Qualcomm Snapdragon vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Qualcomm Snapdragon: 202 record(s), with affected versions and fixes.
CVE-2025-47366
High · 7.8
CWE-749 Feb 2, 2026
Exposed Dangerous Method or Function in HLOS
Cryptographic issue when a Trusted Zone with outdated code is triggered by a HLOS providing incorrect input.
CVE-2025-47364
High · 7.8
CWE-190 Feb 2, 2026
Integer Overflow or Wraparound in Automotive
Memory corruption while calculating offset from partition start point.
CVE-2025-47363
High · 7.8
CWE-190 Feb 2, 2026
Integer Overflow or Wraparound in Automotive
Memory corruption when calculating oversized partition sizes without proper checks.
CVE-2025-47359
High · 7.8
CWE-416 Feb 2, 2026
Use After Free in Secure Processor
Memory Corruption when multiple threads simultaneously access a memory free API.
CVE-2025-47358
High · 7.8
CWE-416 Feb 2, 2026
Use After Free in Secure Processor
Memory Corruption when user space address is modified and passed to mem_free API, causing kernel memory to be freed inadvertently.
CVE-2025-47396
High · 7.8
CWE-415 Jan 7, 2026
Double Free in Graphics
Memory corruption occurs when a secure application is launched on a device with insufficient memory.
CVE-2025-47395
Medium · 6.5
CWE-126 Jan 7, 2026
Buffer Over-read in WLAN Firmware
Transient DOS while parsing a WLAN management frame with a Vendor Specific Information Element.
CVE-2025-47394
High · 7.8
CWE-120 Jan 7, 2026
Buffer Copy Without Checking Size of Input in DSP Service
Memory corruption when copying overlapping buffers during memory operations due to incorrect offset calculations.
CVE-2025-47393
High · 7.8
CWE-129 Jan 7, 2026
Improper Validation of Array Index in Automotive Linux OS
Memory corruption when accessing resources in kernel driver.
CVE-2025-47388
High · 7.8
CWE-120 Jan 7, 2026
Buffer Copy without Checking Size of Input in DSP Service
Memory corruption while passing pages to DSP with an unaligned starting address.
CVE-2025-47380
High · 7.8
CWE-822 Jan 7, 2026
Untrusted Pointer Dereference in Camera
Memory corruption while preprocessing IOCTLs in sensors.
CVE-2025-47369
Medium · 5.5
CWE-200 Jan 7, 2026
Information Exposure in Computer Vision
Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID.
CVE-2025-47356
High · 7.8
CWE-415 Jan 7, 2026
Double Free in Video
Memory Corruption when multiple threads concurrently access and modify shared resources.
CVE-2025-47348
High · 7.8
CWE-457 Jan 7, 2026
Use of Uninitialized Variable in HLOS
Memory corruption while processing identity credential operations in the trusted application.
CVE-2025-47346
High · 7.8
CWE-787 Jan 7, 2026
Out-of-bounds Write in HLOS
Memory corruption while processing a secure logging command in the trusted application.
CVE-2025-47345
High · 8.4
CWE-323 Jan 7, 2026
Reusing a Nonce, Key Pair in Encryption in Automotive Platform
Cryptographic issue may occur while encrypting license data.
CVE-2025-47344
Medium · 6.4
CWE-367 Jan 7, 2026
Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver
Memory corruption while handling sensor utility operations.
CVE-2025-47343
High · 7.8
CWE-822 Jan 7, 2026
Untrusted Pointer Dereference in Video
Memory corruption while processing a video session to set video parameters.
CVE-2025-47339
High · 7.8
CWE-416 Jan 7, 2026
Use After Free in HLOS
Memory corruption while deinitializing a HDCP session.
CVE-2025-47337
Medium · 6.7
CWE-416 Jan 7, 2026
Use After Free in Camera Driver
Memory corruption while accessing a synchronization object during concurrent operations.
CVE-2025-47336
Medium · 6.7
CWE-416 Jan 7, 2026
Use After Free in Camera Driver
Memory corruption while performing sensor register read operations.
CVE-2025-47335
Medium · 6.7
CWE-120 Jan 7, 2026
Buffer Copy Without Checking Size of Input in Camera Driver
Memory corruption while parsing clock configuration data for a specific hardware type.
CVE-2025-47334
Medium · 6.7
CWE-120 Jan 7, 2026
Buffer Copy Without Checking Size of Input in Camera Driver
Memory corruption while processing shared command buffer packet between camera userspace and kernel.
CVE-2025-47333
Medium · 6.6
CWE-416 Jan 7, 2026
Use After Free in HLOS
Memory corruption while handling buffer mapping operations in the cryptographic driver.
CVE-2025-47332
Medium · 6.4
CWE-367 Jan 7, 2026
Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver
Memory corruption while processing a config call from userspace.