cvelistv5 - cve-2024-53026

CVE-2024-53026 (GCVE-0-2024-53026)

Vulnerability from cvelistv5

Published

2025-06-03 05:52

Modified

2025-06-03 15:11

Severity ?

8.2 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L

CWE

CWE-126 - Buffer Over-read

Summary

Information disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call.

References

►

URL

Tags

product-security@qualcomm.com

https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html

Impacted products

	Vendor	Product	Version
	Qualcomm, Inc.	Snapdragon	Version: APQ8017 Version: APQ8064AU Version: AQT1000 Version: FastConnect 6200 Version: FastConnect 6700 Version: FastConnect 6800 Version: FastConnect 6900 Version: FastConnect 7800 Version: MSM8996AU Version: QAM8255P Version: QAM8295P Version: QAM8620P Version: QAM8650P Version: QAM8775P Version: QAMSRV1H Version: QAMSRV1M Version: QCA6310 Version: QCA6320 Version: QCA6335 Version: QCA6391 Version: QCA6420 Version: QCA6421 Version: QCA6426 Version: QCA6430 Version: QCA6431 Version: QCA6436 Version: QCA6564 Version: QCA6564A Version: QCA6564AU Version: QCA6574 Version: QCA6574A Version: QCA6574AU Version: QCA6595 Version: QCA6595AU Version: QCA6678AQ Version: QCA6688AQ Version: QCA6696 Version: QCA6698AQ Version: QCA6797AQ Version: QCM2150 Version: QCM2290 Version: QCM4290 Version: QCM4325 Version: QCM4490 Version: QCM5430 Version: QCM6125 Version: QCM6490 Version: QCM8550 Version: QCN9011 Version: QCN9012 Version: QCN9274 Version: QCS2290 Version: QCS410 Version: QCS4290 Version: QCS4490 Version: QCS5430 Version: QCS610 Version: QCS6125 Version: QCS615 Version: QCS6490 Version: QCS8300 Version: QCS8550 Version: QCS9100 Version: QMP1000 Version: Qualcomm 205 Mobile Platform Version: Qualcomm 215 Mobile Platform Version: Qualcomm Video Collaboration VC1 Platform Version: Qualcomm Video Collaboration VC3 Platform Version: Robotics RB3 Platform Version: SA4150P Version: SA4155P Version: SA6145P Version: SA6150P Version: SA6155 Version: SA6155P Version: SA7255P Version: SA7775P Version: SA8145P Version: SA8150P Version: SA8155 Version: SA8155P Version: SA8195P Version: SA8255P Version: SA8295P Version: SA8620P Version: SA8650P Version: SA8770P Version: SA8775P Version: SA9000P Version: SD 675 Version: SD 8 Gen1 5G Version: SD626 Version: SD660 Version: SD670 Version: SD675 Version: SD730 Version: SD835 Version: SD855 Version: SD865 5G Version: SD888 Version: SDM429W Version: SDX55 Version: SG4150P Version: SM4125 Version: SM4635 Version: SM6250 Version: SM6370 Version: SM6650 Version: SM6650P Version: SM7250P Version: SM7315 Version: SM7325P Version: SM7635 Version: SM7675 Version: SM7675P Version: SM8550P Version: SM8635 Version: SM8635P Version: SM8650Q Version: SM8735 Version: SM8750 Version: SM8750P Version: Smart Display 200 Platform (APQ5053-AA) Version: Snapdragon 210 Processor Version: Snapdragon 212 Mobile Platform Version: Snapdragon 4 Gen 1 Mobile Platform Version: Snapdragon 4 Gen 2 Mobile Platform Version: Snapdragon 425 Mobile Platform Version: Snapdragon 429 Mobile Platform Version: Snapdragon 439 Mobile Platform Version: Snapdragon 460 Mobile Platform Version: Snapdragon 480 5G Mobile Platform Version: Snapdragon 480+ 5G Mobile Platform (SM4350-AC) Version: Snapdragon 625 Mobile Platform Version: Snapdragon 626 Mobile Platform Version: Snapdragon 630 Mobile Platform Version: Snapdragon 632 Mobile Platform Version: Snapdragon 636 Mobile Platform Version: Snapdragon 660 Mobile Platform Version: Snapdragon 662 Mobile Platform Version: Snapdragon 670 Mobile Platform Version: Snapdragon 675 Mobile Platform Version: Snapdragon 678 Mobile Platform (SM6150-AC) Version: Snapdragon 680 4G Mobile Platform Version: Snapdragon 685 4G Mobile Platform (SM6225-AD) Version: Snapdragon 690 5G Mobile Platform Version: Snapdragon 695 5G Mobile Platform Version: Snapdragon 710 Mobile Platform Version: Snapdragon 720G Mobile Platform Version: Snapdragon 730 Mobile Platform (SM7150-AA) Version: Snapdragon 730G Mobile Platform (SM7150-AB) Version: Snapdragon 732G Mobile Platform (SM7150-AC) Version: Snapdragon 750G 5G Mobile Platform Version: Snapdragon 765 5G Mobile Platform (SM7250-AA) Version: Snapdragon 765G 5G Mobile Platform (SM7250-AB) Version: Snapdragon 768G 5G Mobile Platform (SM7250-AC) Version: Snapdragon 778G 5G Mobile Platform Version: Snapdragon 778G+ 5G Mobile Platform (SM7325-AE) Version: Snapdragon 780G 5G Mobile Platform Version: Snapdragon 782G Mobile Platform (SM7325-AF) Version: Snapdragon 7c+ Gen 3 Compute Version: Snapdragon 8 Gen 1 Mobile Platform Version: Snapdragon 8 Gen 2 Mobile Platform Version: Snapdragon 8 Gen 3 Mobile Platform Version: Snapdragon 8+ Gen 1 Mobile Platform Version: Snapdragon 8+ Gen 2 Mobile Platform Version: Snapdragon 820 Automotive Platform Version: Snapdragon 835 Mobile PC Platform Version: Snapdragon 845 Mobile Platform Version: Snapdragon 855 Mobile Platform Version: Snapdragon 855+/860 Mobile Platform (SM8150-AC) Version: Snapdragon 865 5G Mobile Platform Version: Snapdragon 865+ 5G Mobile Platform (SM8250-AB) Version: Snapdragon 870 5G Mobile Platform (SM8250-AC) Version: Snapdragon 888 5G Mobile Platform Version: Snapdragon 888+ 5G Mobile Platform (SM8350-AC) Version: Snapdragon W5+ Gen 1 Wearable Platform Version: Snapdragon X50 5G Modem-RF System Version: Snapdragon X55 5G Modem-RF System Version: Snapdragon XR1 Platform Version: Snapdragon XR2 5G Platform Version: Snapdragon XR2+ Gen 1 Platform Version: SRV1H Version: SRV1L Version: SRV1M Version: SW5100 Version: SW5100P Version: SXR1120 Version: SXR2130 Version: TalynPlus Version: Vision Intelligence 100 Platform (APQ8053-AA) Version: Vision Intelligence 200 Platform (APQ8053-AC) Version: Vision Intelligence 300 Platform Version: Vision Intelligence 400 Platform Version: WCD9326 Version: WCD9335 Version: WCD9340 Version: WCD9341 Version: WCD9370 Version: WCD9371 Version: WCD9375 Version: WCD9378 Version: WCD9380 Version: WCD9385 Version: WCD9390 Version: WCD9395 Version: WCN3610 Version: WCN3615 Version: WCN3620 Version: WCN3660B Version: WCN3680 Version: WCN3680B Version: WCN3910 Version: WCN3950 Version: WCN3980 Version: WCN3988 Version: WCN3990 Version: WCN6450 Version: WCN6650 Version: WCN6740 Version: WCN6755 Version: WCN7750 Version: WCN7860 Version: WCN7861 Version: WCN7880 Version: WCN7881 Version: WSA8810 Version: WSA8815 Version: WSA8830 Version: WSA8832 Version: WSA8835 Version: WSA8840 Version: WSA8845 Version: WSA8845H

