Qualcomm APQ8037 Firmware vulnerabilities

100 CVEs affecting Qualcomm APQ8037 Firmware, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-27053, published 2025-10-09.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-11261: Qualcomm Multiple Chipsets Improper Input Validation Vulnerability, published 2021-06-09. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2021-12-01. EPSS: 1.6% chance of exploitation in the next 30 days. Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
CVE-2020-11192, published 2021-03-17. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. Out of bound write while parsing SDP string due to missing check on null termination in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial…
CVE-2020-11190, published 2021-03-17. Critical severity, CVSS 9.1. EPSS: 1% chance of exploitation in the next 30 days. Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
CVE-2020-11189, published 2021-03-17. Critical severity, CVSS 9.1. EPSS: 1% chance of exploitation in the next 30 days. Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
CVE-2020-11188, published 2021-03-17. Critical severity, CVSS 9.1. EPSS: 1% chance of exploitation in the next 30 days. Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
CVE-2020-11171, published 2021-03-17. Critical severity, CVSS 9.1. EPSS: 1% chance of exploitation in the next 30 days. Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
CVE-2020-11251, published 2021-04-07. Critical severity, CVSS 9.1. EPSS: 0.9% chance of exploitation in the next 30 days. Out-of-bounds read vulnerability while accessing DTMF payload due to lack of check of buffer length before copying in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…
CVE-2020-11247, published 2021-04-07. Critical severity, CVSS 9.1. EPSS: 0.9% chance of exploitation in the next 30 days. Out of bound memory read while unpacking data due to lack of offset length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…
CVE-2020-11191, published 2021-04-07. Critical severity, CVSS 9.1. EPSS: 0.9% chance of exploitation in the next 30 days. Out of bound read occurs while processing crafted SDP due to lack of check of null string in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics…
CVE-2020-11166, published 2021-03-17. Critical severity, CVSS 9.1. EPSS: 0.9% chance of exploitation in the next 30 days. Potential out of bound read exception when UE receives unusually large number of padding octets in the beginning of ROHC header in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…

Latest

CVE-2025-27053, published 2025-10-09. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption during PlayReady APP usecase while processing TA commands.
CVE-2025-21482, published 2025-09-24. High severity, CVSS 7.1. EPSS: 0.1% chance of exploitation in the next 30 days. Cryptographic issue while performing RSA PKCS padding decoding.
CVE-2025-21433, published 2025-07-08. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. Transient DOS when importing a PKCS#8-encoded RSA private key with a zero-sized modulus.
CVE-2024-43052, published 2024-12-02. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption while processing API calls to NPU with invalid input.
CVE-2016-10408, published 2024-11-26. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. QSEE will randomly experience a fatal error during execution due to speculative instruction fetches from device memory. Device memory is not valid executable memory.
CVE-2024-23385, published 2024-11-04. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. Transient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at UE.
CVE-2024-23359, published 2024-09-02. High severity, CVSS 8.2. EPSS: 0.3% chance of exploitation in the next 30 days. Information disclosure while decoding Tracking Area Update Accept or Attach Accept message received from network.
CVE-2024-23358, published 2024-09-02. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in Modem.
CVE-2024-23357, published 2024-08-05. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. Transient DOS while importing a PKCS#8-encoded RSA key with zero bytes modulus.
CVE-2024-23353, published 2024-08-05. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Transient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI.