
CVE-2024-53020 – Buffer Over-read in Data Network Stack & Connectivity
https://notcve.org/view.php?id=CVE-2024-53020
03 Jun 2025 — Information disclosure may occur while decoding the RTP packet with invalid header extension from network. • https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html • CWE-126: Buffer Over-read •

CVE-2024-53019 – Buffer Over-read in Data Network Stack & Connectivity
https://notcve.org/view.php?id=CVE-2024-53019
03 Jun 2025 — Information disclosure may occur while decoding the RTP packet with improper header length for number of contributing sources. • https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html • CWE-126: Buffer Over-read •

CVE-2024-53015 – Use After Free in Computer Vision
https://notcve.org/view.php?id=CVE-2024-53015
03 Jun 2025 — Memory corruption while processing IOCTL command to handle buffers associated with a session. • https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html • CWE-416: Use After Free •

CVE-2024-53013 – Buffer Copy Without Checking Size of Input in Audio
https://notcve.org/view.php?id=CVE-2024-53013
03 Jun 2025 — Memory corruption may occur while processing voice call registration with user. • https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •

CVE-2024-53010 – Improper Access Control in Core
https://notcve.org/view.php?id=CVE-2024-53010
03 Jun 2025 — Memory corruption may occur while attaching VM when the HLOS retains access to VM. • https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html • CWE-284: Improper Access Control •

CVE-2025-21468 – Out-of-bounds Write in Computer Vision
https://notcve.org/view.php?id=CVE-2025-21468
06 May 2025 — Memory corruption while reading response from FW, when buffer size is changed by FW while driver is using this size to write null character at the end of buffer. Corrupción de memoria al leer la respuesta del FW, cuando el tamaño del búfer es modificado por el FW mientras el controlador usa este tamaño para escribir un carácter nulo al final del búfer. • https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2025-bulletin.html • CWE-787: Out-of-bounds Write •

CVE-2025-21467 – Out-of-bounds Write in Computer Vision
https://notcve.org/view.php?id=CVE-2025-21467
06 May 2025 — Memory corruption while reading the FW response from the shared queue. Corrupción de memoria al leer la respuesta de FW desde la cola compartida. • https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2025-bulletin.html • CWE-787: Out-of-bounds Write •

CVE-2025-21453 – Use After Free in GPS HLOS Driver
https://notcve.org/view.php?id=CVE-2025-21453
06 May 2025 — Memory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential failures occur. Corrupción de memoria durante el procesamiento de una estructura de datos, cuando se accede a un iterador luego de haberlo eliminado, ocurren fallas potenciales. • https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2025-bulletin.html • CWE-416: Use After Free •

CVE-2024-49844 – Improper Input Validation in Automotive
https://notcve.org/view.php?id=CVE-2024-49844
06 May 2025 — Memory corruption while triggering commands in the PlayReady Trusted application. Corrupción de memoria al activar comandos en la aplicación PlayReady Trusted. • https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2025-bulletin.html • CWE-20: Improper Input Validation •

CVE-2024-49842 – Improper Access Control in Hypervisor
https://notcve.org/view.php?id=CVE-2024-49842
06 May 2025 — Memory corruption during memory mapping into protected VM address space due to incorrect API restrictions. Corrupción de memoria durante la asignación de memoria al espacio de dirección de VM protegido debido a restricciones de API incorrectas. • https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2025-bulletin.html • CWE-284: Improper Access Control •