📦 Sg4150p Firmware

by Qualcomm

🔍 What is Sg4150p Firmware?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2025-21483

CRITICAL CVSS 9.8 Sep 24, 2025

This vulnerability allows memory corruption when a user equipment (UE) device receives RTP packets during NALU reassembly, potentially leading to remote code execution. It affects Qualcomm chipsets us...

CVE-2023-43551

CRITICAL CVSS 9.1 Jun 3, 2024

This vulnerability allows a rogue LTE base station to bypass authentication during network attachment, enabling man-in-the-middle attacks. It affects mobile devices with Qualcomm chipsets that handle ...

CVE-2023-28578

CRITICAL CVSS 9.3 Mar 4, 2024

CVE-2023-28578 is a memory corruption vulnerability in Qualcomm Core Services that occurs when removing a single event listener. This allows attackers to potentially execute arbitrary code or cause de...

CVE-2023-33072

CRITICAL CVSS 9.3 Feb 6, 2024

This CVE describes a memory corruption vulnerability in Qualcomm Core components that could allow attackers to execute arbitrary code or cause denial of service. It affects devices using vulnerable Qu...

CVE-2023-33054

CRITICAL CVSS 9.1 Dec 5, 2023

CVE-2023-33054 is a cryptographic vulnerability in Qualcomm's GPS HLOS driver that allows improper authentication when downloading GNSS assistance data. This affects Android devices with Qualcomm chip...

CVE-2023-28540

CRITICAL CVSS 9.1 Oct 3, 2023

This vulnerability in Qualcomm Data Modem chips allows attackers to bypass TLS authentication during handshake, potentially enabling man-in-the-middle attacks. It affects devices using vulnerable Qual...

CVE-2023-21651

CRITICAL CVSS 9.3 Aug 8, 2023

CVE-2023-21651 is a memory corruption vulnerability in Qualcomm's Trusted Execution Environment (TEE) due to incorrect type conversion in secure_io_read/write functions. This allows attackers to poten...

CVE-2022-40514

CRITICAL CVSS 9.8 Feb 12, 2023

This vulnerability allows remote attackers to execute arbitrary code or cause denial of service on affected devices by exploiting a buffer overflow in WLAN firmware. It affects Qualcomm chipsets used ...

CVE-2025-47366

HIGH CVSS 7.1 Feb 2, 2026

A cryptographic vulnerability in Qualcomm's Trusted Zone when triggered by the High-Level Operating System (HLOS) providing incorrect input. This allows potential cryptographic bypass or manipulation ...

CVE-2025-47348

HIGH CVSS 7.8 Jan 7, 2026

This vulnerability allows memory corruption in the trusted application when processing identity credential operations, potentially leading to arbitrary code execution or system compromise. It affects ...

CVE-2025-47320

HIGH CVSS 7.8 Dec 18, 2025

This vulnerability allows memory corruption during MFC channel configuration while playing music, potentially enabling arbitrary code execution. It affects devices with Qualcomm chipsets that use the ...

CVE-2025-47322

HIGH CVSS 7.8 Dec 18, 2025

This vulnerability allows attackers to cause memory corruption through improper handling of IOCTL calls when setting modes. Successful exploitation could lead to privilege escalation or denial of serv...

CVE-2025-47323

HIGH CVSS 7.8 Dec 18, 2025

This vulnerability allows memory corruption when handling large GPR packets between user and root contexts in Qualcomm components. Attackers could potentially execute arbitrary code with elevated priv...

CVE-2025-27070

HIGH CVSS 7.8 Nov 4, 2025

This CVE describes a memory corruption vulnerability in Qualcomm's encryption/decryption command processing. Attackers could exploit this to execute arbitrary code or cause denial of service. Affects ...

CVE-2025-27053

HIGH CVSS 7.8 Oct 9, 2025

This vulnerability allows memory corruption in Qualcomm's PlayReady APP implementation when processing TA commands, potentially enabling arbitrary code execution. It affects devices with Qualcomm chip...

CVE-2025-21487

HIGH CVSS 8.2 Sep 24, 2025

This vulnerability allows attackers to read sensitive information from memory when User Equipment (UE) processes malformed RTP packets with manipulated payload length fields. It affects devices using ...

CVE-2025-21482

HIGH CVSS 7.1 Sep 24, 2025

This CVE describes a cryptographic vulnerability in RSA PKCS padding decoding that could allow attackers to decrypt sensitive data or forge digital signatures. It affects Qualcomm products implementin...

CVE-2025-27052

HIGH CVSS 7.8 Jul 8, 2025

This vulnerability allows memory corruption in the diag component when processing data packets from Unix clients. Attackers could potentially execute arbitrary code or cause denial of service on affec...

CVE-2025-27043

HIGH CVSS 7.8 Jul 8, 2025

This vulnerability allows memory corruption in Qualcomm video firmware when processing manipulated payloads. Attackers could potentially execute arbitrary code or cause denial of service. Affects devi...