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-53026",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-06-03T15:10:37.803924Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-06-03T15:11:13.353Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Snapdragon Auto",
            "Snapdragon Compute",
            "Snapdragon Connectivity",
            "Snapdragon Consumer IOT",
            "Snapdragon Industrial IOT",
            "Snapdragon Mobile",
            "Snapdragon Wearables"
          ],
          "product": "Snapdragon",
          "vendor": "Qualcomm, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "APQ8017"
            },
            {
              "status": "affected",
              "version": "APQ8064AU"
            },
            {
              "status": "affected",
              "version": "AQT1000"
            },
            {
              "status": "affected",
              "version": "FastConnect 6200"
            },
            {
              "status": "affected",
              "version": "FastConnect 6700"
            },
            {
              "status": "affected",
              "version": "FastConnect 6800"
            },
            {
              "status": "affected",
              "version": "FastConnect 6900"
            },
            {
              "status": "affected",
              "version": "FastConnect 7800"
            },
            {
              "status": "affected",
              "version": "MSM8996AU"
            },
            {
              "status": "affected",
              "version": "QAM8255P"
            },
            {
              "status": "affected",
              "version": "QAM8295P"
            },
            {
              "status": "affected",
              "version": "QAM8620P"
            },
            {
              "status": "affected",
              "version": "QAM8650P"
            },
            {
              "status": "affected",
              "version": "QAM8775P"
            },
            {
              "status": "affected",
              "version": "QAMSRV1H"
            },
            {
              "status": "affected",
              "version": "QAMSRV1M"
            },
            {
              "status": "affected",
              "version": "QCA6310"
            },
            {
              "status": "affected",
              "version": "QCA6320"
            },
            {
              "status": "affected",
              "version": "QCA6335"
            },
            {
              "status": "affected",
              "version": "QCA6391"
            },
            {
              "status": "affected",
              "version": "QCA6420"
            },
            {
              "status": "affected",
              "version": "QCA6421"
            },
            {
              "status": "affected",
              "version": "QCA6426"
            },
            {
              "status": "affected",
              "version": "QCA6430"
            },
            {
              "status": "affected",
              "version": "QCA6431"
            },
            {
              "status": "affected",
              "version": "QCA6436"
            },
            {
              "status": "affected",
              "version": "QCA6564"
            },
            {
              "status": "affected",
              "version": "QCA6564A"
            },
            {
              "status": "affected",
              "version": "QCA6564AU"
            },
            {
              "status": "affected",
              "version": "QCA6574"
            },
            {
              "status": "affected",
              "version": "QCA6574A"
            },
            {
              "status": "affected",
              "version": "QCA6574AU"
            },
            {
              "status": "affected",
              "version": "QCA6595"
            },
            {
              "status": "affected",
              "version": "QCA6595AU"
            },
            {
              "status": "affected",
              "version": "QCA6678AQ"
            },
            {
              "status": "affected",
              "version": "QCA6688AQ"
            },
            {
              "status": "affected",
              "version": "QCA6696"
            },
            {
              "status": "affected",
              "version": "QCA6698AQ"
            },
            {
              "status": "affected",
              "version": "QCA6797AQ"
            },
            {
              "status": "affected",
              "version": "QCM2150"
            },
            {
              "status": "affected",
              "version": "QCM2290"
            },
            {
              "status": "affected",
              "version": "QCM4290"
            },
            {
              "status": "affected",
              "version": "QCM4325"
            },
            {
              "status": "affected",
              "version": "QCM4490"
            },
            {
              "status": "affected",
              "version": "QCM5430"
            },
            {
              "status": "affected",
              "version": "QCM6125"
            },
            {
              "status": "affected",
              "version": "QCM6490"
            },
            {
              "status": "affected",
              "version": "QCM8550"
            },
            {
              "status": "affected",
              "version": "QCN9011"
            },
            {
              "status": "affected",
              "version": "QCN9012"
            },
            {
              "status": "affected",
              "version": "QCN9274"
            },
            {
              "status": "affected",
              "version": "QCS2290"
            },
            {
              "status": "affected",
              "version": "QCS410"
            },
            {
              "status": "affected",
              "version": "QCS4290"
            },
            {
              "status": "affected",
              "version": "QCS4490"
            },
            {
              "status": "affected",
              "version": "QCS5430"
            },
            {
              "status": "affected",
              "version": "QCS610"
            },
            {
              "status": "affected",
              "version": "QCS6125"
            },
            {
              "status": "affected",
              "version": "QCS615"
            },
            {
              "status": "affected",
              "version": "QCS6490"
            },
            {
              "status": "affected",
              "version": "QCS8300"
            },
            {
              "status": "affected",
              "version": "QCS8550"
            },
            {
              "status": "affected",
              "version": "QCS9100"
            },
            {
              "status": "affected",
              "version": "QMP1000"
            },
            {
              "status": "affected",
              "version": "Qualcomm 205 Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Qualcomm 215 Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Qualcomm Video Collaboration VC1 Platform"
            },
            {
              "status": "affected",
              "version": "Qualcomm Video Collaboration VC3 Platform"
            },
            {
              "status": "affected",
              "version": "Robotics RB3 Platform"
            },
            {
              "status": "affected",
              "version": "SA4150P"
            },
            {
              "status": "affected",
              "version": "SA4155P"
            },
            {
              "status": "affected",
              "version": "SA6145P"
            },
            {
              "status": "affected",
              "version": "SA6150P"
            },
            {
              "status": "affected",
              "version": "SA6155"
            },
            {
              "status": "affected",
              "version": "SA6155P"
            },
            {
              "status": "affected",
              "version": "SA7255P"
            },
            {
              "status": "affected",
              "version": "SA7775P"
            },
            {
              "status": "affected",
              "version": "SA8145P"
            },
            {
              "status": "affected",
              "version": "SA8150P"
            },
            {
              "status": "affected",
              "version": "SA8155"
            },
            {
              "status": "affected",
              "version": "SA8155P"
            },
            {
              "status": "affected",
              "version": "SA8195P"
            },
            {
              "status": "affected",
              "version": "SA8255P"
            },
            {
              "status": "affected",
              "version": "SA8295P"
            },
            {
              "status": "affected",
              "version": "SA8620P"
            },
            {
              "status": "affected",
              "version": "SA8650P"
            },
            {
              "status": "affected",
              "version": "SA8770P"
            },
            {
              "status": "affected",
              "version": "SA8775P"
            },
            {
              "status": "affected",
              "version": "SA9000P"
            },
            {
              "status": "affected",
              "version": "SD 675"
            },
            {
              "status": "affected",
              "version": "SD 8 Gen1 5G"
            },
            {
              "status": "affected",
              "version": "SD626"
            },
            {
              "status": "affected",
              "version": "SD660"
            },
            {
              "status": "affected",
              "version": "SD670"
            },
            {
              "status": "affected",
              "version": "SD675"
            },
            {
              "status": "affected",
              "version": "SD730"
            },
            {
              "status": "affected",
              "version": "SD835"
            },
            {
              "status": "affected",
              "version": "SD855"
            },
            {
              "status": "affected",
              "version": "SD865 5G"
            },
            {
              "status": "affected",
              "version": "SD888"
            },
            {
              "status": "affected",
              "version": "SDM429W"
            },
            {
              "status": "affected",
              "version": "SDX55"
            },
            {
              "status": "affected",
              "version": "SG4150P"
            },
            {
              "status": "affected",
              "version": "SM4125"
            },
            {
              "status": "affected",
              "version": "SM4635"
            },
            {
              "status": "affected",
              "version": "SM6250"
            },
            {
              "status": "affected",
              "version": "SM6370"
            },
            {
              "status": "affected",
              "version": "SM6650"
            },
            {
              "status": "affected",
              "version": "SM6650P"
            },
            {
              "status": "affected",
              "version": "SM7250P"
            },
            {
              "status": "affected",
              "version": "SM7315"
            },
            {
              "status": "affected",
              "version": "SM7325P"
            },
            {
              "status": "affected",
              "version": "SM7635"
            },
            {
              "status": "affected",
              "version": "SM7675"
            },
            {
              "status": "affected",
              "version": "SM7675P"
            },
            {
              "status": "affected",
              "version": "SM8550P"
            },
            {
              "status": "affected",
              "version": "SM8635"
            },
            {
              "status": "affected",
              "version": "SM8635P"
            },
            {
              "status": "affected",
              "version": "SM8650Q"
            },
            {
              "status": "affected",
              "version": "SM8735"
            },
            {
              "status": "affected",
              "version": "SM8750"
            },
            {
              "status": "affected",
              "version": "SM8750P"
            },
            {
              "status": "affected",
              "version": "Smart Display 200 Platform (APQ5053-AA)"
            },
            {
              "status": "affected",
              "version": "Snapdragon 210 Processor"
            },
            {
              "status": "affected",
              "version": "Snapdragon 212 Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 4 Gen 1 Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 4 Gen 2 Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 425 Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 429 Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 439 Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 460 Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 480 5G Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 480+ 5G Mobile Platform (SM4350-AC)"
            },
            {
              "status": "affected",
              "version": "Snapdragon 625 Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 626 Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 630 Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 632 Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 636 Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 660 Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 662 Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 670 Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 675 Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 678 Mobile Platform (SM6150-AC)"
            },
            {
              "status": "affected",
              "version": "Snapdragon 680 4G Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 685 4G Mobile Platform (SM6225-AD)"
            },
            {
              "status": "affected",
              "version": "Snapdragon 690 5G Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 695 5G Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 710 Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 720G Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 730 Mobile Platform (SM7150-AA)"
            },
            {
              "status": "affected",
              "version": "Snapdragon 730G Mobile Platform (SM7150-AB)"
            },
            {
              "status": "affected",
              "version": "Snapdragon 732G Mobile Platform (SM7150-AC)"
            },
            {
              "status": "affected",
              "version": "Snapdragon 750G 5G Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 765 5G Mobile Platform (SM7250-AA)"
            },
            {
              "status": "affected",
              "version": "Snapdragon 765G 5G Mobile Platform (SM7250-AB)"
            },
            {
              "status": "affected",
              "version": "Snapdragon 768G 5G Mobile Platform (SM7250-AC)"
            },
            {
              "status": "affected",
              "version": "Snapdragon 778G 5G Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 778G+ 5G Mobile Platform (SM7325-AE)"
            },
            {
              "status": "affected",
              "version": "Snapdragon 780G 5G Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 782G Mobile Platform (SM7325-AF)"
            },
            {
              "status": "affected",
              "version": "Snapdragon 7c+ Gen 3 Compute"
            },
            {
              "status": "affected",
              "version": "Snapdragon 8 Gen 1 Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 8 Gen 2 Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 8 Gen 3 Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 8+ Gen 1 Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 8+ Gen 2 Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 820 Automotive Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 835 Mobile PC Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 845 Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 855 Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 855+/860 Mobile Platform (SM8150-AC)"
            },
            {
              "status": "affected",
              "version": "Snapdragon 865 5G Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 865+ 5G Mobile Platform (SM8250-AB)"
            },
            {
              "status": "affected",
              "version": "Snapdragon 870 5G Mobile Platform (SM8250-AC)"
            },
            {
              "status": "affected",
              "version": "Snapdragon 888 5G Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 888+ 5G Mobile Platform (SM8350-AC)"
            },
            {
              "status": "affected",
              "version": "Snapdragon W5+ Gen 1 Wearable Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon X50 5G Modem-RF System"
            },
            {
              "status": "affected",
              "version": "Snapdragon X55 5G Modem-RF System"
            },
            {
              "status": "affected",
              "version": "Snapdragon XR1 Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon XR2 5G Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon XR2+ Gen 1 Platform"
            },
            {
              "status": "affected",
              "version": "SRV1H"
            },
            {
              "status": "affected",
              "version": "SRV1L"
            },
            {
              "status": "affected",
              "version": "SRV1M"
            },
            {
              "status": "affected",
              "version": "SW5100"
            },
            {
              "status": "affected",
              "version": "SW5100P"
            },
            {
              "status": "affected",
              "version": "SXR1120"
            },
            {
              "status": "affected",
              "version": "SXR2130"
            },
            {
              "status": "affected",
              "version": "TalynPlus"
            },
            {
              "status": "affected",
              "version": "Vision Intelligence 100 Platform (APQ8053-AA)"
            },
            {
              "status": "affected",
              "version": "Vision Intelligence 200 Platform (APQ8053-AC)"
            },
            {
              "status": "affected",
              "version": "Vision Intelligence 300 Platform"
            },
            {
              "status": "affected",
              "version": "Vision Intelligence 400 Platform"
            },
            {
              "status": "affected",
              "version": "WCD9326"
            },
            {
              "status": "affected",
              "version": "WCD9335"
            },
            {
              "status": "affected",
              "version": "WCD9340"
            },
            {
              "status": "affected",
              "version": "WCD9341"
            },
            {
              "status": "affected",
              "version": "WCD9370"
            },
            {
              "status": "affected",
              "version": "WCD9371"
            },
            {
              "status": "affected",
              "version": "WCD9375"
            },
            {
              "status": "affected",
              "version": "WCD9378"
            },
            {
              "status": "affected",
              "version": "WCD9380"
            },
            {
              "status": "affected",
              "version": "WCD9385"
            },
            {
              "status": "affected",
              "version": "WCD9390"
            },
            {
              "status": "affected",
              "version": "WCD9395"
            },
            {
              "status": "affected",
              "version": "WCN3610"
            },
            {
              "status": "affected",
              "version": "WCN3615"
            },
            {
              "status": "affected",
              "version": "WCN3620"
            },
            {
              "status": "affected",
              "version": "WCN3660B"
            },
            {
              "status": "affected",
              "version": "WCN3680"
            },
            {
              "status": "affected",
              "version": "WCN3680B"
            },
            {
              "status": "affected",
              "version": "WCN3910"
            },
            {
              "status": "affected",
              "version": "WCN3950"
            },
            {
              "status": "affected",
              "version": "WCN3980"
            },
            {
              "status": "affected",
              "version": "WCN3988"
            },
            {
              "status": "affected",
              "version": "WCN3990"
            },
            {
              "status": "affected",
              "version": "WCN6450"
            },
            {
              "status": "affected",
              "version": "WCN6650"
            },
            {
              "status": "affected",
              "version": "WCN6740"
            },
            {
              "status": "affected",
              "version": "WCN6755"
            },
            {
              "status": "affected",
              "version": "WCN7750"
            },
            {
              "status": "affected",
              "version": "WCN7860"
            },
            {
              "status": "affected",
              "version": "WCN7861"
            },
            {
              "status": "affected",
              "version": "WCN7880"
            },
            {
              "status": "affected",
              "version": "WCN7881"
            },
            {
              "status": "affected",
              "version": "WSA8810"
            },
            {
              "status": "affected",
              "version": "WSA8815"
            },
            {
              "status": "affected",
              "version": "WSA8830"
            },
            {
              "status": "affected",
              "version": "WSA8832"
            },
            {
              "status": "affected",
              "version": "WSA8835"
            },
            {
              "status": "affected",
              "version": "WSA8840"
            },
            {
              "status": "affected",
              "version": "WSA8845"
            },
            {
              "status": "affected",
              "version": "WSA8845H"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Information disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-126",
              "description": "CWE-126 Buffer Over-read",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-06-03T05:52:57.455Z",
        "orgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f",
        "shortName": "qualcomm"
      },
      "references": [
        {
          "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html"
        }
      ],
      "title": "Buffer Over-read in Data Network Stack \u0026 Connectivity"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f",
    "assignerShortName": "qualcomm",
    "cveId": "CVE-2024-53026",
    "datePublished": "2025-06-03T05:52:57.455Z",
    "dateReserved": "2024-11-19T01:01:57.503Z",
    "dateUpdated": "2025-06-03T15:11:13.353Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2024-53026\",\"sourceIdentifier\":\"product-security@qualcomm.com\",\"published\":\"2025-06-03T06:15:25.780\",\"lastModified\":\"2025-06-04T14:54:33.783\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Information disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call.\"},{\"lang\":\"es\",\"value\":\"Divulgaci\u00f3n de informaci\u00f3n cuando se recibe un paquete RTCP no v\u00e1lido durante una llamada IMS VoLTE/VoWiFi.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"product-security@qualcomm.com\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L\",\"baseScore\":8.2,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"LOW\"},\"exploitabilityScore\":3.9,\"impactScore\":4.2}]},\"weaknesses\":[{\"source\":\"product-security@qualcomm.com\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-126\"}]}],\"references\":[{\"url\":\"https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html\",\"source\":\"product-security@qualcomm.com\"}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-53026\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-06-03T15:10:37.803924Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-06-03T15:11:07.107Z\"}}], \"cna\": {\"title\": \"Buffer Over-read in Data Network Stack \u0026 Connectivity\", \"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 8.2, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"LOW\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"Qualcomm, Inc.\", \"product\": \"Snapdragon\", \"versions\": [{\"status\": \"affected\", \"version\": \"APQ8017\"}, {\"status\": \"affected\", \"version\": \"APQ8064AU\"}, {\"status\": \"affected\", \"version\": \"AQT1000\"}, {\"status\": \"affected\", \"version\": \"FastConnect 6200\"}, {\"status\": \"affected\", \"version\": \"FastConnect 6700\"}, {\"status\": \"affected\", \"version\": \"FastConnect 6800\"}, {\"status\": \"affected\", \"version\": \"FastConnect 6900\"}, {\"status\": \"affected\", \"version\": \"FastConnect 7800\"}, {\"status\": \"affected\", \"version\": \"MSM8996AU\"}, {\"status\": \"affected\", \"version\": \"QAM8255P\"}, {\"status\": \"affected\", \"version\": \"QAM8295P\"}, {\"status\": \"affected\", \"version\": \"QAM8620P\"}, {\"status\": \"affected\", \"version\": \"QAM8650P\"}, {\"status\": \"affected\", \"version\": \"QAM8775P\"}, {\"status\": \"affected\", \"version\": \"QAMSRV1H\"}, {\"status\": \"affected\", \"version\": \"QAMSRV1M\"}, {\"status\": \"affected\", \"version\": \"QCA6310\"}, {\"status\": \"affected\", \"version\": \"QCA6320\"}, {\"status\": \"affected\", \"version\": \"QCA6335\"}, {\"status\": \"affected\", \"version\": \"QCA6391\"}, {\"status\": \"affected\", \"version\": \"QCA6420\"}, {\"status\": \"affected\", \"version\": \"QCA6421\"}, {\"status\": \"affected\", \"version\": \"QCA6426\"}, {\"status\": \"affected\", \"version\": \"QCA6430\"}, {\"status\": \"affected\", \"version\": \"QCA6431\"}, {\"status\": \"affected\", \"version\": \"QCA6436\"}, {\"status\": \"affected\", \"version\": \"QCA6564\"}, {\"status\": \"affected\", \"version\": \"QCA6564A\"}, {\"status\": \"affected\", \"version\": \"QCA6564AU\"}, {\"status\": \"affected\", \"version\": \"QCA6574\"}, {\"status\": \"affected\", \"version\": \"QCA6574A\"}, {\"status\": \"affected\", \"version\": \"QCA6574AU\"}, {\"status\": \"affected\", \"version\": \"QCA6595\"}, {\"status\": \"affected\", \"version\": \"QCA6595AU\"}, {\"status\": \"affected\", \"version\": \"QCA6678AQ\"}, {\"status\": \"affected\", \"version\": \"QCA6688AQ\"}, {\"status\": \"affected\", \"version\": \"QCA6696\"}, {\"status\": \"affected\", \"version\": \"QCA6698AQ\"}, {\"status\": \"affected\", \"version\": \"QCA6797AQ\"}, {\"status\": \"affected\", \"version\": \"QCM2150\"}, {\"status\": \"affected\", \"version\": \"QCM2290\"}, {\"status\": \"affected\", \"version\": \"QCM4290\"}, {\"status\": \"affected\", \"version\": \"QCM4325\"}, {\"status\": \"affected\", \"version\": \"QCM4490\"}, {\"status\": \"affected\", \"version\": \"QCM5430\"}, {\"status\": \"affected\", \"version\": \"QCM6125\"}, {\"status\": \"affected\", \"version\": \"QCM6490\"}, {\"status\": \"affected\", \"version\": \"QCM8550\"}, {\"status\": \"affected\", \"version\": \"QCN9011\"}, {\"status\": \"affected\", \"version\": \"QCN9012\"}, {\"status\": \"affected\", \"version\": \"QCN9274\"}, {\"status\": \"affected\", \"version\": \"QCS2290\"}, {\"status\": \"affected\", \"version\": \"QCS410\"}, {\"status\": \"affected\", \"version\": \"QCS4290\"}, {\"status\": \"affected\", \"version\": \"QCS4490\"}, {\"status\": \"affected\", \"version\": \"QCS5430\"}, {\"status\": \"affected\", \"version\": \"QCS610\"}, {\"status\": \"affected\", \"version\": \"QCS6125\"}, {\"status\": \"affected\", \"version\": \"QCS615\"}, {\"status\": \"affected\", \"version\": \"QCS6490\"}, {\"status\": \"affected\", \"version\": \"QCS8300\"}, {\"status\": \"affected\", \"version\": \"QCS8550\"}, {\"status\": \"affected\", \"version\": \"QCS9100\"}, {\"status\": \"affected\", \"version\": \"QMP1000\"}, {\"status\": \"affected\", \"version\": \"Qualcomm 205 Mobile Platform\"}, {\"status\": \"affected\", \"version\": \"Qualcomm 215 Mobile Platform\"}, {\"status\": \"affected\", \"version\": \"Qualcomm Video Collaboration VC1 Platform\"}, {\"status\": \"affected\", \"version\": \"Qualcomm Video Collaboration VC3 Platform\"}, {\"status\": \"affected\", \"version\": \"Robotics RB3 Platform\"}, {\"status\": \"affected\", \"version\": \"SA4150P\"}, {\"status\": \"affected\", \"version\": \"SA4155P\"}, {\"status\": \"affected\", \"version\": \"SA6145P\"}, {\"status\": \"affected\", \"version\": \"SA6150P\"}, {\"status\": \"affected\", \"version\": \"SA6155\"}, {\"status\": \"affected\", \"version\": \"SA6155P\"}, {\"status\": \"affected\", \"version\": \"SA7255P\"}, {\"status\": \"affected\", \"version\": \"SA7775P\"}, {\"status\": \"affected\", \"version\": \"SA8145P\"}, {\"status\": \"affected\", \"version\": \"SA8150P\"}, {\"status\": \"affected\", \"version\": \"SA8155\"}, {\"status\": \"affected\", \"version\": \"SA8155P\"}, {\"status\": \"affected\", \"version\": \"SA8195P\"}, {\"status\": \"affected\", \"version\": \"SA8255P\"}, {\"status\": \"affected\", \"version\": \"SA8295P\"}, {\"status\": \"affected\", \"version\": \"SA8620P\"}, {\"status\": \"affected\", \"version\": \"SA8650P\"}, {\"status\": \"affected\", \"version\": \"SA8770P\"}, {\"status\": \"affected\", \"version\": \"SA8775P\"}, {\"status\": \"affected\", \"version\": \"SA9000P\"}, {\"status\": \"affected\", \"version\": \"SD 675\"}, {\"status\": \"affected\", \"version\": \"SD 8 Gen1 5G\"}, {\"status\": \"affected\", \"version\": \"SD626\"}, {\"status\": \"affected\", \"version\": \"SD660\"}, {\"status\": \"affected\", \"version\": \"SD670\"}, {\"status\": \"affected\", \"version\": \"SD675\"}, {\"status\": \"affected\", \"version\": \"SD730\"}, {\"status\": \"affected\", \"version\": \"SD835\"}, {\"status\": \"affected\", \"version\": \"SD855\"}, {\"status\": \"affected\", \"version\": \"SD865 5G\"}, {\"status\": \"affected\", \"version\": \"SD888\"}, {\"status\": \"affected\", \"version\": \"SDM429W\"}, {\"status\": \"affected\", \"version\": \"SDX55\"}, {\"status\": \"affected\", \"version\": \"SG4150P\"}, {\"status\": \"affected\", \"version\": \"SM4125\"}, {\"status\": \"affected\", \"version\": \"SM4635\"}, {\"status\": \"affected\", \"version\": \"SM6250\"}, {\"status\": \"affected\", \"version\": \"SM6370\"}, {\"status\": \"affected\", \"version\": \"SM6650\"}, {\"status\": \"affected\", \"version\": \"SM6650P\"}, {\"status\": \"affected\", \"version\": \"SM7250P\"}, {\"status\": \"affected\", \"version\": \"SM7315\"}, {\"status\": \"affected\", \"version\": \"SM7325P\"}, {\"status\": \"affected\", \"version\": \"SM7635\"}, {\"status\": \"affected\", \"version\": \"SM7675\"}, {\"status\": \"affected\", \"version\": \"SM7675P\"}, {\"status\": \"affected\", \"version\": \"SM8550P\"}, {\"status\": \"affected\", \"version\": \"SM8635\"}, {\"status\": \"affected\", \"version\": \"SM8635P\"}, {\"status\": \"affected\", \"version\": \"SM8650Q\"}, {\"status\": \"affected\", \"version\": \"SM8735\"}, {\"status\": \"affected\", \"version\": \"SM8750\"}, {\"status\": \"affected\", \"version\": \"SM8750P\"}, {\"status\": \"affected\", \"version\": \"Smart Display 200 Platform (APQ5053-AA)\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 210 Processor\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 212 Mobile Platform\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 4 Gen 1 Mobile Platform\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 4 Gen 2 Mobile Platform\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 425 Mobile Platform\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 429 Mobile Platform\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 439 Mobile Platform\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 460 Mobile Platform\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 480 5G Mobile Platform\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 480+ 5G Mobile Platform (SM4350-AC)\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 625 Mobile Platform\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 626 Mobile Platform\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 630 Mobile Platform\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 632 Mobile Platform\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 636 Mobile Platform\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 660 Mobile Platform\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 662 Mobile Platform\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 670 Mobile Platform\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 675 Mobile Platform\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 678 Mobile Platform (SM6150-AC)\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 680 4G Mobile Platform\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 685 4G Mobile Platform (SM6225-AD)\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 690 5G Mobile Platform\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 695 5G Mobile Platform\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 710 Mobile Platform\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 720G Mobile Platform\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 730 Mobile Platform (SM7150-AA)\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 730G Mobile Platform (SM7150-AB)\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 732G Mobile Platform (SM7150-AC)\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 750G 5G Mobile Platform\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 765 5G Mobile Platform (SM7250-AA)\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 765G 5G Mobile Platform (SM7250-AB)\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 768G 5G Mobile Platform (SM7250-AC)\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 778G 5G Mobile Platform\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 778G+ 5G Mobile Platform (SM7325-AE)\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 780G 5G Mobile Platform\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 782G Mobile Platform (SM7325-AF)\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 7c+ Gen 3 Compute\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 8 Gen 1 Mobile Platform\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 8 Gen 2 Mobile Platform\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 8 Gen 3 Mobile Platform\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 8+ Gen 1 Mobile Platform\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 8+ Gen 2 Mobile Platform\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 820 Automotive Platform\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 835 Mobile PC Platform\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 845 Mobile Platform\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 855 Mobile Platform\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 855+/860 Mobile Platform (SM8150-AC)\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 865 5G Mobile Platform\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 865+ 5G Mobile Platform (SM8250-AB)\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 870 5G Mobile Platform (SM8250-AC)\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 888 5G Mobile Platform\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 888+ 5G Mobile Platform (SM8350-AC)\"}, {\"status\": \"affected\", \"version\": \"Snapdragon W5+ Gen 1 Wearable Platform\"}, {\"status\": \"affected\", \"version\": \"Snapdragon X50 5G Modem-RF System\"}, {\"status\": \"affected\", \"version\": \"Snapdragon X55 5G Modem-RF System\"}, {\"status\": \"affected\", \"version\": \"Snapdragon XR1 Platform\"}, {\"status\": \"affected\", \"version\": \"Snapdragon XR2 5G Platform\"}, {\"status\": \"affected\", \"version\": \"Snapdragon XR2+ Gen 1 Platform\"}, {\"status\": \"affected\", \"version\": \"SRV1H\"}, {\"status\": \"affected\", \"version\": \"SRV1L\"}, {\"status\": \"affected\", \"version\": \"SRV1M\"}, {\"status\": \"affected\", \"version\": \"SW5100\"}, {\"status\": \"affected\", \"version\": \"SW5100P\"}, {\"status\": \"affected\", \"version\": \"SXR1120\"}, {\"status\": \"affected\", \"version\": \"SXR2130\"}, {\"status\": \"affected\", \"version\": \"TalynPlus\"}, {\"status\": \"affected\", \"version\": \"Vision Intelligence 100 Platform (APQ8053-AA)\"}, {\"status\": \"affected\", \"version\": \"Vision Intelligence 200 Platform (APQ8053-AC)\"}, {\"status\": \"affected\", \"version\": \"Vision Intelligence 300 Platform\"}, {\"status\": \"affected\", \"version\": \"Vision Intelligence 400 Platform\"}, {\"status\": \"affected\", \"version\": \"WCD9326\"}, {\"status\": \"affected\", \"version\": \"WCD9335\"}, {\"status\": \"affected\", \"version\": \"WCD9340\"}, {\"status\": \"affected\", \"version\": \"WCD9341\"}, {\"status\": \"affected\", \"version\": \"WCD9370\"}, {\"status\": \"affected\", \"version\": \"WCD9371\"}, {\"status\": \"affected\", \"version\": \"WCD9375\"}, {\"status\": \"affected\", \"version\": \"WCD9378\"}, {\"status\": \"affected\", \"version\": \"WCD9380\"}, {\"status\": \"affected\", \"version\": \"WCD9385\"}, {\"status\": \"affected\", \"version\": \"WCD9390\"}, {\"status\": \"affected\", \"version\": \"WCD9395\"}, {\"status\": \"affected\", \"version\": \"WCN3610\"}, {\"status\": \"affected\", \"version\": \"WCN3615\"}, {\"status\": \"affected\", \"version\": \"WCN3620\"}, {\"status\": \"affected\", \"version\": \"WCN3660B\"}, {\"status\": \"affected\", \"version\": \"WCN3680\"}, {\"status\": \"affected\", \"version\": \"WCN3680B\"}, {\"status\": \"affected\", \"version\": \"WCN3910\"}, {\"status\": \"affected\", \"version\": \"WCN3950\"}, {\"status\": \"affected\", \"version\": \"WCN3980\"}, {\"status\": \"affected\", \"version\": \"WCN3988\"}, {\"status\": \"affected\", \"version\": \"WCN3990\"}, {\"status\": \"affected\", \"version\": \"WCN6450\"}, {\"status\": \"affected\", \"version\": \"WCN6650\"}, {\"status\": \"affected\", \"version\": \"WCN6740\"}, {\"status\": \"affected\", \"version\": \"WCN6755\"}, {\"status\": \"affected\", \"version\": \"WCN7750\"}, {\"status\": \"affected\", \"version\": \"WCN7860\"}, {\"status\": \"affected\", \"version\": \"WCN7861\"}, {\"status\": \"affected\", \"version\": \"WCN7880\"}, {\"status\": \"affected\", \"version\": \"WCN7881\"}, {\"status\": \"affected\", \"version\": \"WSA8810\"}, {\"status\": \"affected\", \"version\": \"WSA8815\"}, {\"status\": \"affected\", \"version\": \"WSA8830\"}, {\"status\": \"affected\", \"version\": \"WSA8832\"}, {\"status\": \"affected\", \"version\": \"WSA8835\"}, {\"status\": \"affected\", \"version\": \"WSA8840\"}, {\"status\": \"affected\", \"version\": \"WSA8845\"}, {\"status\": \"affected\", \"version\": \"WSA8845H\"}], \"platforms\": [\"Snapdragon Auto\", \"Snapdragon Compute\", \"Snapdragon Connectivity\", \"Snapdragon Consumer IOT\", \"Snapdragon Industrial IOT\", \"Snapdragon Mobile\", \"Snapdragon Wearables\"], \"defaultStatus\": \"unaffected\"}], \"references\": [{\"url\": \"https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"Information disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-126\", \"description\": \"CWE-126 Buffer Over-read\"}]}], \"providerMetadata\": {\"orgId\": \"2cfc7d3e-20d3-47ac-8db7-1b7285aff15f\", \"shortName\": \"qualcomm\", \"dateUpdated\": \"2025-06-03T05:52:57.455Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2024-53026\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-06-03T15:11:13.353Z\", \"dateReserved\": \"2024-11-19T01:01:57.503Z\", \"assignerOrgId\": \"2cfc7d3e-20d3-47ac-8db7-1b7285aff15f\", \"datePublished\": \"2025-06-03T05:52:57.455Z\", \"assignerShortName\": \"qualcomm\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}

