InfoSecBulletin Cybersecurity for mankind
Qualcomm’s March 2025 Security Bulletin addresses vulnerabilities in its products, including automotive systems, mobile chipsets, and networking devices. It includes fixes for critical issues like memory corruption and input validation flaws.
Critical vulnerabilities have been identified in automotive systems, particularly affecting the QNX operating system (CVE-2024-53012, CVE-2024-53022, CVE-2024-53029, CVE-2024-53030, CVE-2024-53031, CVE-2024-53032) and vehicle networks (CVE-2024-53028). These could enable attackers to gain local access and control essential vehicle functions.
Russia detects first SuperCard malware attacks via NFC
Income Property Investments exposes 170,000+ Individuals record
ALERT (CVE: 2023-28771)
Zyxel Firewalls Under Attack via CVE-2023-28771 by 244 IPs
CISA Flags Active Exploits in Apple iOS and TP-Link Routers
10K Records Allegedly from Mac Cloud Provider’s Customers Leaked Online
Canada 2nd largest airlines “WestJet” investigates cyberattack disrupting internal systems
Paraguay 7.4 Million Citizen Records Leaked on Dark Web
High-Severity Flaw in HashiCorp Nomad Allows Privilege Escalation
SoftBank: Over 137,000 personal info leaked
Alert
Trend Micro Apex One Flaw Allow Attackers to Inject Malicious Code
The bulletin highlights vulnerabilities in Qualcomm chipsets used in mobile devices, including denial-of-service (DoS) issues and risks of remote code execution.
The bulletin includes both proprietary software fixes and patches for vulnerabilities in open-source components used in Qualcomm products. These vulnerabilities impact areas like the Android operating system, camera drivers, and multimedia frameworks.
Qualcomm has informed customers and partners about vulnerabilities and is urging them to apply patches immediately. Users should check with their device manufacturers for patch and update availability.
For a list of affected devices and official patches, check Qualcomm’s security bulletin page.