CVE-2025-21427

HIGH CVSS 8.2 Jul 8, 2025

This vulnerability allows information disclosure when a User Equipment (UE) device receives RTP packets from the network. It affects mobile devices with Qualcomm chipsets that process RTP traffic. Att...

CVE-2025-21422

HIGH CVSS 7.1 Jul 8, 2025

This cryptographic vulnerability in Qualcomm chipsets allows improper handling of cryptographic API calls, potentially leading to key corruption or IV reuse. This affects devices using vulnerable Qual...

CVE-2025-21432

HIGH CVSS 7.8 Jul 8, 2025

This vulnerability allows memory corruption when retrieving CBOR data from a Trusted Application (TA) in Qualcomm components. Attackers could potentially execute arbitrary code or cause denial of serv...

CVE-2024-53021

HIGH CVSS 8.2 Jun 3, 2025

This vulnerability allows information disclosure when processing RTCP goodbye packets in Qualcomm products. Attackers can exploit this to leak sensitive data from affected systems. Primarily impacts d...

CVE-2024-49835

HIGH CVSS 7.8 May 6, 2025

This CVE describes a memory corruption vulnerability in Qualcomm's secure file reading functionality. Attackers could exploit this to execute arbitrary code or cause denial of service. The vulnerabili...

CVE-2024-45552

HIGH CVSS 8.2 Apr 7, 2025

This vulnerability allows information disclosure during video calls when a device receives a malformed RTCP packet that doesn't conform to RFC standards, causing the device to reset. It affects device...

CVE-2024-43066

HIGH CVSS 7.8 Apr 7, 2025

This CVE describes a use-after-free vulnerability (CWE-416) in Qualcomm components that occurs during file descriptor handling in listener registration/deregistration processes. Successful exploitatio...

CVE-2025-21424

HIGH CVSS 7.8 Mar 3, 2025

This CVE describes a use-after-free vulnerability (CWE-416) in Qualcomm NPU driver APIs that can be triggered through concurrent calls, leading to memory corruption. It affects devices with Qualcomm c...

CVE-2024-53027

HIGH CVSS 7.5 Mar 3, 2025

This vulnerability in Qualcomm components allows a denial-of-service attack when processing country information elements. It affects devices using Qualcomm chipsets, potentially causing temporary serv...

CVE-2024-53024

HIGH CVSS 7.8 Mar 3, 2025

This CVE describes a memory corruption vulnerability in Qualcomm display drivers that occurs when detaching a device. Successful exploitation could allow attackers to execute arbitrary code or cause d...

CVE-2024-49838

HIGH CVSS 8.2 Feb 3, 2025

This vulnerability allows attackers to read sensitive memory contents when parsing malformed OCI (Oracle Call Interface) information elements with invalid length fields. It affects systems using Qualc...

CVE-2024-45584

HIGH CVSS 7.8 Feb 3, 2025

This vulnerability allows memory corruption when userspace makes a compat IOCTL call followed by a normal IOCTL call, potentially leading to privilege escalation or denial of service. It affects Qualc...

CVE-2024-45553

HIGH CVSS 7.8 Jan 6, 2025

This CVE describes a use-after-free vulnerability in Qualcomm components where memory corruption can occur when process-specific maps are improperly handled in global lists. If exploited, it could all...

CVE-2024-33056

HIGH CVSS 8.4 Dec 2, 2024

CVE-2024-33056 is a memory corruption vulnerability in Qualcomm's Shared Memory (SMEM) subsystem that allows attackers to potentially execute arbitrary code or cause denial of service. This affects de...

CVE-2024-43048

HIGH CVSS 7.8 Dec 2, 2024

This vulnerability allows memory corruption when invalid input is passed to the GPU Headroom API call in Qualcomm components. Attackers could potentially execute arbitrary code or cause denial of serv...

CVE-2024-43047

HIGH CVSS 7.8 Oct 7, 2024

This CVE describes a use-after-free vulnerability (CWE-416) in Qualcomm's memory management subsystem that allows attackers to corrupt memory while maintaining memory maps of HLOS (High-Level Operatin...

CVE-2024-38399

HIGH CVSS 8.4 Oct 7, 2024

This vulnerability allows memory corruption through specially crafted user packets that trigger page faults in Qualcomm components. Attackers could potentially execute arbitrary code or cause denial o...

CVE-2024-33049

HIGH CVSS 7.5 Oct 7, 2024

This vulnerability allows an attacker to cause a denial-of-service (DoS) condition by sending specially crafted beacon frames with specific Extension element parameters. It affects systems using Qualc...

CVE-2024-21455

HIGH CVSS 7.8 Oct 7, 2024

This vulnerability allows memory corruption when a compat IOCTL call is followed by another IOCTL call from userspace to a Qualcomm driver. Attackers could potentially execute arbitrary code or cause ...

