Qualcomm Snapdragon Wear 4100+ Firmware vulnerabilities

26 CVEs affecting Qualcomm Snapdragon Wear 4100+ Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-49847, published 2025-05-06.

More from Qualcomm.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-33020, published 2023-09-05. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. Transient DOS in WLAN Host when an invalid channel (like channel out of range) is received in STA during CSA IE.
• CVE-2023-33019, published 2023-09-05. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. Transient DOS in WLAN Host while doing channel switch announcement (CSA), when a mobile station receives invalid channel in CSA IE.
• CVE-2024-38426, published 2025-03-03. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. While processing the authentication message in UE, improper authentication may lead to information disclosure.
• CVE-2023-43548, published 2024-03-04. Critical severity, CVSS 9.8. EPSS: 0.3% chance of exploitation in the next 30 days. Memory corruption while parsing qcp clip with invalid chunk data size.
• CVE-2024-49847, published 2025-05-06. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Transient DOS while processing of a registration acceptance OTA due to incorrect ciphering key data IE.
• CVE-2023-43551, published 2024-06-03. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command.
• CVE-2024-38404, published 2025-02-03. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in modem.
• CVE-2023-43555, published 2024-06-03. High severity, CVSS 7.5. EPSS: 0.2% chance of exploitation in the next 30 days. Information disclosure in Video while parsing mp2 clip with invalid section length.
• CVE-2023-28575, published 2023-08-08. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. The cam_get_device_priv function does not check the type of handle being returned (device/session/link). This would lead to invalid type usage if a wrong handle is passed to it.
• CVE-2023-22667, published 2023-07-04. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory Corruption in Audio while allocating the ion buffer during the music playback.

Latest

• CVE-2024-49844, published 2025-05-06. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption while triggering commands in the PlayReady Trusted application.
• CVE-2024-49842, published 2025-05-06. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption during memory mapping into protected VM address space due to incorrect API restrictions.
• CVE-2024-21475, published 2024-05-06. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption when the payload received from firmware is not as per the expected protocol size.
• CVE-2023-43528, published 2024-05-06. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. Information disclosure when the ADSP payload size received in HLOS in response to Audio Stream Manager matrix session is less than this expected size.
• CVE-2023-43527, published 2024-05-06. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. Information disclosure while parsing dts header atom in Video.