📦 Qep8111 Firmware

by Qualcomm

🔍 What is Qep8111 Firmware?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2025-27034

CRITICAL CVSS 9.8 Sep 24, 2025

This vulnerability allows memory corruption during PLMN selection from the SOR failed list in Qualcomm chipsets, potentially enabling remote code execution. It affects devices using vulnerable Qualcom...

CVE-2025-21450

CRITICAL CVSS 9.1 Jul 8, 2025

This vulnerability allows attackers to intercept or manipulate data during downloads due to insecure connection methods. It affects systems using Qualcomm components with vulnerable firmware versions....

CVE-2023-28578

CRITICAL CVSS 9.3 Mar 4, 2024

CVE-2023-28578 is a memory corruption vulnerability in Qualcomm Core Services that occurs when removing a single event listener. This allows attackers to potentially execute arbitrary code or cause de...

CVE-2023-33072

CRITICAL CVSS 9.3 Feb 6, 2024

This CVE describes a memory corruption vulnerability in Qualcomm Core components that could allow attackers to execute arbitrary code or cause denial of service. It affects devices using vulnerable Qu...

CVE-2025-47376

HIGH CVSS 7.8 Mar 2, 2026

This vulnerability allows memory corruption when multiple processes concurrently access a shared buffer during IOCTL calls in Qualcomm components. Attackers could potentially execute arbitrary code or...

CVE-2025-47373

HIGH CVSS 7.8 Mar 2, 2026

This CVE describes a memory corruption vulnerability in Qualcomm Trusted Application (TA) invocation where accessing buffers with invalid length can lead to arbitrary code execution. It affects device...

CVE-2025-47366

HIGH CVSS 7.1 Feb 2, 2026

A cryptographic vulnerability in Qualcomm's Trusted Zone when triggered by the High-Level Operating System (HLOS) providing incorrect input. This allows potential cryptographic bypass or manipulation ...

CVE-2025-47345

HIGH CVSS 8.4 Jan 7, 2026

A cryptographic vulnerability in license data encryption could allow attackers to decrypt or manipulate license information. This affects systems using Qualcomm components with vulnerable encryption i...

CVE-2025-47346

HIGH CVSS 7.8 Jan 7, 2026

This vulnerability involves memory corruption in the trusted application's secure logging command processing, which could allow attackers to execute arbitrary code or cause denial of service. It affec...

CVE-2025-47348

HIGH CVSS 7.8 Jan 7, 2026

This vulnerability allows memory corruption in the trusted application when processing identity credential operations, potentially leading to arbitrary code execution or system compromise. It affects ...

CVE-2025-47339

HIGH CVSS 7.8 Jan 7, 2026

This vulnerability involves memory corruption during HDCP session deinitialization, potentially allowing attackers to execute arbitrary code or cause denial of service. It affects systems using Qualco...

CVE-2025-47320

HIGH CVSS 7.8 Dec 18, 2025

This vulnerability allows memory corruption during MFC channel configuration while playing music, potentially enabling arbitrary code execution. It affects devices with Qualcomm chipsets that use the ...

CVE-2025-47321

HIGH CVSS 7.8 Dec 18, 2025

This vulnerability involves memory corruption when copying packets from Unix domain socket clients, potentially allowing attackers to execute arbitrary code or cause denial of service. It affects syst...

CVE-2025-47322

HIGH CVSS 7.8 Dec 18, 2025

This vulnerability allows attackers to cause memory corruption through improper handling of IOCTL calls when setting modes. Successful exploitation could lead to privilege escalation or denial of serv...

CVE-2025-47323

HIGH CVSS 7.8 Dec 18, 2025

This vulnerability allows memory corruption when handling large GPR packets between user and root contexts in Qualcomm components. Attackers could potentially execute arbitrary code with elevated priv...

CVE-2025-27070

HIGH CVSS 7.8 Nov 4, 2025

This CVE describes a memory corruption vulnerability in Qualcomm's encryption/decryption command processing. Attackers could exploit this to execute arbitrary code or cause denial of service. Affects ...

CVE-2025-27053

HIGH CVSS 7.8 Oct 9, 2025

This vulnerability allows memory corruption in Qualcomm's PlayReady APP implementation when processing TA commands, potentially enabling arbitrary code execution. It affects devices with Qualcomm chip...

CVE-2025-27032

HIGH CVSS 7.8 Sep 24, 2025

This vulnerability allows memory corruption when loading a PIL authenticated VM image without proper cache coherency maintenance. Attackers could potentially execute arbitrary code or cause denial of ...

