PatchTheCVE: apq8037 firmwarehttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2025-21433: Transient DOS when importing a PKCS#8-encoded RSA private key with a zero-sized modulus.https://patchthecve.com/cve/CVE-2025-21433.htmlhttps://patchthecve.com/cve/CVE-2025-21433.htmlWed, 17 Jun 2026 08:43:23 +0000MEDIUM 6.2: Transient DOS when importing a PKCS#8-encoded RSA private key with a zero-sized modulus.CVE-2024-43052: Memory corruption while processing API calls to NPU with invalid input.https://patchthecve.com/cve/CVE-2024-43052.htmlhttps://patchthecve.com/cve/CVE-2024-43052.htmlWed, 17 Jun 2026 07:50:20 +0000HIGH 7.8: Memory corruption while processing API calls to NPU with invalid input.CVE-2016-10408: QSEE will randomly experience a fatal error during execution due to speculative instruction fetches from devichttps://patchthecve.com/cve/CVE-2016-10408.htmlhttps://patchthecve.com/cve/CVE-2016-10408.htmlWed, 17 Jun 2026 00:39:37 +0000HIGH 8.4: QSEE will randomly experience a fatal error during execution due to speculative instruction fetches from device memory. Device memory is not valid executable memory.CVE-2024-23358: Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in Modem.https://patchthecve.com/cve/CVE-2024-23358.htmlhttps://patchthecve.com/cve/CVE-2024-23358.htmlWed, 17 Jun 2026 07:12:43 +0000HIGH 7.5: Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in Modem.CVE-2024-23357: Transient DOS while importing a PKCS#8-encoded RSA key with zero bytes modulus.https://patchthecve.com/cve/CVE-2024-23357.htmlhttps://patchthecve.com/cve/CVE-2024-23357.htmlWed, 17 Jun 2026 07:12:42 +0000MEDIUM 6.2: Transient DOS while importing a PKCS#8-encoded RSA key with zero bytes modulus.CVE-2024-21461: Memory corruption while performing finish HMAC operation when context is freed by keymaster.https://patchthecve.com/cve/CVE-2024-21461.htmlhttps://patchthecve.com/cve/CVE-2024-21461.htmlWed, 17 Jun 2026 07:09:23 +0000HIGH 8.4: Memory corruption while performing finish HMAC operation when context is freed by keymaster.CVE-2023-43551: Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authenticatihttps://patchthecve.com/cve/CVE-2023-43551.htmlhttps://patchthecve.com/cve/CVE-2023-43551.htmlWed, 17 Jun 2026 06:25:55 +0000CRITICAL 9.1: Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command.CVE-2023-33023: Memory corruption while processing finish_sign command to pass a rsp buffer.https://patchthecve.com/cve/CVE-2023-33023.htmlhttps://patchthecve.com/cve/CVE-2023-33023.htmlWed, 17 Jun 2026 06:00:22 +0000HIGH 8.4: Memory corruption while processing finish_sign command to pass a rsp buffer.CVE-2023-28547: Memory corruption in SPS Application while requesting for public key in sorter TA.https://patchthecve.com/cve/CVE-2023-28547.htmlhttps://patchthecve.com/cve/CVE-2023-28547.htmlWed, 17 Jun 2026 05:48:01 +0000HIGH 8.4: Memory corruption in SPS Application while requesting for public key in sorter TA.