CVE-2025-21423

Memory corruption occurs when handling client calls to EnableTestMode through an Escape call...

CVE-2024-45552

Information disclosure may occur during a video call if a device resets due to a non-conforming RTCP packet that doesnt adhere to RFC standards...

CVE-2025-21441 Out-of-bounds Read in Windows WLAN Host

Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver...

CVE-2025-21441 Out-of-bounds Read in Windows WLAN Host

Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver...

CVE-2025-21441

CVE-2025-21441: Memory corruption when an IOCTL writes WLAN board data from user-space. The only concrete details provided in the connected sources relate to Fedora advisories for mingw-python-urllib3 that reference this CVE among others. Fedora advisories FEDORA-2026-2b6dfd7c83 and FEDORA-2026-8...

CVE-2025-21440 Out-of-bounds Read in Windows WLAN Host

Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver...

CVE-2025-21440 Out-of-bounds Read in Windows WLAN Host

Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver...

CVE-2025-21439

CVE-2025-21439 describes a memory corruption risk in the WLAN stack when an IOCTL reads board data and copies it to the provided output buffer. The CVSSv3.1 vector (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) assigns a base score of 7.8 (HIGH) with local, low-complexity access and no user interaction. T...

CVE-2025-21439 Out-of-bounds Read in Windows WLAN Host

Memory corruption may occur while reading board data via IOCTL call when the WLAN driver copies the content to the provided output buffer...

CVE-2025-21438 Out-of-bounds Read in Windows WLAN Host

Memory corruption while IOCTL call is invoked from user-space to read board data...

CVE-2025-21438 Out-of-bounds Read in Windows WLAN Host

Memory corruption while IOCTL call is invoked from user-space to read board data...

CVE-2025-21423 Improper Validation of Array Index in Display

Memory corruption occurs when handling client calls to EnableTestMode through an Escape call...

CVE-2024-45552

CVE-2024-45552 affects Qualcomm components (closed‑source) and involves an information-disclosure condition during a video call when a device resets due to a non-conforming RTCP packet that does not adhere to RFC standards. root cause: RTCP packet non-conformance leading to state reset and data e...

CVE-2024-45552 Buffer Over-read in Data Network Stack & Connectivity

Information disclosure may occur during a video call if a device resets due to a non-conforming RTCP packet that doesnt adhere to RFC standards...

CVE-2024-45552 Buffer Over-read in Data Network Stack & Connectivity

Information disclosure may occur during a video call if a device resets due to a non-conforming RTCP packet that doesnt adhere to RFC standards...

A week in security (March 31 – April 6)

Last week on Malwarebytes Labs: Why we’re no longer doing April Fools’ Day Intimate images from kink and LGBTQ+ dating apps left exposed online "Urgent reminder" tax scam wants to phish your Microsoft credentials "Nudify" deepfakes stored unprotected online Location, name, and photos of random ki...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a series of chipsets from Qualcomm, an American company. Qualcomm Chipsets have a security vulnerability that stems from a possible information leak during a video call...

PT-2025-15201 · Qualcomm · Snapdragon +35

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: Memory corruption occurs when handling client calls to EnableTestMode through an Escape call. Recommendations: At the moment, there is no information about a newer version that contains a fi...

PT-2025-15214 · Qualcomm · Qualcomm Snapdragon Compute

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon Compute affected versions not specified Description: The issue is related to memory corruption that occurs when an IOCTL call is invoked from user-space to write board data to the WLAN driver. Recommendations: At the momen...

PT-2025-15213 · Qualcomm · Qualcomm Snapdragon Compute

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon Compute affected versions not specified Description: The issue is related to memory corruption that occurs when an IOCTL call is invoked from user-space to write board data to the WLAN driver. Recommendations: At the momen...