 - CVSS 7.5 (high), 2024-10-07: Transient DOS while parsing noninheritance IE of Extension element when length of IE is 2 of beacon frame.
• CVE-2024-21455 - CVSS 7.8 (high), 2024-10-07: Memory corruption when a compat IOCTL call is followed by another IOCTL call from userspace to a driver.
• CVE-2024-38402 - CVSS 7.8 (high), 2024-09-02: Memory corruption while processing IOCTL call for getting group info.
• CVE-2024-33060 - CVSS 8.4 (high), 2024-09-02: Memory corruption when two threads try to map and unmap a single node simultaneously.
• CVE-2024-33052 - CVSS 7.8 (high), 2024-09-02: Memory corruption when user provides data for FM HCI command control operations.
• CVE-2024-33051 - CVSS 7.5 (high), 2024-09-02: Transient DOS while processing TIM IE from beacon frame as there is no check for IE length.
• CVE-2024-33050 - CVSS 7.5 (high), 2024-09-02: Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper.
• CVE-2024-33043 - CVSS 5.5 (medium), 2024-09-02: Transient DOS while handling PS event when Program Service name length offset value is set to 255.
• CVE-2024-33042 - CVSS 7.8 (high), 2024-09-02: Memory corruption when Alternative Frequency offset value is set to 255.
• CVE-2024-33045 - CVSS 8.4 (high), 2024-09-02: Memory corruption when BTFM client sends new messages over Slimbus to ADSP.
• CVE-2024-33016 - CVSS 6.8 (medium), 2024-09-02: memory corruption when an invalid firehose patch command is invoked.
• CVE-2024-33034 - CVSS 8.4 (high), 2024-08-05: Memory corruption can occur if VBOs hold outdated or invalid GPU SMMU mappings, especially when the binding and reclaiming of memory buffers are performed at…
• CVE-2024-33028 - CVSS 8.4 (high), 2024-08-05: Memory corruption as fence object may still be accessed in timeline destruct after isync fence is released.
• CVE-2024-33022 - CVSS 8.4 (high), 2024-08-05: Memory corruption while allocating memory in HGSL driver.
• CVE-2024-33021 - CVSS 8.4 (high), 2024-08-05: Memory corruption while processing IOCTL call to set metainfo.
• CVE-2024-33023 - CVSS 8.4 (high), 2024-08-05: Memory corruption while creating a fence to wait on timeline events, and simultaneously signal timeline events.
• CVE-2024-33015 - CVSS 7.5 (high), 2024-08-05: Transient DOS while parsing SCAN RNR IE when bytes received from AP is such that the size of the last param of IE is less than neighbor report.
• CVE-2024-33014 - CVSS 7.5 (high), 2024-08-05: Transient DOS while parsing ESP IE from beacon/probe response frame.
• CVE-2024-33012 - CVSS 7.5 (high), 2024-08-05: Transient DOS while parsing the multiple MBSSID IEs from the beacon, when the tag length is non-zero value but with end of beacon.
• CVE-2024-23384 - CVSS 8.4 (high), 2024-08-05: Memory corruption when the mapped pages in VBO are still mapped after reclaiming by shrinker.
• CVE-2024-33011 - CVSS 7.5 (high), 2024-08-05: Transient DOS while parsing the MBSSID IE from the beacons, when the MBSSID IE length is zero.
• CVE-2024-33010 - CVSS 7.5 (high), 2024-08-05: Transient DOS while parsing fragments of MBSSID IE from beacon frame.
• CVE-2024-23382 - CVSS 8.4 (high), 2024-08-05: Memory corruption while processing graphics kernel driver request to create DMA fence.
• CVE-2024-23357 - CVSS 6.2 (medium), 2024-08-05: Transient DOS while importing a PKCS#8-encoded RSA key with zero bytes modulus.
• CVE-2024-23356 - CVSS 7.8 (high), 2024-08-05: Memory corruption during session sign renewal request calls in HLOS.
• CVE-2024-23355 - CVSS 7.8 (high), 2024-08-05: Memory corruption when keymaster operation imports a shared key.
• CVE-2024-23353 - CVSS 7.5 (high), 2024-08-05: Transient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI.
• CVE-2024-23380 - CVSS 8.4 (high), 2024-07-01: Memory corruption while handling user packets during VBO bind operation.
• CVE-2024-23373 - CVSS 8.4 (high), 2024-07-01: Memory corruption when IOMMU unmap operation fails, the DMA and anon buffers are getting released.
• CVE-2024-23372 - CVSS 8.4 (high), 2024-07-01: Memory corruption while invoking IOCTL call for GPU memory allocation and size param is greater than expected size.
• CVE-2024-23368 - CVSS 7.8 (high), 2024-07-01: Memory corruption when allocating and accessing an entry in an SMEM partition.
• CVE-2024-21461 - CVSS 8.4 (high), 2024-07-01: Memory corruption while performing finish HMAC operation when context is freed by keymaster.
• CVE-2024-21465 - CVSS 7.8 (high), 2024-07-01: Memory corruption while processing key blob passed by the user.
• CVE-2024-21462 - CVSS 7.1 (high), 2024-07-01: Transient DOS while loading the TA ELF file.
• CVE-2023-43555 - CVSS 8.2 (high), 2024-06-03: Information disclosure in Video while parsing mp2 clip with invalid section length.
• CVE-2023-43551 - CVSS 9.1 (critical), 2024-06-03: Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode…
• CVE-2023-43542 - CVSS 7.8 (high), 2024-06-03: Memory corruption while copying a keyblob`s material when the key material`s size is not accurately checked.
• CVE-2024-21477 - CVSS 7.5 (high), 2024-05-06: Transient DOS while parsing a protected 802.11az Fine Time Measurement (FTM) frame.
• CVE-2024-23354 - CVSS 8.4 (high), 2024-05-06: Memory corruption when the IOCTL call is interrupted by a signal.