CVE-2025-21452

HIGH CVSS 7.5 Aug 6, 2025

This vulnerability allows attackers to cause a denial-of-service (DoS) condition on LTE networks by sending specially crafted random-access response (RAR) messages with invalid PDU lengths. It affects...

CVE-2025-27052

HIGH CVSS 7.8 Jul 8, 2025

This vulnerability allows memory corruption in the diag component when processing data packets from Unix clients. Attackers could potentially execute arbitrary code or cause denial of service on affec...

CVE-2025-27043

HIGH CVSS 7.8 Jul 8, 2025

This vulnerability allows memory corruption in Qualcomm video firmware when processing manipulated payloads. Attackers could potentially execute arbitrary code or cause denial of service. Affects devi...

CVE-2025-21446

HIGH CVSS 7.5 Jul 8, 2025

This vulnerability allows a denial-of-service (DoS) condition in Qualcomm wireless LAN (WLAN) chipsets when processing vendor-specific information elements in BTM (BSS Transition Management) request f...

CVE-2025-21422

HIGH CVSS 7.1 Jul 8, 2025

This cryptographic vulnerability in Qualcomm chipsets allows improper handling of cryptographic API calls, potentially leading to key corruption or IV reuse. This affects devices using vulnerable Qual...

CVE-2025-21432

HIGH CVSS 7.8 Jul 8, 2025

This vulnerability allows memory corruption when retrieving CBOR data from a Trusted Application (TA) in Qualcomm components. Attackers could potentially execute arbitrary code or cause denial of serv...

CVE-2024-49845

HIGH CVSS 7.8 May 6, 2025

This vulnerability involves memory corruption during the FRS UDS generation process in Qualcomm components, potentially allowing attackers to execute arbitrary code or cause denial of service. It affe...

CVE-2024-49835

HIGH CVSS 7.8 May 6, 2025

This CVE describes a memory corruption vulnerability in Qualcomm's secure file reading functionality. Attackers could exploit this to execute arbitrary code or cause denial of service. The vulnerabili...

CVE-2024-49842

HIGH CVSS 7.8 May 6, 2025

This CVE describes a memory corruption vulnerability in Qualcomm components where incorrect API restrictions allow memory mapping into protected VM address space. Attackers could exploit this to execu...

CVE-2024-45557

HIGH CVSS 7.8 Apr 7, 2025

This vulnerability allows memory corruption in Qualcomm chipsets when Trusted Execution Environment (TEE) components process untrusted memory addresses without proper validation. Attackers could poten...

CVE-2024-45549

HIGH CVSS 7.7 Apr 7, 2025

This vulnerability allows unauthorized information disclosure when creating MQ channels in affected Qualcomm products. Attackers can potentially access sensitive data that should be protected. This af...

CVE-2024-33058

HIGH CVSS 7.5 Apr 7, 2025

This CVE describes a memory corruption vulnerability in Qualcomm's ADSP (Audio Digital Signal Processor) when handling memory allocation from the HLOS (High-Level Operating System) DDR memory. Attacke...

CVE-2025-21424

HIGH CVSS 7.8 Mar 3, 2025

This CVE describes a use-after-free vulnerability (CWE-416) in Qualcomm NPU driver APIs that can be triggered through concurrent calls, leading to memory corruption. It affects devices with Qualcomm c...

CVE-2024-53027

HIGH CVSS 7.5 Mar 3, 2025

This vulnerability in Qualcomm components allows a denial-of-service attack when processing country information elements. It affects devices using Qualcomm chipsets, potentially causing temporary serv...

CVE-2024-49838

HIGH CVSS 8.2 Feb 3, 2025

This vulnerability allows attackers to read sensitive memory contents when parsing malformed OCI (Oracle Call Interface) information elements with invalid length fields. It affects systems using Qualc...

CVE-2024-45584

HIGH CVSS 7.8 Feb 3, 2025

This vulnerability allows memory corruption when userspace makes a compat IOCTL call followed by a normal IOCTL call, potentially leading to privilege escalation or denial of service. It affects Qualc...

CVE-2024-38420

HIGH CVSS 8.8 Feb 3, 2025

This vulnerability allows memory corruption when configuring a hypervisor-based input virtual device, potentially enabling arbitrary code execution or system compromise. It affects systems using Qualc...

CVE-2024-45553

HIGH CVSS 7.8 Jan 6, 2025

This CVE describes a use-after-free vulnerability in Qualcomm components where memory corruption can occur when process-specific maps are improperly handled in global lists. If exploited, it could all...