CVE-2024-38402

HIGH CVSS 7.8 Sep 2, 2024

This vulnerability allows attackers to cause memory corruption through a specific IOCTL call for group information retrieval. Successful exploitation could lead to arbitrary code execution or system c...

CVE-2024-33060

HIGH CVSS 8.4 Sep 2, 2024

This vulnerability allows memory corruption when two threads simultaneously map and unmap a single node in Qualcomm components. Successful exploitation could lead to arbitrary code execution or system...

CVE-2024-33051

HIGH CVSS 7.5 Sep 2, 2024

This vulnerability allows an attacker to cause a denial-of-service (DoS) condition in affected Wi-Fi systems by sending specially crafted beacon frames with malformed TIM (Traffic Indication Map) Info...

CVE-2024-33042

HIGH CVSS 7.8 Sep 2, 2024

CVE-2024-33042 is a memory corruption vulnerability in Qualcomm chipsets that occurs when the Alternative Frequency offset value is set to 255. This could allow attackers to execute arbitrary code or ...

CVE-2024-33045

HIGH CVSS 8.4 Sep 2, 2024

This vulnerability allows memory corruption when the BTFM client sends new messages over Slimbus to the ADSP in Qualcomm chipsets. Attackers could potentially execute arbitrary code or cause denial of...

CVE-2024-33028

HIGH CVSS 8.4 Aug 5, 2024

This CVE describes a use-after-free vulnerability in Qualcomm graphics drivers where a fence object may still be accessed after being released during timeline destruction. This memory corruption could...

CVE-2024-33022

HIGH CVSS 8.4 Aug 5, 2024

This vulnerability allows memory corruption in the HGSL driver when allocating memory, potentially leading to arbitrary code execution or system crashes. It affects devices using Qualcomm chipsets wit...

CVE-2024-33012

HIGH CVSS 7.5 Aug 5, 2024

This vulnerability allows attackers to cause a denial-of-service (DoS) condition in Wi-Fi systems by sending specially crafted beacon frames with malformed MBSSID information elements. It affects devi...

CVE-2024-33014

HIGH CVSS 7.5 Aug 5, 2024

This vulnerability allows an attacker to cause a Denial of Service (DoS) by sending specially crafted beacon or probe response frames containing malformed ESP IE (Extended Service Period Information E...

CVE-2024-33010

HIGH CVSS 7.5 Aug 5, 2024

This vulnerability allows attackers to cause a denial-of-service (DoS) condition by sending specially crafted MBSSID Information Element fragments in Wi-Fi beacon frames. It affects systems using Qual...

CVE-2025-47334

MEDIUM CVSS 6.7 Jan 7, 2026

This vulnerability involves memory corruption in Qualcomm camera drivers when processing shared command buffer packets between userspace and kernel. It allows attackers with camera access to potential...

CVE-2025-47330

MEDIUM CVSS 5.5 Jan 7, 2026

This vulnerability allows an attacker to cause a temporary denial of service (DoS) by sending specially crafted video packets to vulnerable systems. It affects devices using Qualcomm video firmware co...

CVE-2025-47331

MEDIUM CVSS 6.1 Jan 7, 2026

This CVE describes an information disclosure vulnerability in Qualcomm firmware that leaks sensitive data when processing firmware events. It affects devices using vulnerable Qualcomm chipsets, potent...

CVE-2025-47333

MEDIUM CVSS 6.6 Jan 7, 2026

This vulnerability allows memory corruption in Qualcomm's cryptographic driver when handling buffer mapping operations. Attackers could potentially execute arbitrary code or cause denial of service. A...

CVE-2025-27041

MEDIUM CVSS 5.5 Oct 9, 2025

This vulnerability allows an attacker to cause a temporary denial of service (DoS) by sending specially crafted video packets to affected Qualcomm devices. The issue occurs during video packet process...

CVE-2025-21464

MEDIUM CVSS 6.5 Aug 6, 2025

This vulnerability allows attackers to read sensitive information from image processing operations by manipulating offset and size parameters. It affects systems using Qualcomm components with vulnera...

CVE-2025-21465

MEDIUM CVSS 6.5 Aug 6, 2025

This vulnerability allows attackers to read sensitive information from memory when processing specially crafted MBN files. It affects systems using Qualcomm chipsets that process MBN files, potentiall...

CVE-2024-38426

MEDIUM CVSS 5.4 Mar 3, 2025

This vulnerability in Qualcomm UE (User Equipment) authentication processing allows improper authentication that could lead to information disclosure. It affects devices using Qualcomm chipsets with v...

CVE-2024-23357

MEDIUM CVSS 6.2 Aug 5, 2024

This vulnerability allows an attacker to cause a denial of service (DoS) by providing a specially crafted PKCS#8-encoded RSA key with a zero-byte modulus during key import operations. Systems using af...