InfoSecBulletin Cybersecurity for mankind
Qualcomm’s March 2025 Security Bulletin addresses vulnerabilities in its products, including automotive systems, mobile chipsets, and networking devices. It includes fixes for critical issues like memory corruption and input validation flaws.
Critical vulnerabilities have been identified in automotive systems, particularly affecting the QNX operating system (CVE-2024-53012, CVE-2024-53022, CVE-2024-53029, CVE-2024-53030, CVE-2024-53031, CVE-2024-53032) and vehicle networks (CVE-2024-53028). These could enable attackers to gain local access and control essential vehicle functions.
NVIDIA Releases Security Update For GPU Driver Vulnerabilities
‘SessionShark’ ToolKit Bypasses Microsoft Office 365 MFA
159 CVEs Exploited in Q1 2025 : 28.3% Within 24 Hours of Disclosure
NVIDIA NeMo Framework Vuln Allow Attackers RCE
Cisco Issued Urgent Security Advisories For Multiple Products
SonicWall patched SSLVPN Vuln Allowing Firewall Crashing
GitLab Releases Security Update For Multiple Vulns
ISPAB president “whatsapp” got hacked via phishing link
Zyxel released patches 2 vulns in its USG FLEX H series firewalls
South Korea’s largest SK Telecom Hit by Malware: SIM-related info leaked
The bulletin highlights vulnerabilities in Qualcomm chipsets used in mobile devices, including denial-of-service (DoS) issues and risks of remote code execution.
The bulletin includes both proprietary software fixes and patches for vulnerabilities in open-source components used in Qualcomm products. These vulnerabilities impact areas like the Android operating system, camera drivers, and multimedia frameworks.
Qualcomm has informed customers and partners about vulnerabilities and is urging them to apply patches immediately. Users should check with their device manufacturers for patch and update availability.
For a list of affected devices and official patches, check Qualcomm’s security bulletin page.