fkie_cve-2024-53026

Vulnerability from fkie_nvd

Published

2025-06-03 06:15

Modified

2025-06-04 14:54

Severity ?

8.2 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L

Summary

Information disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call.

References

▶	URL	Tags
	product-security@qualcomm.com	https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html

Impacted products

	Vendor	Product	Version

JSON

To clipboard

{
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Information disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call."
    },
    {
      "lang": "es",
      "value": "Divulgaci\u00f3n de informaci\u00f3n cuando se recibe un paquete RTCP no v\u00e1lido durante una llamada IMS VoLTE/VoWiFi."
    }
  ],
  "id": "CVE-2024-53026",
  "lastModified": "2025-06-04T14:54:33.783",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "LOW",
          "baseScore": 8.2,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "NONE",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 4.2,
        "source": "product-security@qualcomm.com",
        "type": "Primary"
      }
    ]
  },
  "published": "2025-06-03T06:15:25.780",
  "references": [
    {
      "source": "product-security@qualcomm.com",
      "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html"
    }
  ],
  "sourceIdentifier": "product-security@qualcomm.com",
  "vulnStatus": "Awaiting Analysis",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-126"
        }
      ],
      "source": "product-security@qualcomm.com",
      "type": "Primary"
    }
  ]
}

ncsc-2025-0185

Vulnerability from csaf_ncscnl

Published

2025-06-10 07:19

Modified

2025-06-10 07:19

Summary

Kwetsbaarheden verholpen in Google Android en Samsung Mobile

Notes

The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions: NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein. NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory. This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.

Feiten

Google heeft kwetsbaarheden verholpen in het Android besturingssysteem. Samsung heeft de voor Samsung Mobile relevante kwetsbaarheden verholpen in Samsung Mobile.

Interpretaties

De kwetsbaarheden bevinden zich in de wijze waarop de GPU Kernel Drivers omgaan met systeemoproepen van niet-geprivilegieerde gebruikers. Dit kan leiden tot ongeautoriseerde toegang tot geheugen, geheugenmanipulatie en systeeminstabiliteit. Aangevallen systemen kunnen onvoorspelbaar gedrag vertonen of vastlopen, wat een significante impact heeft op de integriteit en vertrouwelijkheid van gegevens. De kwetsbaarheden zijn vooral zorgwekkend in omgevingen waar gebruikersprivileges niet strikt worden gehandhaafd.