CVE-2024-33044

HIGH CVSS 8.4 Dec 2, 2024

This vulnerability allows memory corruption when configuring SMR/S2CR registers in Bypass mode on Qualcomm chipsets. Attackers could potentially execute arbitrary code or cause denial of service. Affe...

CVE-2024-33056

HIGH CVSS 8.4 Dec 2, 2024

CVE-2024-33056 is a memory corruption vulnerability in Qualcomm's Shared Memory (SMEM) subsystem that allows attackers to potentially execute arbitrary code or cause denial of service. This affects de...

CVE-2024-23385

HIGH CVSS 7.5 Nov 4, 2024

This vulnerability allows attackers to cause a denial-of-service (DoS) condition in mobile devices by sending specially crafted MAC RAR messages with invalid PDU lengths, triggering a modem reset. It ...

CVE-2024-38402

HIGH CVSS 7.8 Sep 2, 2024

This vulnerability allows attackers to cause memory corruption through a specific IOCTL call for group information retrieval. Successful exploitation could lead to arbitrary code execution or system c...

CVE-2024-33060

HIGH CVSS 8.4 Sep 2, 2024

This vulnerability allows memory corruption when two threads simultaneously map and unmap a single node in Qualcomm components. Successful exploitation could lead to arbitrary code execution or system...

CVE-2024-33051

HIGH CVSS 7.5 Sep 2, 2024

This vulnerability allows an attacker to cause a denial-of-service (DoS) condition in affected Wi-Fi systems by sending specially crafted beacon frames with malformed TIM (Traffic Indication Map) Info...

CVE-2024-33045

HIGH CVSS 8.4 Sep 2, 2024

This vulnerability allows memory corruption when the BTFM client sends new messages over Slimbus to the ADSP in Qualcomm chipsets. Attackers could potentially execute arbitrary code or cause denial of...

CVE-2024-23362

HIGH CVSS 7.1 Sep 2, 2024

This vulnerability involves a cryptographic issue in RSA key parsing in COBR format, potentially allowing attackers to bypass cryptographic protections or cause denial of service. It affects systems u...

CVE-2025-47330

MEDIUM CVSS 5.5 Jan 7, 2026

This vulnerability allows an attacker to cause a temporary denial of service (DoS) by sending specially crafted video packets to vulnerable systems. It affects devices using Qualcomm video firmware co...

CVE-2025-47331

MEDIUM CVSS 6.1 Jan 7, 2026

This CVE describes an information disclosure vulnerability in Qualcomm firmware that leaks sensitive data when processing firmware events. It affects devices using vulnerable Qualcomm chipsets, potent...

CVE-2025-47333

MEDIUM CVSS 6.6 Jan 7, 2026

This vulnerability allows memory corruption in Qualcomm's cryptographic driver when handling buffer mapping operations. Attackers could potentially execute arbitrary code or cause denial of service. A...

CVE-2025-47319

MEDIUM CVSS 6.7 Dec 18, 2025

This vulnerability exposes internal Trusted Application (TA) communication APIs to the High-Level Operating System (HLOS), allowing unauthorized access to sensitive information exchanged between TAs. ...

CVE-2025-21464

MEDIUM CVSS 6.5 Aug 6, 2025

This vulnerability allows attackers to read sensitive information from image processing operations by manipulating offset and size parameters. It affects systems using Qualcomm components with vulnera...

CVE-2025-21465

MEDIUM CVSS 6.5 Aug 6, 2025

This vulnerability allows attackers to read sensitive information from memory when processing specially crafted MBN files. It affects systems using Qualcomm chipsets that process MBN files, potentiall...

CVE-2024-53009

MEDIUM CVSS 5.3 Jul 8, 2025

This CVE describes a memory corruption vulnerability in the mailbox component of Qualcomm automotive systems. Attackers could potentially execute arbitrary code or cause denial of service by exploitin...

CVE-2024-38426

MEDIUM CVSS 5.4 Mar 3, 2025

This vulnerability in Qualcomm UE (User Equipment) authentication processing allows improper authentication that could lead to information disclosure. It affects devices using Qualcomm chipsets with v...

CVE-2024-23357

MEDIUM CVSS 6.2 Aug 5, 2024

This vulnerability allows an attacker to cause a denial of service (DoS) by providing a specially crafted PKCS#8-encoded RSA key with a zero-byte modulus during key import operations. Systems using af...

CVE-2024-23350

MEDIUM CVSS 6.5 Aug 5, 2024

This vulnerability allows attackers to cause a permanent denial-of-service condition in Qualcomm cellular modems by sending specially crafted NAS transport payloads. It affects devices using Qualcomm ...