
CVE-2024-53026 – Buffer Over-read in Data Network Stack & Connectivity
https://notcve.org/view.php?id=CVE-2024-53026
03 Jun 2025 — Information disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call. • https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html • CWE-126: Buffer Over-read •

CVE-2024-53021 – Buffer Over-read in Data Network Stack & Connectivity
https://notcve.org/view.php?id=CVE-2024-53021
03 Jun 2025 — Information disclosure may occur while processing goodbye RTCP packet from network. • https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html • CWE-126: Buffer Over-read •

CVE-2024-53020 – Buffer Over-read in Data Network Stack & Connectivity
https://notcve.org/view.php?id=CVE-2024-53020
03 Jun 2025 — Information disclosure may occur while decoding the RTP packet with invalid header extension from network. • https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html • CWE-126: Buffer Over-read •

CVE-2024-53010 – Improper Access Control in Core
https://notcve.org/view.php?id=CVE-2024-53010
03 Jun 2025 — Memory corruption may occur while attaching VM when the HLOS retains access to VM. • https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html • CWE-284: Improper Access Control •

CVE-2025-21468 – Out-of-bounds Write in Computer Vision
https://notcve.org/view.php?id=CVE-2025-21468
06 May 2025 — Memory corruption while reading response from FW, when buffer size is changed by FW while driver is using this size to write null character at the end of buffer. Corrupción de memoria al leer la respuesta del FW, cuando el tamaño del búfer es modificado por el FW mientras el controlador usa este tamaño para escribir un carácter nulo al final del búfer. • https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2025-bulletin.html • CWE-787: Out-of-bounds Write •

CVE-2025-21467 – Out-of-bounds Write in Computer Vision
https://notcve.org/view.php?id=CVE-2025-21467
06 May 2025 — Memory corruption while reading the FW response from the shared queue. Corrupción de memoria al leer la respuesta de FW desde la cola compartida. • https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2025-bulletin.html • CWE-787: Out-of-bounds Write •

CVE-2025-21453 – Use After Free in GPS HLOS Driver
https://notcve.org/view.php?id=CVE-2025-21453
06 May 2025 — Memory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential failures occur. Corrupción de memoria durante el procesamiento de una estructura de datos, cuando se accede a un iterador luego de haberlo eliminado, ocurren fallas potenciales. • https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2025-bulletin.html • CWE-416: Use After Free •

CVE-2024-49844 – Improper Input Validation in Automotive
https://notcve.org/view.php?id=CVE-2024-49844
06 May 2025 — Memory corruption while triggering commands in the PlayReady Trusted application. Corrupción de memoria al activar comandos en la aplicación PlayReady Trusted. • https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2025-bulletin.html • CWE-20: Improper Input Validation •

CVE-2024-49842 – Improper Access Control in Hypervisor
https://notcve.org/view.php?id=CVE-2024-49842
06 May 2025 — Memory corruption during memory mapping into protected VM address space due to incorrect API restrictions. Corrupción de memoria durante la asignación de memoria al espacio de dirección de VM protegido debido a restricciones de API incorrectas. • https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2025-bulletin.html • CWE-284: Improper Access Control •

CVE-2024-49841 – Detection of Error Condition Without Action in Hypervisor
https://notcve.org/view.php?id=CVE-2024-49841
06 May 2025 — Memory corruption during memory assignment to headless peripheral VM due to incorrect error code handling. Corrupción de memoria durante la asignación de memoria a una máquina virtual periférica sin cabeza debido a un manejo incorrecto del código de error. • https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2025-bulletin.html • CWE-390: Detection of Error Condition Without Action •