Oplossingen

Google heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Samsung heeft updates uitgebracht om de voor Samsung Mobile relevante kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.

Kans

medium

Schade

high

CWE-1284

Improper Validation of Specified Quantity in Input

CWE-822

Untrusted Pointer Dereference

CWE-126

Buffer Over-read

CWE-823

Use of Out-of-range Pointer Offset

CWE-280

Improper Handling of Insufficient Permissions or Privileges

CWE-367

Time-of-check Time-of-use (TOCTOU) Race Condition

CWE-284

Improper Access Control

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-416

Use After Free

CWE-926

Improper Export of Android Application Components

CWE-125

Out-of-bounds Read

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CWE-122

Heap-based Buffer Overflow

CWE-269

Improper Privilege Management

CWE-276

Incorrect Default Permissions

JSON

To clipboard

{
  "document": {
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE"
      }
    },
    "lang": "nl",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n    NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n    NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n    This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
      },
      {
        "category": "description",
        "text": "Google heeft kwetsbaarheden verholpen in het Android besturingssysteem. Samsung heeft de voor Samsung Mobile relevante kwetsbaarheden verholpen in Samsung Mobile.",
        "title": "Feiten"
      },
      {
        "category": "description",
        "text": "De kwetsbaarheden bevinden zich in de wijze waarop de GPU Kernel Drivers omgaan met systeemoproepen van niet-geprivilegieerde gebruikers. Dit kan leiden tot ongeautoriseerde toegang tot geheugen, geheugenmanipulatie en systeeminstabiliteit. Aangevallen systemen kunnen onvoorspelbaar gedrag vertonen of vastlopen, wat een significante impact heeft op de integriteit en vertrouwelijkheid van gegevens. De kwetsbaarheden zijn vooral zorgwekkend in omgevingen waar gebruikersprivileges niet strikt worden gehandhaafd.",
        "title": "Interpretaties"
      },
      {
        "category": "description",
        "text": "Google heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Samsung heeft updates uitgebracht om de voor Samsung Mobile relevante kwetsbaarheden te verhelpen.\n\nZie bijgevoegde referenties voor meer informatie.",
        "title": "Oplossingen"
      },
      {
        "category": "general",
        "text": "medium",
        "title": "Kans"
      },
      {
        "category": "general",
        "text": "high",
        "title": "Schade"
      },
      {
        "category": "general",
        "text": "Improper Validation of Specified Quantity in Input",
        "title": "CWE-1284"
      },
      {
        "category": "general",
        "text": "Untrusted Pointer Dereference",
        "title": "CWE-822"
      },
      {
        "category": "general",
        "text": "Buffer Over-read",
        "title": "CWE-126"
      },
      {
        "category": "general",
        "text": "Use of Out-of-range Pointer Offset",
        "title": "CWE-823"
      },
      {
        "category": "general",
        "text": "Improper Handling of Insufficient Permissions or Privileges ",
        "title": "CWE-280"
      },
      {
        "category": "general",
        "text": "Time-of-check Time-of-use (TOCTOU) Race Condition",
        "title": "CWE-367"
      },
      {
        "category": "general",
        "text": "Improper Access Control",
        "title": "CWE-284"
      },
      {
        "category": "general",
        "text": "Improper Restriction of Operations within the Bounds of a Memory Buffer",
        "title": "CWE-119"
      },
      {
        "category": "general",
        "text": "Use After Free",
        "title": "CWE-416"
      },
      {
        "category": "general",
        "text": "Improper Export of Android Application Components",
        "title": "CWE-926"
      },
      {
        "category": "general",
        "text": "Out-of-bounds Read",
        "title": "CWE-125"
      },
      {
        "category": "general",
        "text": "Exposure of Sensitive Information to an Unauthorized Actor",
        "title": "CWE-200"
      },
      {
        "category": "general",
        "text": "Heap-based Buffer Overflow",
        "title": "CWE-122"
      },
      {
        "category": "general",
        "text": "Improper Privilege Management",
        "title": "CWE-269"
      },
      {
        "category": "general",
        "text": "Incorrect Default Permissions",
        "title": "CWE-276"
      }
    ],
    "publisher": {
      "category": "coordinator",
      "contact_details": "cert@ncsc.nl",
      "name": "Nationaal Cyber Security Centrum",
      "namespace": "https://www.ncsc.nl/"
    },
    "references": [
      {
        "category": "external",
        "summary": "Reference - certbundde",
        "url": "https://source.android.com/docs/security/bulletin/2025-06-01"
      },
      {
        "category": "external",
        "summary": "Reference - cveprojectv5; nvd",
        "url": "https://security.samsungmobile.com/securityUpdate.smsb?year=2025\u0026month=06"
      }
    ],
    "title": "Kwetsbaarheden verholpen in Google Android en Samsung Mobile",
    "tracking": {
      "current_release_date": "2025-06-10T07:19:02.701613Z",
      "generator": {
        "date": "2025-06-05T14:45:00Z",
        "engine": {
          "name": "V.A.",
          "version": "1.1"
        }
      },
      "id": "NCSC-2025-0185",
      "initial_release_date": "2025-06-10T07:19:02.701613Z",
      "revision_history": [
        {
          "date": "2025-06-10T07:19:02.701613Z",
          "number": "1.0.0",
          "summary": "Initiele versie"
        }
      ],
      "status": "final",
      "version": "1.0.0"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/13 \u003c2025-06-05",
                "product": {
                  "name": "vers:unknown/13 \u003c2025-06-05",
                  "product_id": "CSAFPID-2890999"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/14 \u003c2025-06-05",
                "product": {
                  "name": "vers:unknown/14 \u003c2025-06-05",
                  "product_id": "CSAFPID-2890998"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/15 \u003c2025-06-05",
                "product": {
                  "name": "vers:unknown/15 \u003c2025-06-05",
                  "product_id": "CSAFPID-2891000"
                }
              }
            ],
            "category": "product_name",
            "name": "Android"
          }
        ],
        "category": "vendor",
        "name": "Google"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/13 \u003csmr-jun-2025",
                "product": {
                  "name": "vers:unknown/13 \u003csmr-jun-2025",
                  "product_id": "CSAFPID-2893954"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/14 \u003csmr-jun-2025",
                "product": {
                  "name": "vers:unknown/14 \u003csmr-jun-2025",
                  "product_id": "CSAFPID-2893955"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/15 \u003csmr-jun-2025",
                "product": {
                  "name": "vers:unknown/15 \u003csmr-jun-2025",
                  "product_id": "CSAFPID-2893956"
                }
              }
            ],
            "category": "product_name",
            "name": "Android"
          }
        ],
        "category": "vendor",
        "name": "Samsung"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-12576",
      "cwe": {
        "id": "CWE-822",
        "name": "Untrusted Pointer Dereference"
      },
      "notes": [
        {
          "category": "other",
          "text": "Untrusted Pointer Dereference",
          "title": "CWE-822"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2890999",
          "CSAFPID-2890998",
          "CSAFPID-2891000",
          "CSAFPID-2893954",
          "CSAFPID-2893955",
          "CSAFPID-2893956"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-12576 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-2024-12576.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2890999",
            "CSAFPID-2890998",
            "CSAFPID-2891000",
            "CSAFPID-2893954",
            "CSAFPID-2893955",
            "CSAFPID-2893956"
          ]
        }
      ],
      "title": "CVE-2024-12576"
    },
    {
      "cve": "CVE-2024-12837",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2890999",
          "CSAFPID-2890998",
          "CSAFPID-2891000",
          "CSAFPID-2893954",
          "CSAFPID-2893955",
          "CSAFPID-2893956"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-12837 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-2024-12837.json"
        }
      ],
      "title": "CVE-2024-12837"
    },
    {
      "cve": "CVE-2024-47893",
      "cwe": {
        "id": "CWE-823",
        "name": "Use of Out-of-range Pointer Offset"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use of Out-of-range Pointer Offset",
          "title": "CWE-823"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2890999",
          "CSAFPID-2890998",
          "CSAFPID-2891000",
          "CSAFPID-2893954",
          "CSAFPID-2893955",
          "CSAFPID-2893956"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-47893 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-2024-47893.json"
        }
      ],
      "title": "CVE-2024-47893"
    },
    {
      "cve": "CVE-2024-53010",
      "cwe": {
        "id": "CWE-284",
        "name": "Improper Access Control"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Access Control",
          "title": "CWE-284"
        },
        {
          "category": "other",
          "text": "Improper Restriction of Operations within the Bounds of a Memory Buffer",
          "title": "CWE-119"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2890999",
          "CSAFPID-2890998",
          "CSAFPID-2891000",
          "CSAFPID-2893954",
          "CSAFPID-2893955",
          "CSAFPID-2893956"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-53010 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-2024-53010.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2890999",
            "CSAFPID-2890998",
            "CSAFPID-2891000",
            "CSAFPID-2893954",
            "CSAFPID-2893955",
            "CSAFPID-2893956"
          ]
        }
      ],
      "title": "CVE-2024-53010"
    },
    {
      "cve": "CVE-2024-53019",
      "cwe": {
        "id": "CWE-126",
        "name": "Buffer Over-read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Buffer Over-read",
          "title": "CWE-126"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2890999",
          "CSAFPID-2890998",
          "CSAFPID-2891000",
          "CSAFPID-2893954",
          "CSAFPID-2893955",
          "CSAFPID-2893956"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-53019 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-2024-53019.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2890999",
            "CSAFPID-2890998",
            "CSAFPID-2891000",
            "CSAFPID-2893954",
            "CSAFPID-2893955",
            "CSAFPID-2893956"
          ]
        }
      ],
      "title": "CVE-2024-53019"
    },
    {
      "cve": "CVE-2024-53020",
      "cwe": {
        "id": "CWE-126",
        "name": "Buffer Over-read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Buffer Over-read",
          "title": "CWE-126"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2890999",
          "CSAFPID-2890998",
          "CSAFPID-2891000",
          "CSAFPID-2893954",
          "CSAFPID-2893955",
          "CSAFPID-2893956"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-53020 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-2024-53020.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2890999",
            "CSAFPID-2890998",
            "CSAFPID-2891000",
            "CSAFPID-2893954",
            "CSAFPID-2893955",
            "CSAFPID-2893956"
          ]
        }
      ],
      "title": "CVE-2024-53020"
    },
    {
      "cve": "CVE-2024-53021",
      "cwe": {
        "id": "CWE-126",
        "name": "Buffer Over-read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Buffer Over-read",
          "title": "CWE-126"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2890999",
          "CSAFPID-2890998",
          "CSAFPID-2891000",
          "CSAFPID-2893954",
          "CSAFPID-2893955",
          "CSAFPID-2893956"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-53021 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-2024-53021.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2890999",
            "CSAFPID-2890998",
            "CSAFPID-2891000",
            "CSAFPID-2893954",
            "CSAFPID-2893955",
            "CSAFPID-2893956"
          ]
        }
      ],
      "title": "CVE-2024-53021"
    },
    {
      "cve": "CVE-2024-53026",
      "cwe": {
        "id": "CWE-126",
        "name": "Buffer Over-read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Buffer Over-read",
          "title": "CWE-126"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2890999",
          "CSAFPID-2890998",
          "CSAFPID-2891000",
          "CSAFPID-2893954",
          "CSAFPID-2893955",
          "CSAFPID-2893956"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-53026 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-2024-53026.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2890999",
            "CSAFPID-2890998",
            "CSAFPID-2891000",
            "CSAFPID-2893954",
            "CSAFPID-2893955",
            "CSAFPID-2893956"
          ]
        }
      ],
      "title": "CVE-2024-53026"
    },
    {
      "cve": "CVE-2025-0073",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2890999",
          "CSAFPID-2890998",
          "CSAFPID-2891000",
          "CSAFPID-2893954",
          "CSAFPID-2893955",
          "CSAFPID-2893956"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-0073 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-0073.json"
        }
      ],
      "title": "CVE-2025-0073"
    },
    {
      "cve": "CVE-2025-0468",
      "cwe": {
        "id": "CWE-280",
        "name": "Improper Handling of Insufficient Permissions or Privileges "
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Handling of Insufficient Permissions or Privileges ",
          "title": "CWE-280"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2890999",
          "CSAFPID-2890998",
          "CSAFPID-2891000",
          "CSAFPID-2893954",
          "CSAFPID-2893955",
          "CSAFPID-2893956"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-0468 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-0468.json"
        }
      ],
      "title": "CVE-2025-0468"
    },
    {
      "cve": "CVE-2025-0478",
      "cwe": {
        "id": "CWE-280",
        "name": "Improper Handling of Insufficient Permissions or Privileges "
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Handling of Insufficient Permissions or Privileges ",
          "title": "CWE-280"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2890999",
          "CSAFPID-2890998",
          "CSAFPID-2891000",
          "CSAFPID-2893954",
          "CSAFPID-2893955",
          "CSAFPID-2893956"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-0478 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-0478.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2890999",
            "CSAFPID-2890998",
            "CSAFPID-2891000",
            "CSAFPID-2893954",
            "CSAFPID-2893955",
            "CSAFPID-2893956"
          ]
        }
      ],
      "title": "CVE-2025-0478"
    },
    {
      "cve": "CVE-2025-0819",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2890999",
          "CSAFPID-2890998",
          "CSAFPID-2891000",
          "CSAFPID-2893954",
          "CSAFPID-2893955",
          "CSAFPID-2893956"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-0819 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-0819.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2890999",
            "CSAFPID-2890998",
            "CSAFPID-2891000",
            "CSAFPID-2893954",
            "CSAFPID-2893955",
            "CSAFPID-2893956"
          ]
        }
      ],
      "title": "CVE-2025-0819"
    },
    {
      "cve": "CVE-2025-0835",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2890999",
          "CSAFPID-2890998",
          "CSAFPID-2891000",
          "CSAFPID-2893954",
          "CSAFPID-2893955",
          "CSAFPID-2893956"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-0835 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-0835.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2890999",
            "CSAFPID-2890998",
            "CSAFPID-2891000",
            "CSAFPID-2893954",
            "CSAFPID-2893955",
            "CSAFPID-2893956"
          ]
        }
      ],
      "title": "CVE-2025-0835"
    },
    {
      "cve": "CVE-2025-20981",
      "cwe": {
        "id": "CWE-284",
        "name": "Improper Access Control"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Access Control",
          "title": "CWE-284"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2890999",
          "CSAFPID-2890998",
          "CSAFPID-2891000",
          "CSAFPID-2893954",
          "CSAFPID-2893955",
          "CSAFPID-2893956"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-20981 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-20981.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2890999",
            "CSAFPID-2890998",
            "CSAFPID-2891000",
            "CSAFPID-2893954",
            "CSAFPID-2893955",
            "CSAFPID-2893956"
          ]
        }
      ],
      "title": "CVE-2025-20981"
    },
    {
      "cve": "CVE-2025-20984",
      "cwe": {
        "id": "CWE-276",
        "name": "Incorrect Default Permissions"
      },
      "notes": [
        {
