Ssg2125p Firmware (Qualcomm) - vulnerabilities (CVEs)

268 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-02-02. Vendor: Qualcomm.

CVEs of Ssg2125p Firmware

• CVE-2025-47397 - CVSS 7.8 (high), 2026-02-02: Memory Corruption when initiating GPU memory mapping using scatter-gather lists due to unchecked IOMMU mapping errors.
• CVE-2025-47366 - CVSS 7.8 (high), 2026-02-02: Cryptographic issue when a Trusted Zone with outdated code is triggered by a HLOS providing incorrect input.
• CVE-2025-47402 - CVSS 6.5 (medium), 2026-02-02: Transient DOS when processing a received frame with an excessively large authentication information element.
• CVE-2025-47398 - CVSS 7.8 (high), 2026-02-02: Memory Corruption while deallocating graphics processing unit memory buffers due to improper handling of memory pointers.
• CVE-2025-47369 - CVSS 5.5 (medium), 2026-01-07: Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID.
• CVE-2025-47348 - CVSS 7.8 (high), 2026-01-07: Memory corruption while processing identity credential operations in the trusted application.
• CVE-2025-47334 - CVSS 6.7 (medium), 2026-01-07: Memory corruption while processing shared command buffer packet between camera userspace and kernel.
• CVE-2025-47331 - CVSS 6.1 (medium), 2026-01-07: Information disclosure while processing a firmware event.
• CVE-2025-47330 - CVSS 5.5 (medium), 2026-01-07: Transient DOS while parsing video packets received from the video firmware.
• CVE-2025-47333 - CVSS 6.6 (medium), 2026-01-07: Memory corruption while handling buffer mapping operations in the cryptographic driver.
• CVE-2025-47332 - CVSS 6.7 (medium), 2026-01-07: Memory corruption while processing a config call from userspace.
• CVE-2025-47321 - CVSS 7.8 (high), 2025-12-18: Memory corruption while copying packets received from unix clients.
• CVE-2025-47323 - CVSS 7.8 (high), 2025-12-18: Memory corruption while routing GPR packets between user and root when handling large data packet.
• CVE-2025-47319 - CVSS 6.7 (medium), 2025-12-18: Information disclosure while exposing internal TA-to-TA communication APIs to HLOS
• CVE-2025-27063 - CVSS 7.8 (high), 2025-12-18: Memory corruption during video playback when video session open fails with time out error.
• CVE-2025-47370 - CVSS 6.5 (medium), 2025-11-04: Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan.
• CVE-2025-27070 - CVSS 7.8 (high), 2025-11-04: Memory corruption while performing encryption and decryption commands.
• CVE-2025-27054 - CVSS 7.8 (high), 2025-10-09: Memory corruption while processing a malformed license file during reboot.
• CVE-2025-27053 - CVSS 7.8 (high), 2025-10-09: Memory corruption during PlayReady APP usecase while processing TA commands.
• CVE-2025-47318 - CVSS 7.5 (high), 2025-09-24: Transient DOS while parsing the EPTM test control message to get the test pattern.
• CVE-2025-27032 - CVSS 7.8 (high), 2025-09-24: memory corruption while loading a PIL authenticated VM, when authenticated VM image is loaded without maintaining cache coherency.
• CVE-2025-21482 - CVSS 7.1 (high), 2025-09-24: Cryptographic issue while performing RSA PKCS padding decoding.
• CVE-2025-27073 - CVSS 7.5 (high), 2025-08-06: Transient DOS while creating NDP instance.
• CVE-2025-27066 - CVSS 7.5 (high), 2025-08-06: Transient DOS while processing an ANQP message.
• CVE-2025-27065 - CVSS 7.5 (high), 2025-08-06: Transient DOS while processing a frame with malformed shared-key descriptor.
• CVE-2025-21465 - CVSS 6.5 (medium), 2025-08-06: Information disclosure while processing the hash segment in an MBN file.
• CVE-2025-21464 - CVSS 6.5 (medium), 2025-08-06: Information disclosure while reading data from an image using specified offset and size parameters.
• CVE-2025-27061 - CVSS 7.8 (high), 2025-07-08: Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmware.
• CVE-2025-27057 - CVSS 7.5 (high), 2025-07-08: Transient DOS while handling beacon frames with invalid IE header length.
• CVE-2025-27042 - CVSS 7.8 (high), 2025-07-08: Memory corruption while processing video packets received from video firmware.
• CVE-2025-21449 - CVSS 7.5 (high), 2025-07-08: Transient DOS may occur while processing malformed length field in SSID IEs.
• CVE-2025-21446 - CVSS 7.5 (high), 2025-07-08: Transient DOS may occur when processing vendor-specific information elements while parsing a WLAN frame for BTM requests.
• CVE-2025-21454 - CVSS 7.5 (high), 2025-07-08: Transient DOS while processing received beacon frame.
• CVE-2025-21432 - CVSS 7.8 (high), 2025-07-08: Memory corruption while retrieving the CBOR data from TA.
• CVE-2025-21426 - CVSS 7.8 (high), 2025-07-08: Memory corruption while processing camera TPG write request.
