📦 Qcm2150 Firmware

by Qualcomm

🔍 What is Qcm2150 Firmware?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2025-21483

CRITICAL CVSS 9.8 Sep 24, 2025

This vulnerability allows memory corruption when a user equipment (UE) device receives RTP packets during NALU reassembly, potentially leading to remote code execution. It affects Qualcomm chipsets us...

CVE-2020-3703

CRITICAL CVSS 9.8 Nov 2, 2020

This CVE describes a buffer over-read vulnerability in Bluetooth peripheral firmware across multiple Qualcomm Snapdragon platforms. Attackers can exploit this by sending specially crafted Bluetooth pa...

CVE-2025-27053

HIGH CVSS 7.8 Oct 9, 2025

This vulnerability allows memory corruption in Qualcomm's PlayReady APP implementation when processing TA commands, potentially enabling arbitrary code execution. It affects devices with Qualcomm chip...

CVE-2025-21487

HIGH CVSS 8.2 Sep 24, 2025

This vulnerability allows attackers to read sensitive information from memory when User Equipment (UE) processes malformed RTP packets with manipulated payload length fields. It affects devices using ...

CVE-2024-53021

HIGH CVSS 8.2 Jun 3, 2025

This vulnerability allows information disclosure when processing RTCP goodbye packets in Qualcomm products. Attackers can exploit this to leak sensitive data from affected systems. Primarily impacts d...

CVE-2025-21424

HIGH CVSS 7.8 Mar 3, 2025

This CVE describes a use-after-free vulnerability (CWE-416) in Qualcomm NPU driver APIs that can be triggered through concurrent calls, leading to memory corruption. It affects devices with Qualcomm c...

CVE-2024-43052

HIGH CVSS 7.8 Dec 2, 2024

This vulnerability allows memory corruption in Qualcomm NPU (Neural Processing Unit) drivers when processing API calls with invalid input. Attackers could potentially execute arbitrary code or cause d...

CVE-2024-38423

HIGH CVSS 7.8 Nov 4, 2024

This vulnerability allows memory corruption during GPU page table switching in Qualcomm GPU drivers. Attackers could potentially execute arbitrary code or cause denial of service. Affects devices usin...

CVE-2024-38415

HIGH CVSS 7.8 Nov 4, 2024

This CVE describes a use-after-free vulnerability (CWE-416) in Qualcomm firmware that occurs when handling session errors. An attacker could exploit this memory corruption to execute arbitrary code or...

CVE-2024-33060

HIGH CVSS 8.4 Sep 2, 2024

This vulnerability allows memory corruption when two threads simultaneously map and unmap a single node in Qualcomm components. Successful exploitation could lead to arbitrary code execution or system...

CVE-2024-33042

HIGH CVSS 7.8 Sep 2, 2024

CVE-2024-33042 is a memory corruption vulnerability in Qualcomm chipsets that occurs when the Alternative Frequency offset value is set to 255. This could allow attackers to execute arbitrary code or ...

CVE-2024-23373

HIGH CVSS 8.4 Jul 1, 2024

This vulnerability allows memory corruption when IOMMU unmap operations fail, leading to improper release of DMA and anonymous buffers. It affects systems using Qualcomm chipsets with vulnerable IOMMU...

CVE-2024-23368

HIGH CVSS 7.8 Jul 1, 2024

This CVE describes a memory corruption vulnerability in Qualcomm's Shared Memory (SMEM) subsystem that could allow attackers to execute arbitrary code or cause denial of service. The vulnerability aff...

CVE-2023-28547

HIGH CVSS 8.4 Apr 1, 2024

This CVE describes a memory corruption vulnerability in the SPS Application's sorter Trusted Application (TA) when requesting public keys. Successful exploitation could allow attackers to execute arbi...

CVE-2024-38426

MEDIUM CVSS 5.4 Mar 3, 2025

This vulnerability in Qualcomm UE (User Equipment) authentication processing allows improper authentication that could lead to information disclosure. It affects devices using Qualcomm chipsets with v...

CVE-2024-23357

MEDIUM CVSS 6.2 Aug 5, 2024

This vulnerability allows an attacker to cause a denial of service (DoS) by providing a specially crafted PKCS#8-encoded RSA key with a zero-byte modulus during key import operations. Systems using af...