          "category": "other",
          "text": "Incorrect Default Permissions",
          "title": "CWE-276"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2890999",
          "CSAFPID-2890998",
          "CSAFPID-2891000",
          "CSAFPID-2893954",
          "CSAFPID-2893955",
          "CSAFPID-2893956"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-20984 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-20984.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2890999",
            "CSAFPID-2890998",
            "CSAFPID-2891000",
            "CSAFPID-2893954",
            "CSAFPID-2893955",
            "CSAFPID-2893956"
          ]
        }
      ],
      "title": "CVE-2025-20984"
    },
    {
      "cve": "CVE-2025-20985",
      "cwe": {
        "id": "CWE-269",
        "name": "Improper Privilege Management"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Privilege Management",
          "title": "CWE-269"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2890999",
          "CSAFPID-2890998",
          "CSAFPID-2891000",
          "CSAFPID-2893954",
          "CSAFPID-2893955",
          "CSAFPID-2893956"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-20985 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-20985.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2890999",
            "CSAFPID-2890998",
            "CSAFPID-2891000",
            "CSAFPID-2893954",
            "CSAFPID-2893955",
            "CSAFPID-2893956"
          ]
        }
      ],
      "title": "CVE-2025-20985"
    },
    {
      "cve": "CVE-2025-20986",
      "cwe": {
        "id": "CWE-284",
        "name": "Improper Access Control"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Access Control",
          "title": "CWE-284"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2890999",
          "CSAFPID-2890998",
          "CSAFPID-2891000",
          "CSAFPID-2893954",
          "CSAFPID-2893955",
          "CSAFPID-2893956"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-20986 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-20986.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2890999",
            "CSAFPID-2890998",
            "CSAFPID-2891000",
            "CSAFPID-2893954",
            "CSAFPID-2893955",
            "CSAFPID-2893956"
          ]
        }
      ],
      "title": "CVE-2025-20986"
    },
    {
      "cve": "CVE-2025-20987",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "notes": [
        {
          "category": "other",
          "text": "Exposure of Sensitive Information to an Unauthorized Actor",
          "title": "CWE-200"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2890999",
          "CSAFPID-2890998",
          "CSAFPID-2891000",
          "CSAFPID-2893954",
          "CSAFPID-2893955",
          "CSAFPID-2893956"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-20987 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-20987.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2890999",
            "CSAFPID-2890998",
            "CSAFPID-2891000",
            "CSAFPID-2893954",
            "CSAFPID-2893955",
            "CSAFPID-2893956"
          ]
        }
      ],
      "title": "CVE-2025-20987"
    },
    {
      "cve": "CVE-2025-20988",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2890999",
          "CSAFPID-2890998",
          "CSAFPID-2891000",
          "CSAFPID-2893954",
          "CSAFPID-2893955",
          "CSAFPID-2893956"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-20988 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-20988.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2890999",
            "CSAFPID-2890998",
            "CSAFPID-2891000",
            "CSAFPID-2893954",
            "CSAFPID-2893955",
            "CSAFPID-2893956"
          ]
        }
      ],
      "title": "CVE-2025-20988"
    },
    {
      "cve": "CVE-2025-20989",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "notes": [
        {
          "category": "other",
          "text": "Exposure of Sensitive Information to an Unauthorized Actor",
          "title": "CWE-200"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2890999",
          "CSAFPID-2890998",
          "CSAFPID-2891000",
          "CSAFPID-2893954",
          "CSAFPID-2893955",
          "CSAFPID-2893956"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-20989 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-20989.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2890999",
            "CSAFPID-2890998",
            "CSAFPID-2891000",
            "CSAFPID-2893954",
            "CSAFPID-2893955",
            "CSAFPID-2893956"
          ]
        }
      ],
      "title": "CVE-2025-20989"
    },
    {
      "cve": "CVE-2025-20991",
      "cwe": {
        "id": "CWE-926",
        "name": "Improper Export of Android Application Components"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Export of Android Application Components",
          "title": "CWE-926"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2890999",
          "CSAFPID-2890998",
          "CSAFPID-2891000",
          "CSAFPID-2893954",
          "CSAFPID-2893955",
          "CSAFPID-2893956"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-20991 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-20991.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.0,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2890999",
            "CSAFPID-2890998",
            "CSAFPID-2891000",
            "CSAFPID-2893954",
            "CSAFPID-2893955",
            "CSAFPID-2893956"
          ]
        }
      ],
      "title": "CVE-2025-20991"
    },
    {
      "cve": "CVE-2025-20992",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2890999",
          "CSAFPID-2890998",
          "CSAFPID-2891000",
          "CSAFPID-2893954",
          "CSAFPID-2893955",
          "CSAFPID-2893956"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-20992 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-20992.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.0,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2890999",
            "CSAFPID-2890998",
            "CSAFPID-2891000",
            "CSAFPID-2893954",
            "CSAFPID-2893955",
            "CSAFPID-2893956"
          ]
        }
      ],
      "title": "CVE-2025-20992"
    },
    {
      "cve": "CVE-2025-20993",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2890999",
          "CSAFPID-2890998",
          "CSAFPID-2891000",
          "CSAFPID-2893954",
          "CSAFPID-2893955",
          "CSAFPID-2893956"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-20993 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-20993.json"
        }
      ],
      "title": "CVE-2025-20993"
    },
    {
      "cve": "CVE-2025-21424",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2890999",
          "CSAFPID-2890998",
          "CSAFPID-2891000",
          "CSAFPID-2893954",
          "CSAFPID-2893955",
          "CSAFPID-2893956"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-21424 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-21424.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2890999",
            "CSAFPID-2890998",
            "CSAFPID-2891000",
            "CSAFPID-2893954",
            "CSAFPID-2893955",
            "CSAFPID-2893956"
          ]
        }
      ],
      "title": "CVE-2025-21424"
    },
    {
      "cve": "CVE-2025-21485",
      "cwe": {
        "id": "CWE-367",
        "name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
      },
      "notes": [
        {
          "category": "other",
          "text": "Time-of-check Time-of-use (TOCTOU) Race Condition",
          "title": "CWE-367"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2890999",
          "CSAFPID-2890998",
          "CSAFPID-2891000",
          "CSAFPID-2893954",
          "CSAFPID-2893955",
          "CSAFPID-2893956"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-21485 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-21485.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2890999",
            "CSAFPID-2890998",
            "CSAFPID-2891000",
            "CSAFPID-2893954",
            "CSAFPID-2893955",
            "CSAFPID-2893956"
          ]
        }
      ],
      "title": "CVE-2025-21485"
    },
    {
      "cve": "CVE-2025-21486",
      "cwe": {
        "id": "CWE-822",
        "name": "Untrusted Pointer Dereference"
      },
      "notes": [
        {
          "category": "other",
          "text": "Untrusted Pointer Dereference",
          "title": "CWE-822"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2890999",
          "CSAFPID-2890998",
          "CSAFPID-2891000",
          "CSAFPID-2893954",
          "CSAFPID-2893955",
          "CSAFPID-2893956"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-21486 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-21486.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2890999",
            "CSAFPID-2890998",
            "CSAFPID-2891000",
            "CSAFPID-2893954",
            "CSAFPID-2893955",
            "CSAFPID-2893956"
          ]
        }
      ],
      "title": "CVE-2025-21486"
    },
    {
      "cve": "CVE-2025-25178",
      "cwe": {
        "id": "CWE-1284",
        "name": "Improper Validation of Specified Quantity in Input"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Validation of Specified Quantity in Input",
          "title": "CWE-1284"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2890999",
          "CSAFPID-2890998",
          "CSAFPID-2891000",
          "CSAFPID-2893954",
          "CSAFPID-2893955",
          "CSAFPID-2893956"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-25178 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-25178.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2890999",
            "CSAFPID-2890998",
            "CSAFPID-2891000",
            "CSAFPID-2893954",
            "CSAFPID-2893955",
            "CSAFPID-2893956"
          ]
        }
      ],
      "title": "CVE-2025-25178"
    },
    {
      "cve": "CVE-2025-26432",
      "product_status": {
        "known_affected": [
          "CSAFPID-2890999",
          "CSAFPID-2890998",
          "CSAFPID-2891000",
          "CSAFPID-2893954",
          "CSAFPID-2893955",
          "CSAFPID-2893956"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-26432 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-26432.json"
        }
      ],
      "title": "CVE-2025-26432"
    },
    {
      "cve": "CVE-2025-26437",
      "product_status": {
        "known_affected": [
          "CSAFPID-2890999",
          "CSAFPID-2890998",
          "CSAFPID-2891000",
          "CSAFPID-2893954",
          "CSAFPID-2893955",
          "CSAFPID-2893956"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-26437 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-26437.json"
        }
      ],
      "title": "CVE-2025-26437"
    },
    {
      "cve": "CVE-2025-26441",
      "product_status": {
        "known_affected": [
          "CSAFPID-2890999",
          "CSAFPID-2890998",
          "CSAFPID-2891000",
          "CSAFPID-2893954",
          "CSAFPID-2893955",
          "CSAFPID-2893956"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-26441 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-26441.json"
        }
      ],
      "title": "CVE-2025-26441"
    },
    {
      "cve": "CVE-2025-26443",
      "product_status": {
        "known_affected": [
          "CSAFPID-2890999",
          "CSAFPID-2890998",
          "CSAFPID-2891000",
          "CSAFPID-2893954",
          "CSAFPID-2893955",
          "CSAFPID-2893956"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-26443 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-26443.json"
        }
      ],
      "title": "CVE-2025-26443"
    },
    {
      "cve": "CVE-2025-26445",
      "product_status": {
        "known_affected": [
          "CSAFPID-2890999",
          "CSAFPID-2890998",
          "CSAFPID-2891000",
          "CSAFPID-2893954",
          "CSAFPID-2893955",
          "CSAFPID-2893956"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-26445 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-26445.json"
        }
      ],
      "title": "CVE-2025-26445"
    },
    {
      "cve": "CVE-2025-26448",
      "product_status": {
        "known_affected": [
          "CSAFPID-2890999",
          "CSAFPID-2890998",
          "CSAFPID-2891000",
          "CSAFPID-2893954",
          "CSAFPID-2893955",
          "CSAFPID-2893956"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-26448 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-26448.json"
        }
      ],
      "title": "CVE-2025-26448"
    },
    {
      "cve": "CVE-2025-26449",
      "product_status": {
        "known_affected": [
          "CSAFPID-2890999",
          "CSAFPID-2890998",
          "CSAFPID-2891000",
          "CSAFPID-2893954",
          "CSAFPID-2893955",
          "CSAFPID-2893956"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-26449 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-26449.json"
        }
      ],
      "title": "CVE-2025-26449"
    },
    {
      "cve": "CVE-2025-26450",
      "product_status": {
        "known_affected": [
          "CSAFPID-2890999",
          "CSAFPID-2890998",
          "CSAFPID-2891000",
          "CSAFPID-2893954",
          "CSAFPID-2893955",
          "CSAFPID-2893956"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-26450 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-26450.json"
        }
      ],
      "title": "CVE-2025-26450"
    },
    {
      "cve": "CVE-2025-26452",
      "product_status": {
        "known_affected": [
          "CSAFPID-2890999",
          "CSAFPID-2890998",
          "CSAFPID-2891000",
          "CSAFPID-2893954",
          "CSAFPID-2893955",
          "CSAFPID-2893956"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-26452 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-26452.json"
        }
      ],
      "title": "CVE-2025-26452"
    },
    {
      "cve": "CVE-2025-26453",
      "product_status": {
        "known_affected": [
          "CSAFPID-2890999",
          "CSAFPID-2890998",
          "CSAFPID-2891000",
          "CSAFPID-2893954",
          "CSAFPID-2893955",
          "CSAFPID-2893956"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-26453 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-26453.json"
        }
      ],
      "title": "CVE-2025-26453"
    },
    {
      "cve": "CVE-2025-26455",
      "product_status": {
        "known_affected": [
          "CSAFPID-2890999",
          "CSAFPID-2890998",
          "CSAFPID-2891000",
          "CSAFPID-2893954",
          "CSAFPID-2893955",
          "CSAFPID-2893956"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-26455 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-26455.json"
        }
      ],
      "title": "CVE-2025-26455"
    },
    {
      "cve": "CVE-2025-26456",
      "product_status": {
        "known_affected": [
          "CSAFPID-2890999",
          "CSAFPID-2890998",
          "CSAFPID-2891000",
          "CSAFPID-2893954",
          "CSAFPID-2893955",
          "CSAFPID-2893956"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-26456 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-26456.json"
        }
      ],
      "title": "CVE-2025-26456"
    },
    {
      "cve": "CVE-2025-26458",
      "product_status": {
        "known_affected": [
          "CSAFPID-2890999",
          "CSAFPID-2890998",
          "CSAFPID-2891000",
          "CSAFPID-2893954",
          "CSAFPID-2893955",
          "CSAFPID-2893956"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-26458 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-26458.json"
        }
      ],
      "title": "CVE-2025-26458"
    },
    {
      "cve": "CVE-2025-26462",
      "product_status": {
        "known_affected": [
          "CSAFPID-2890999",
          "CSAFPID-2890998",
          "CSAFPID-2891000",
          "CSAFPID-2893954",
          "CSAFPID-2893955",
          "CSAFPID-2893956"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-26462 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-26462.json"
        }
      ],
      "title": "CVE-2025-26462"
    },
    {
      "cve": "CVE-2025-26463",
      "product_status": {
        "known_affected": [
          "CSAFPID-2890999",
          "CSAFPID-2890998",
          "CSAFPID-2891000",
          "CSAFPID-2893954",
          "CSAFPID-2893955",
          "CSAFPID-2893956"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-26463 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-26463.json"
        }
      ],
      "title": "CVE-2025-26463"
    },
    {
      "cve": "CVE-2025-27029",
      "cwe": {
        "id": "CWE-126",
        "name": "Buffer Over-read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Buffer Over-read",
          "title": "CWE-126"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2890999",
          "CSAFPID-2890998",
          "CSAFPID-2891000",
          "CSAFPID-2893954",
          "CSAFPID-2893955",
          "CSAFPID-2893956"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-27029 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-27029.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2890999",
            "CSAFPID-2890998",
            "CSAFPID-2891000",
            "CSAFPID-2893954",
            "CSAFPID-2893955",
            "CSAFPID-2893956"
          ]
        }
      ],
      "title": "CVE-2025-27029"
    },
    {
      "cve": "CVE-2025-32312",
      "product_status": {
        "known_affected": [
          "CSAFPID-2890999",
          "CSAFPID-2890998",
          "CSAFPID-2891000",
          "CSAFPID-2893954",
          "CSAFPID-2893955",
          "CSAFPID-2893956"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-32312 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-32312.json"
        }
      ],
      "title": "CVE-2025-32312"
    }
  ]
}