• CVE-2025-21422 - CVSS 7.8 (high), 2025-07-08: Cryptographic issue while processing crypto API calls, missing checks may lead to corrupted key usage or IV reuses.
• CVE-2025-21433 - CVSS 6.2 (medium), 2025-07-08: Transient DOS when importing a PKCS#8-encoded RSA private key with a zero-sized modulus.
• CVE-2024-53009 - CVSS 7.8 (high), 2025-07-08: Memory corruption while operating the mailbox in Automotive.
• CVE-2025-21463 - CVSS 7.5 (high), 2025-06-03: Transient DOS while processing the EHT operation IE in the received beacon frame.
• CVE-2024-53010 - CVSS 7.8 (high), 2025-06-03: Memory corruption may occur while attaching VM when the HLOS retains access to VM.
• CVE-2025-21468 - CVSS 7.8 (high), 2025-05-06: Memory corruption while reading response from FW, when buffer size is changed by FW while driver is using this size to write null character at the end of…
• CVE-2025-21459 - CVSS 7.5 (high), 2025-05-06: Transient DOS while parsing per STA profile in ML IE.
• CVE-2024-49842 - CVSS 7.8 (high), 2025-05-06: Memory corruption during memory mapping into protected VM address space due to incorrect API restrictions.
• CVE-2024-49841 - CVSS 7.8 (high), 2025-05-06: Memory corruption during memory assignment to headless peripheral VM due to incorrect error code handling.
• CVE-2025-21448 - CVSS 7.5 (high), 2025-04-07: Transient DOS may occur while parsing SSID in action frames.
• CVE-2025-21434 - CVSS 7.5 (high), 2025-04-07: Transient DOS may occur while parsing EHT operation IE or EHT capability IE.
• CVE-2024-45557 - CVSS 7.8 (high), 2025-04-07: Memory corruption can occur when TME processes addresses from TZ and MPSS requests without proper validation.
• CVE-2024-49848 - CVSS 6.7 (medium), 2025-04-07: Memory corruption while processing multiple IOCTL calls from HLOS to DSP.
• CVE-2024-45549 - CVSS 7.7 (high), 2025-04-07: Information disclosure while creating MQ channels.
• CVE-2024-45556 - CVSS 6.5 (medium), 2025-04-07: Cryptographic issue may arise because the access control configuration permits Linux to read key registers in TCSR.
• CVE-2024-45551 - CVSS 6.2 (medium), 2025-04-07: Cryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can be dropped on verification failure, potentially leading to…
• CVE-2024-43046 - CVSS 5.5 (medium), 2025-04-07: There may be information disclosure during memory re-allocation in TZ Secure OS.
• CVE-2024-33058 - CVSS 7.5 (high), 2025-04-07: Memory corruption while assigning memory from the source DDR memory(HLOS) to ADSP.
• CVE-2024-53014 - CVSS 7.8 (high), 2025-03-03: Memory corruption may occur while validating ports and channels in Audio driver.
• CVE-2024-53011 - CVSS 7.9 (high), 2025-03-03: Information disclosure may occur due to improper permission and access controls to Video Analytics engine.
• CVE-2024-53024 - CVSS 7.8 (high), 2025-03-03: Memory corruption in display driver while detaching a device.
• CVE-2024-45580 - CVSS 7.8 (high), 2025-03-03: Memory corruption while handling multuple IOCTL calls from userspace for remote invocation.
• CVE-2024-43056 - CVSS 6.5 (medium), 2025-03-03: Transient DOS during hypervisor virtual I/O operation in a virtual machine.
• CVE-2024-43051 - CVSS 5.5 (medium), 2025-03-03: Information disclosure while deriving keys for a session for any Widevine use case.
• CVE-2024-49838 - CVSS 8.2 (high), 2025-02-03: Information disclosure while parsing the OCI IE with invalid length.
• CVE-2024-49834 - CVSS 7.8 (high), 2025-02-03: Memory corruption while power-up or power-down sequence of the camera sensor.
• CVE-2024-49833 - CVSS 7.8 (high), 2025-02-03: Memory corruption can occur in the camera when an invalid CID is used.
• CVE-2024-49839 - CVSS 9.8 (critical), 2025-02-03: Memory corruption during management frame processing due to mismatch in T2LM info element.
• CVE-2024-38420 - CVSS 8.8 (high), 2025-02-03: Memory corruption while configuring a Hypervisor based input virtual device.
• CVE-2024-45553 - CVSS 7.8 (high), 2025-01-06: Memory corruption can occur when process-specific maps are added to the global list. If a map is removed from the global list while another thread is using it…
• CVE-2024-33041 - CVSS 7.8 (high), 2025-01-06: Memory corruption when input parameter validation for number of fences is missing for fence frame IOCTL calls,
• CVE-2024-33055 - CVSS 7.8 (high), 2025-01-06: Memory corruption while invoking IOCTL calls to unmap the DMA buffers.
• CVE-2024-33063 - CVSS 7.5 (high), 2024-12-02: Transient DOS while parsing the ML IE when a beacon with common info length of the ML IE greater than the ML IE inside which this element is present.
