PatchTheCVEapq8037 firmware vulnerabilities and fixes
Recent CVEs affecting apq8037 firmware, with upgrade or downgrade steps. 6 tracked.
Also searched as: apq8037firmware.
apq8037 firmware has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-07-08. Highest priority: CVE-2024-23358 (score 36/100).
- CVE-2025-21433 MEDIUM 6.2 MITIGATE MITIGATE Transient DOS when importing a PKCS#8-encoded RSA private key with a zero-sized modulus.
- CVE-2024-43052 HIGH 7.8 MITIGATE MITIGATE Memory corruption while processing API calls to NPU with invalid input.
- CVE-2024-23358 HIGH 7.5 MITIGATE MITIGATE Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in Modem.
- CVE-2024-23357 MEDIUM 6.2 MITIGATE MITIGATE Transient DOS while importing a PKCS#8-encoded RSA key with zero bytes modulus.
- CVE-2024-21461 HIGH 8.4 MITIGATE MITIGATE Memory corruption while performing finish HMAC operation when context is freed by keymaster.
- CVE-2016-10408 HIGH 8.4 MITIGATE MITIGATE QSEE will randomly experience a fatal error during execution due to speculative instruction fetches from devic
FAQ
How do I fix apq8037 firmware vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is apq8037 firmware being exploited right now?
None of the tracked apq8037 firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which apq8037 firmware CVE should I patch first?
CVE-2024-23358 currently ranks highest (36/100): Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in Modem..