CVE-2010-3403: Qualcomm Extensible Diagnostic Monitor

High severity, CVSS 9.3. EPSS: 2.5% chance of exploitation in the next 30 days.

Untrusted search path vulnerability in Qualcomm eXtensible Diagnostic Monitor (QXDM) 03.09.19 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse mfc71enu.dll that is located in the same folder as a .isf file.

Affected products

• Qualcomm Extensible Diagnostic Monitor: version 03.09.19 only

Published 2010-09-16. Last modified 2026-06-16.