wid-sec-w-2025-1225

Vulnerability from csaf_certbund

Published

2025-06-02 22:00

Modified

2025-06-02 22:00

Summary

Android Patchday Juni 2025: Mehrere Schwachstellen

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung

Das Android Betriebssystem ist eine quelloffene Plattform für mobile Geräte. Die Basis bildet der Linux-Kernel.

Angriff

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Android ausnutzen, um seine Rechte zu erweitern, beliebigen Programmcode auszuführen, Informationen offenzulegen, einen Denial-of-Service auszulösen und weitere nicht spezifizierte Auswirkungen zu erzielen. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich.

Betroffene Betriebssysteme

- Linux - UNIX

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "hoch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Das Android Betriebssystem ist eine quelloffene Plattform f\u00fcr mobile Ger\u00e4te. Die Basis bildet der Linux-Kernel.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Android ausnutzen, um seine Rechte zu erweitern, beliebigen Programmcode auszuf\u00fchren, Informationen offenzulegen, einen Denial-of-Service auszul\u00f6sen und weitere nicht spezifizierte Auswirkungen zu erzielen. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Linux\n- UNIX",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2025-1225 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1225.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2025-1225 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1225"
      },
      {
        "category": "external",
        "summary": "Android Security Bulletin June 2025 vom 2025-06-02",
        "url": "https://source.android.com/docs/security/bulletin/2025-06-01"
      }
    ],
    "source_lang": "en-US",
    "title": "Android Patchday Juni 2025: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2025-06-02T22:00:00.000+00:00",
      "generator": {
        "date": "2025-06-03T11:33:32.780+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.3.12"
        }
      },
      "id": "WID-SEC-W-2025-1225",
      "initial_release_date": "2025-06-02T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2025-06-02T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "13 \u003c2025-06-05",
                "product": {
                  "name": "Google Android 13 \u003c2025-06-05",
                  "product_id": "T044312"
                }
              },
              {
                "category": "product_version",
                "name": "13 2025-06-05",
                "product": {
                  "name": "Google Android 13 2025-06-05",
                  "product_id": "T044312-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:google:android:13__2025-06-05"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "14 \u003c2025-06-05",
                "product": {
                  "name": "Google Android 14 \u003c2025-06-05",
                  "product_id": "T044313"
                }
              },
              {
                "category": "product_version",
                "name": "14 2025-06-05",
                "product": {
                  "name": "Google Android 14 2025-06-05",
                  "product_id": "T044313-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:google:android:14__2025-06-05"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "15 \u003c2025-06-05",
                "product": {
                  "name": "Google Android 15 \u003c2025-06-05",
                  "product_id": "T044314"
                }
              },
              {
                "category": "product_version",
                "name": "15 2025-06-05",
                "product": {
                  "name": "Google Android 15 2025-06-05",
                  "product_id": "T044314-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:google:android:15__2025-06-05"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Android"
          }
        ],
        "category": "vendor",
        "name": "Google"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-26441",
      "product_status": {
        "known_affected": [
          "T044313",
          "T044312",
          "T044314"
        ]
      },
      "release_date": "2025-06-02T22:00:00.000+00:00",
      "title": "CVE-2025-26441"
    },
    {
      "cve": "CVE-2025-26443",
      "product_status": {
        "known_affected": [
          "T044313",
          "T044312",
          "T044314"
        ]
      },
      "release_date": "2025-06-02T22:00:00.000+00:00",
      "title": "CVE-2025-26443"
    },
    {
      "cve": "CVE-2025-26445",
      "product_status": {
        "known_affected": [
          "T044313",
          "T044312",
          "T044314"
        ]
      },
      "release_date": "2025-06-02T22:00:00.000+00:00",
      "title": "CVE-2025-26445"
    },
    {
      "cve": "CVE-2025-26448",
      "product_status": {
        "known_affected": [
          "T044313",
          "T044312",
          "T044314"
        ]
      },
      "release_date": "2025-06-02T22:00:00.000+00:00",
      "title": "CVE-2025-26448"
    },
    {
      "cve": "CVE-2025-26449",
      "product_status": {
        "known_affected": [
          "T044313",
          "T044312",
          "T044314"
        ]
      },
      "release_date": "2025-06-02T22:00:00.000+00:00",
      "title": "CVE-2025-26449"
    },
    {
      "cve": "CVE-2025-26450",
      "product_status": {
        "known_affected": [
          "T044313",
          "T044312",
          "T044314"
        ]
      },
      "release_date": "2025-06-02T22:00:00.000+00:00",
      "title": "CVE-2025-26450"
    },
    {
      "cve": "CVE-2025-26452",
      "product_status": {
        "known_affected": [
          "T044313",
          "T044312",
          "T044314"
        ]
      },
      "release_date": "2025-06-02T22:00:00.000+00:00",
      "title": "CVE-2025-26452"
    },
    {
      "cve": "CVE-2025-26453",
      "product_status": {
        "known_affected": [
          "T044313",
          "T044312",
          "T044314"
        ]
      },
      "release_date": "2025-06-02T22:00:00.000+00:00",
      "title": "CVE-2025-26453"
    },
    {
      "cve": "CVE-2025-26455",
      "product_status": {
        "known_affected": [
          "T044313",
          "T044312",
          "T044314"
        ]
      },
      "release_date": "2025-06-02T22:00:00.000+00:00",
      "title": "CVE-2025-26455"
    },
    {
      "cve": "CVE-2025-26456",
      "product_status": {
        "known_affected": [
          "T044313",
          "T044312",
          "T044314"
        ]
      },
      "release_date": "2025-06-02T22:00:00.000+00:00",
      "title": "CVE-2025-26456"
    },
    {
      "cve": "CVE-2025-26458",
      "product_status": {
        "known_affected": [
          "T044313",
          "T044312",
          "T044314"
        ]
      },
      "release_date": "2025-06-02T22:00:00.000+00:00",
      "title": "CVE-2025-26458"
    },
    {
      "cve": "CVE-2025-26462",
      "product_status": {
        "known_affected": [
          "T044313",
          "T044312",
          "T044314"
        ]
      },
      "release_date": "2025-06-02T22:00:00.000+00:00",
      "title": "CVE-2025-26462"
    },
    {
      "cve": "CVE-2025-26463",
      "product_status": {
        "known_affected": [
          "T044313",
          "T044312",
          "T044314"
        ]
      },
      "release_date": "2025-06-02T22:00:00.000+00:00",
      "title": "CVE-2025-26463"
    },
    {
      "cve": "CVE-2025-27029",
      "product_status": {
        "known_affected": [
          "T044313",
          "T044312",
          "T044314"
        ]
      },
      "release_date": "2025-06-02T22:00:00.000+00:00",
      "title": "CVE-2025-27029"
    },
    {
      "cve": "CVE-2025-32312",
      "product_status": {
        "known_affected": [
          "T044313",
          "T044312",
          "T044314"
        ]
      },
      "release_date": "2025-06-02T22:00:00.000+00:00",
      "title": "CVE-2025-32312"
    },
    {
      "cve": "CVE-2024-12576",
      "product_status": {
        "known_affected": [
          "T044313",
          "T044312",
          "T044314"
        ]
      },
      "release_date": "2025-06-02T22:00:00.000+00:00",
      "title": "CVE-2024-12576"
    },
    {
      "cve": "CVE-2024-12837",
      "product_status": {
        "known_affected": [
          "T044313",
          "T044312",
          "T044314"
        ]
      },
      "release_date": "2025-06-02T22:00:00.000+00:00",
      "title": "CVE-2024-12837"
    },
    {
      "cve": "CVE-2024-47893",
      "product_status": {
        "known_affected": [
          "T044313",
          "T044312",
          "T044314"
        ]
      },
      "release_date": "2025-06-02T22:00:00.000+00:00",
      "title": "CVE-2024-47893"
    },
    {
      "cve": "CVE-2024-53010",
      "product_status": {
        "known_affected": [
          "T044313",
          "T044312",
          "T044314"
        ]
      },
      "release_date": "2025-06-02T22:00:00.000+00:00",
      "title": "CVE-2024-53010"
    },
    {
      "cve": "CVE-2024-53019",
      "product_status": {
        "known_affected": [
          "T044313",
          "T044312",
          "T044314"
        ]
      },
      "release_date": "2025-06-02T22:00:00.000+00:00",
      "title": "CVE-2024-53019"
    },
    {
      "cve": "CVE-2024-53020",
      "product_status": {
        "known_affected": [
          "T044313",
          "T044312",
          "T044314"
        ]
      },
      "release_date": "2025-06-02T22:00:00.000+00:00",
      "title": "CVE-2024-53020"
    },
    {
      "cve": "CVE-2024-53021",
      "product_status": {
        "known_affected": [
          "T044313",
          "T044312",
          "T044314"
        ]
      },
      "release_date": "2025-06-02T22:00:00.000+00:00",
      "title": "CVE-2024-53021"
    },
    {
      "cve": "CVE-2024-53026",
      "product_status": {
        "known_affected": [
          "T044313",
          "T044312",
          "T044314"
        ]
      },
      "release_date": "2025-06-02T22:00:00.000+00:00",
      "title": "CVE-2024-53026"
    },
    {
      "cve": "CVE-2025-0073",
      "product_status": {
        "known_affected": [
          "T044313",
          "T044312",
          "T044314"
        ]
      },
      "release_date": "2025-06-02T22:00:00.000+00:00",
      "title": "CVE-2025-0073"
    },
    {
      "cve": "CVE-2025-0468",
      "product_status": {
        "known_affected": [
          "T044313",
          "T044312",
          "T044314"
        ]
      },
      "release_date": "2025-06-02T22:00:00.000+00:00",
      "title": "CVE-2025-0468"
    },
    {
      "cve": "CVE-2025-0478",
      "product_status": {
        "known_affected": [
          "T044313",
          "T044312",
          "T044314"
        ]
      },
      "release_date": "2025-06-02T22:00:00.000+00:00",
      "title": "CVE-2025-0478"
    },
    {
      "cve": "CVE-2025-0819",
      "product_status": {
        "known_affected": [
          "T044313",
          "T044312",
          "T044314"
        ]
      },
      "release_date": "2025-06-02T22:00:00.000+00:00",
      "title": "CVE-2025-0819"
    },
    {
      "cve": "CVE-2025-0835",
      "product_status": {
        "known_affected": [
          "T044313",
          "T044312",
          "T044314"
        ]
      },
      "release_date": "2025-06-02T22:00:00.000+00:00",
      "title": "CVE-2025-0835"
    },
    {
      "cve": "CVE-2025-21424",
      "product_status": {
        "known_affected": [
          "T044313",
          "T044312",
          "T044314"
        ]
      },
      "release_date": "2025-06-02T22:00:00.000+00:00",
      "title": "CVE-2025-21424"
    },
    {
      "cve": "CVE-2025-21485",
      "product_status": {
        "known_affected": [
          "T044313",
          "T044312",
          "T044314"
        ]
      },
      "release_date": "2025-06-02T22:00:00.000+00:00",
      "title": "CVE-2025-21485"
    },
    {
      "cve": "CVE-2025-21486",
      "product_status": {
        "known_affected": [
          "T044313",
          "T044312",
          "T044314"
        ]
      },
      "release_date": "2025-06-02T22:00:00.000+00:00",
      "title": "CVE-2025-21486"
    },
    {
      "cve": "CVE-2025-25178",
      "product_status": {
        "known_affected": [
          "T044313",
          "T044312",
          "T044314"
        ]
      },
      "release_date": "2025-06-02T22:00:00.000+00:00",
      "title": "CVE-2025-25178"
    },
    {
      "cve": "CVE-2025-26432",
      "product_status": {
        "known_affected": [
          "T044313",
          "T044312",
          "T044314"
        ]
      },
      "release_date": "2025-06-02T22:00:00.000+00:00",
      "title": "CVE-2025-26432"
    },
    {
      "cve": "CVE-2025-26437",
      "product_status": {
        "known_affected": [
          "T044313",
          "T044312",
          "T044314"
        ]
      },
      "release_date": "2025-06-02T22:00:00.000+00:00",
      "title": "CVE-2025-26437"
    }
  ]
}

ghsa-w4q4-rw8x-3296

Vulnerability from github

Published

2025-06-03 06:31

Modified

2025-06-03 06:31

Severity ?

8.2 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L

Details

Information disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call.

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2024-53026"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-126"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2025-06-03T06:15:25Z",
    "severity": "HIGH"
  },
  "details": "Information disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call.",
  "id": "GHSA-w4q4-rw8x-3296",
  "modified": "2025-06-03T06:31:14Z",
  "published": "2025-06-03T06:31:14Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53026"
    },
    {
      "type": "WEB",
      "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L",
      "type": "CVSS_V3"
    }
  ]
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

CVE-2024-53026 (GCVE-0-2024-53026)

Vulnerability from cvelistv5

fkie_cve-2024-53026

Vulnerability from fkie_nvd

ncsc-2025-0185

Vulnerability from csaf_ncscnl

wid-sec-w-2025-1225

Vulnerability from csaf_certbund

ghsa-w4q4-rw8x-3296

Vulnerability from github

Tags

Sightings

Nomenclature