Vulnerabilities > Qualcomm > Video Collaboration VC3 Platform Firmware

DATE CVE VULNERABILITY TITLE RISK
2025-05-06 CVE-2024-45564 Use After Free vulnerability in Qualcomm products
Memory corruption during concurrent access to server info object due to incorrect reference count update.
local
low complexity
qualcomm CWE-416
7.8
2025-05-06 CVE-2024-45570 Use of Out-of-range Pointer Offset vulnerability in Qualcomm products
Memory corruption may occur during IO configuration processing when the IO port count is invalid.
local
low complexity
qualcomm CWE-823
7.8
2025-05-06 CVE-2024-49835 Out-of-bounds Write vulnerability in Qualcomm products
Memory corruption while reading secure file.
local
low complexity
qualcomm CWE-787
7.8
2025-05-06 CVE-2024-49845 Improper Input Validation vulnerability in Qualcomm products
Memory corruption during the FRS UDS generation process.
local
low complexity
qualcomm CWE-20
7.8
2025-02-03 CVE-2024-38416 Out-of-bounds Read vulnerability in Qualcomm products
Information disclosure during audio playback.
local
low complexity
qualcomm CWE-125
5.5
2025-02-03 CVE-2024-38417 Out-of-bounds Read vulnerability in Qualcomm products
Information disclosure while processing IO control commands.
local
low complexity
qualcomm CWE-125
5.5
2025-02-03 CVE-2024-38418 Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Qualcomm products
Memory corruption while parsing the memory map info in IOCTL calls.
local
high complexity
qualcomm CWE-367
7.0
2025-02-03 CVE-2024-38420 Out-of-bounds Write vulnerability in Qualcomm products
Memory corruption while configuring a Hypervisor based input virtual device.
local
low complexity
qualcomm CWE-787
7.8
2025-02-03 CVE-2024-45560 Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Qualcomm products
Memory corruption while taking a snapshot with hardware encoder due to unvalidated userspace buffer.
local
high complexity
qualcomm CWE-367
7.0
2025-02-03 CVE-2024-45569 Improper Validation of Array Index vulnerability in Qualcomm products
Memory corruption while parsing the ML IE due to invalid frame content.
network
low complexity
qualcomm CWE-129
critical
9.8