Product by Qualcomm
Sdx57m Firmware
133 known vulnerabilities in Sdx57m Firmware (Qualcomm), 0 of them actively exploited (CISA KEV).
Key figures
133
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
25
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2022-40507 | Double free in Core | 8.4 | |
| Critical | CVE-2025-27034 | Improper Validation of Array Index in Multi-Mode Call Processor | 9.8 | |
| Critical | CVE-2023-24855 | Use of Out-of-range Pointer Offset in Modem | 9.8 | |
| Critical | CVE-2022-33256 | Improper validation of array index in Multi-mode call processor | 9.8 | |
| High | CVE-2026-24084 | Insecure Security Identifier Mechanism in Multi-Mode Call Processor | 7.5 | |
| High | CVE-2023-33042 | Improper Input Validation in Modem | 7.5 | |
| Critical | CVE-2023-28540 | Improper Authentication in Data Modem | 9.1 | |
| High | CVE-2025-47392 | Integer Overflow or Wraparound in GPS | 8.8 | |
| Critical | CVE-2023-22388 | Use of Out-of-range Pointer Offset in Multi-mode Call Processor | 9.8 | |
| High | CVE-2023-33043 | Reachable Assertion in Modem | 7.5 | |
| High | CVE-2023-33044 | Reachable Assertion in Data Modem | 7.5 | |
| Critical | CVE-2023-22385 | Buffer Over-read in Data Modem | 8.2 | |
| Medium | CVE-2026-24078 | Exposure of Private Personal Information to an Unauthorized Actor in Data Modem | 6.5 | |
| Critical | CVE-2023-43551 | Improper Authentication in Multi-Mode Call Processor | 9.1 | |
| Critical | CVE-2023-43556 | Buffer Copy Without Checking Size of Input in Hypervisor | 9.3 | |
| Critical | CVE-2023-43538 | Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in TZ Secure OS | 9.3 | |
| High | CVE-2024-38420 | Improper Input Validation in Hypervisor | 8.8 | |
| High | CVE-2023-24849 | Buffer Over-read in Data Modem | 8.2 | |
| High | CVE-2023-24848 | Buffer Over-read in Data Modem | 8.2 | |
| Critical | CVE-2023-28578 | Improper Input Validation in Services | 9.3 | |
| High | CVE-2025-47383 | Missing Cryptographic Step in Data Modem | 7.2 | |
| Critical | CVE-2023-33072 | Buffer copy without checking size of Input in Core | 9.3 | |
| Critical | CVE-2023-33030 | Buffer Copy without Checking Size of Input in HLOS | 9.3 | |
| High | CVE-2022-25692 | Qualcomm Ar8035 Firmware: Denial of Service | 7.5 | |
| High | CVE-2025-27032 | Improper Access Control Applied to Mirrored or Aliased Memory Regions in Hypervisor | 7.8 |