InfoSecBulletin Cybersecurity for mankind
Qualcomm’s March 2025 Security Bulletin addresses vulnerabilities in its products, including automotive systems, mobile chipsets, and networking devices. It includes fixes for critical issues like memory corruption and input validation flaws.
Critical vulnerabilities have been identified in automotive systems, particularly affecting the QNX operating system (CVE-2024-53012, CVE-2024-53022, CVE-2024-53029, CVE-2024-53030, CVE-2024-53031, CVE-2024-53032) and vehicle networks (CVE-2024-53028). These could enable attackers to gain local access and control essential vehicle functions.
CISA alerts to cyberattacks affecting U.S. water utilities
“CyberStrike” AI-Driven Security Platform for Automated Testing
AIDCQ Propose to invest $2 billion in AI data center in Bangladesh
NVIDIA BlueField Flaw Enables Code Execution Attacks
Massive customer data from India’s Bank of Baroda surfaced online
Active Exploits Hit Fortinet, Arista: AI Discovered Linux Kernel Zero-Day
Sam Altman Claims AI “singularity” has arrived, Where Systems Improve by Themselves
Shinyhunters claimed and set deadline to publish E&Y data
Microsoft, NVIDIA and CrowdStrike Initiate Alliance for Open-Source AI Security
Google Search Results Reportedly Show Claude AI Shared Chats
The bulletin highlights vulnerabilities in Qualcomm chipsets used in mobile devices, including denial-of-service (DoS) issues and risks of remote code execution.
The bulletin includes both proprietary software fixes and patches for vulnerabilities in open-source components used in Qualcomm products. These vulnerabilities impact areas like the Android operating system, camera drivers, and multimedia frameworks.
Qualcomm has informed customers and partners about vulnerabilities and is urging them to apply patches immediately. Users should check with their device manufacturers for patch and update availability.
For a list of affected devices and official patches, check Qualcomm’s security bulletin page.
