InfoSecBulletin Cybersecurity for mankind
Qualcomm’s March 2025 Security Bulletin addresses vulnerabilities in its products, including automotive systems, mobile chipsets, and networking devices. It includes fixes for critical issues like memory corruption and input validation flaws.
Critical vulnerabilities have been identified in automotive systems, particularly affecting the QNX operating system (CVE-2024-53012, CVE-2024-53022, CVE-2024-53029, CVE-2024-53030, CVE-2024-53031, CVE-2024-53032) and vehicle networks (CVE-2024-53028). These could enable attackers to gain local access and control essential vehicle functions.
Five new malware families actively targeting Asian Gov.t infra
T-Mobile Cuts Cables to Remove Chiness Salt Typhoon Hackers from Network
Splunk, Zyxel Patch Multiple Flaws Enabling RCE and Root Command Execution
“Zombie Card” attack revels expired Visa card may be used for contactless payments
Critical Zimbra RCE Flaw Actively Exploited in the Wild
Operation CameraSwarm
A single hacker compromise 1400+ Dahua camera worldwide
Cl0p Ransomware Listed 40+ Victims of PTC Windchill Campaign
Oracle Issues 943 Security Patches, Including Critical WebLogic Flaw
500+ critical infrastructure hit by Medusa ransomware
Critical WordPress Plugin Flaw Exposes 600,000 Sites to Attacks
The bulletin highlights vulnerabilities in Qualcomm chipsets used in mobile devices, including denial-of-service (DoS) issues and risks of remote code execution.
The bulletin includes both proprietary software fixes and patches for vulnerabilities in open-source components used in Qualcomm products. These vulnerabilities impact areas like the Android operating system, camera drivers, and multimedia frameworks.
Qualcomm has informed customers and partners about vulnerabilities and is urging them to apply patches immediately. Users should check with their device manufacturers for patch and update availability.
For a list of affected devices and official patches, check Qualcomm’s security bulletin page.
