Qualcomm July 2025 Security Bulletin

Created on 2025-07-08 13:19, updated on 2025-07-08 13:41, by Cédric Bonhomme
JSON
Description
Public ID Security Rating CVSS Rating Technology Area Date Reported
CVE-2024-53009 Critical Medium Automotive Autonomy Internal
CVE-2025-21444 Critical High Data Network Stack & Connectivity Internal
CVE-2025-21445 Critical High Data Network Stack & Connectivity Internal
CVE-2025-21450 Critical Critical GPS Internal
CVE-2025-21422 High High Automotive Internal
CVE-2025-21427 High High Data Network Stack & Connectivity 08/18/2024
CVE-2025-21432 High High HLOS Internal
CVE-2025-21433 High Medium HLOS Internal
CVE-2025-21446 High High WLAN Firmware Internal
CVE-2025-21449 High High WLAN Firmware Internal
CVE-2025-21454 High High WLAN Firmware Internal
CVE-2025-21466 High High Display Internal
CVE-2025-27044 High High Video 10/27/2024
CVE-2025-27046 High High Display Internal
CVE-2025-27047 High High Display Internal
CVE-2025-27050 High High Camera 11/06/2024
CVE-2025-27051 High High Windows WLAN Host 12/14/2024
CVE-2025-27052 High High Core Services 12/20/2024
CVE-2025-27055 High High Camera Internal
CVE-2025-27058 High High Computer Vision Internal

Open Source Software Issues

The tables below summarize security vulnerabilities that were addressed through open source software

This table lists high impact security vulnerabilities. Patches are being actively shared with OEMs, who have been notified and strongly recommended to deploy those patches on released devices as soon as possible. Please contact the device manufacturer for information on the patching status of released devices.

Public ID Security Rating CVSS Rating Technology Area Date Reported
CVE-2025-27042 High High Video 09/22/2024
CVE-2025-27043 High High Video 09/17/2024
CVE-2025-27056 High High DSP Service Internal
CVE-2025-27057 High High WLAN Host Internal
CVE-2025-27061 High High Video 10/04/2024
Vulnerabilities included in this bundle
Meta
[
  {
    "ref": [
      "https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2025-bulletin.html"
    ]
  }
]
Combined detection rules

Detection rules are retrieved from Rulezet.

Combined sightings
Author Vulnerability Source Type Date