This page lists publicly disclosed CVE vulnerabilities affecting qualcomm msm8608_firmware (linked via NVD CPE). Each row includes severity scores, summaries, and publication dates to help identify and analyze security issues.
| CVE | Summary | Source | Max CVSS | EPSS % | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-21484 | Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet. | [email protected] | 8.2 | 0.24% | 2025-09-24 | 2026-06-17 |
| CVE-2024-45552 | Information disclosure may occur during a video call if a device resets due to a non-conforming RTCP packet that doesn`t adhere to RFC standards. | [email protected] | 8.2 | 0.25% | 2025-04-07 | 2026-06-17 |
| CVE-2024-43052 | Memory corruption while processing API calls to NPU with invalid input. | [email protected] | 7.8 | 0.13% | 2024-12-02 | 2026-06-17 |
| CVE-2024-33056 | Memory corruption when allocating and accessing an entry in an SMEM partition continuously. | [email protected] | 8.4 | 0.08% | 2024-12-02 | 2026-06-17 |
| CVE-2024-38423 | Memory corruption while processing GPU page table switch. | [email protected] | 7.8 | 0.10% | 2024-11-04 | 2026-06-17 |
| CVE-2024-38422 | Memory corruption while processing voice packet with arbitrary data received from ADSP. | [email protected] | 7.8 | 0.10% | 2024-11-04 | 2026-06-17 |
| CVE-2024-23385 | Transient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at UE. | [email protected] | 7.5 | 0.18% | 2024-11-04 | 2026-06-17 |
| CVE-2024-33052 | Memory corruption when user provides data for FM HCI command control operations. | [email protected] | 7.8 | 0.13% | 2024-09-02 | 2026-06-17 |
| CVE-2024-33043 | Transient DOS while handling PS event when Program Service name length offset value is set to 255. | [email protected] | 5.5 | 0.11% | 2024-09-02 | 2026-06-17 |
| CVE-2024-33042 | Memory corruption when Alternative Frequency offset value is set to 255. | [email protected] | 7.8 | 0.13% | 2024-09-02 | 2026-06-17 |
| CVE-2024-23359 | Information disclosure while decoding Tracking Area Update Accept or Attach Accept message received from network. | [email protected] | 8.2 | 0.26% | 2024-09-02 | 2026-06-17 |
| CVE-2024-23358 | Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in Modem. | [email protected] | 7.5 | 0.26% | 2024-09-02 | 2026-06-17 |
| CVE-2024-23353 | Transient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI. | [email protected] | 7.5 | 0.35% | 2024-08-05 | 2026-06-17 |
| CVE-2023-43551 | Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command. | [email protected] | 9.1 | 0.26% | 2024-06-03 | 2026-06-17 |
| CVE-2024-21468 | Memory corruption when there is failed unmap operation in GPU. | [email protected] | 8.4 | 0.06% | 2024-04-01 | 2026-06-17 |
| CVE-2023-33066 | Memory corruption in Audio while processing RT proxy port register driver. | [email protected] | 8.4 | 0.07% | 2024-03-04 | 2026-06-17 |
| CVE-2023-33120 | Memory corruption in Audio when memory map command is executed consecutively in ADSP. | [email protected] | 7.8 | 0.14% | 2024-01-02 | 2026-06-17 |
| CVE-2023-33033 | Memory corruption in Audio during playback with speaker protection. | [email protected] | 8.4 | 0.06% | 2024-01-02 | 2026-06-17 |
| CVE-2023-33030 | Memory corruption in HLOS while running playready use-case. | [email protected] | 9.3 | 0.06% | 2024-01-02 | 2026-06-17 |
| CVE-2023-33107 KEV | Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call. | [email protected] | 8.4 | 0.89% | 2023-12-04 | 2026-06-17 |