• CVE-2024-33056 - CVSS 8.4 (high), 2024-12-02: Memory corruption when allocating and accessing an entry in an SMEM partition continuously.
• CVE-2024-33044 - CVSS 8.4 (high), 2024-12-02: Memory corruption while Configuring the SMR/S2CR register in Bypass mode.
• CVE-2024-38415 - CVSS 7.8 (high), 2024-11-04: Memory corruption while handling session errors from firmware.
• CVE-2024-38408 - CVSS 9.1 (critical), 2024-11-04: Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.
• CVE-2024-38403 - CVSS 7.5 (high), 2024-11-04: Transient DOS while parsing BTM ML IE when per STA profile is not included.
• CVE-2024-33068 - CVSS 7.5 (high), 2024-11-04: Transient DOS while parsing fragments of MBSSID IE from beacon frame.
• CVE-2024-38405 - CVSS 7.5 (high), 2024-11-04: Transient DOS while processing the CU information from RNR IE.
• CVE-2024-23377 - CVSS 6.7 (medium), 2024-11-04: Memory corruption while invoking IOCTL command from user-space, when a user modifies the original packet size of the command after system properties have been…
• CVE-2024-38397 - CVSS 7.5 (high), 2024-10-07: Transient DOS while parsing probe response and assoc response frame.
• CVE-2024-33073 - CVSS 8.2 (high), 2024-10-07: Information disclosure while parsing the BSS parameter change count or MLD capabilities fields of the ML IE.
• CVE-2024-38402 - CVSS 7.8 (high), 2024-09-02: Memory corruption while processing IOCTL call for getting group info.
• CVE-2024-33060 - CVSS 8.4 (high), 2024-09-02: Memory corruption when two threads try to map and unmap a single node simultaneously.
• CVE-2024-33057 - CVSS 7.5 (high), 2024-09-02: Transient DOS while parsing the multi-link element Control field when common information length check is missing before updating the location.
• CVE-2024-33050 - CVSS 7.5 (high), 2024-09-02: Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper.
• CVE-2024-33048 - CVSS 7.5 (high), 2024-09-02: Transient DOS while parsing the received TID-to-link mapping element of beacon/probe response frame.
• CVE-2024-33051 - CVSS 7.5 (high), 2024-09-02: Transient DOS while processing TIM IE from beacon frame as there is no check for IE length.
• CVE-2024-33035 - CVSS 8.4 (high), 2024-09-02: Memory corruption while calculating total metadata size when a very high reserved size is requested by gralloc clients.
• CVE-2024-33045 - CVSS 8.4 (high), 2024-09-02: Memory corruption when BTFM client sends new messages over Slimbus to ADSP.
• CVE-2024-33038 - CVSS 7.8 (high), 2024-09-02: Memory corruption while passing untrusted/corrupted pointers from DSP to EVA.
• CVE-2024-23362 - CVSS 7.1 (high), 2024-09-02: Cryptographic issue while parsing RSA keys in COBR format.
• CVE-2024-33016 - CVSS 6.8 (medium), 2024-09-02: memory corruption when an invalid firehose patch command is invoked.
• CVE-2024-23364 - CVSS 7.5 (high), 2024-09-02: Transient DOS when processing the non-transmitted BSSID profile sub-elements present within the MBSSID Information Element (IE) of a beacon frame that is…
• CVE-2024-33034 - CVSS 8.4 (high), 2024-08-05: Memory corruption can occur if VBOs hold outdated or invalid GPU SMMU mappings, especially when the binding and reclaiming of memory buffers are performed at…
• CVE-2024-33025 - CVSS 7.5 (high), 2024-08-05: Transient DOS while parsing the BSS parameter change count or MLD capabilities fields of the ML IE.
• CVE-2024-33024 - CVSS 7.5 (high), 2024-08-05: Transient DOS while parsing the ML IE when a beacon with length field inside the common info of ML IE greater than the ML IE length.
• CVE-2024-33026 - CVSS 7.5 (high), 2024-08-05: Transient DOS while parsing probe response and assoc response frame when received frame length is less than max size of timestamp.
• CVE-2024-33020 - CVSS 7.5 (high), 2024-08-05: Transient DOS while processing TID-to-link mapping IE elements.
• CVE-2024-33023 - CVSS 8.4 (high), 2024-08-05: Memory corruption while creating a fence to wait on timeline events, and simultaneously signal timeline events.
• CVE-2024-33015 - CVSS 7.5 (high), 2024-08-05: Transient DOS while parsing SCAN RNR IE when bytes received from AP is such that the size of the last param of IE is less than neighbor report.
• CVE-2024-33019 - CVSS 7.5 (high), 2024-08-05: Transient DOS while parsing the received TID-to-link mapping action frame.
• CVE-2024-33018 - CVSS 7.5 (high), 2024-08-05: Transient DOS while parsing the received TID-to-link mapping element of the TID-to-link mapping action frame.
• CVE-2024-33014 - CVSS 7.5 (high), 2024-08-05: Transient DOS while parsing ESP IE from beacon/probe response frame.