Qualcomm Snapdragon vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Qualcomm Snapdragon: 202 record(s), with affected versions and fixes.
CVE-2025-47331
Medium · 6.1
CWE-126 Jan 7, 2026
Buffer Over-read in Video
Information disclosure while processing a firmware event.
CVE-2025-47330
Medium · 5.5
CWE-126 Jan 7, 2026
Buffer Over-read in Video
Transient DOS while parsing video packets received from the video firmware.
CVE-2025-47387
High · 7.8
CWE-822 Dec 18, 2025
Untrusted Pointer Dereference in Camera
Memory Corruption when processing IOCTLs for JPEG data without verification.
CVE-2025-47382
High · 7.8
CWE-863 Dec 18, 2025
Incorrect Authorization in Boot
Memory corruption while loading an invalid firmware in boot loader.
CVE-2025-47372
High · 8.4
CWE-787 Dec 18, 2025
Buffer Copy Without Checking Size of Input in Boot
Memory Corruption when a corrupted ELF image with an oversized file size is read into a buffer without authentication.
CVE-2025-47350
High · 7.8
CWE-787 Dec 18, 2025
Use After Free in DSP Service
Memory corruption while handling concurrent memory mapping and unmapping requests from a user-space application.
CVE-2025-47325
Medium · 5.5
CWE-822 Dec 18, 2025
Untrusted Pointer Dereference in TZ Firmware
Information disclosure while processing system calls with invalid parameters.
CVE-2025-47323
High · 7.8
CWE-190 Dec 18, 2025
Integer Overflow or Wraparound in Audio
Memory corruption while routing GPR packets between user and root when handling large data packet.
CVE-2025-47322
High · 7.8
CWE-416 Dec 18, 2025
Use After Free in Automotive Linux OS
Memory corruption while handling IOCTL calls to set mode.
CVE-2025-47321
High · 7.8
CWE-120 Dec 18, 2025
Buffer Copy Without Checking Size of Input in Core Services
Memory corruption while copying packets received from unix clients.
CVE-2025-47320
High · 7.8
CWE-787 Dec 18, 2025
Out-of-bounds Write in Audio
Memory corruption while processing MFC channel configuration during music playback.
CVE-2025-47319
Medium · 6.7
CWE-497 Dec 18, 2025
Exposure of Sensitive System Information to an Unauthorized Control Sphere in HLOS
Information disclosure while exposing internal TA-to-TA communication APIs to HLOS
CVE-2025-27063
High · 7.8
CWE-416 Dec 18, 2025
Use After Free in Video
Memory corruption during video playback when video session open fails with time out error.
CVE-2025-47370
Medium · 6.5
CWE-617 Nov 4, 2025
Reachable Assertion in BT Controller
Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan.
CVE-2025-47368
High · 7.8
CWE-126 Nov 4, 2025
Buffer Over-read in DSP Service
Memory corruption when dereferencing an invalid userspace address in a user buffer during MCDM IOCTL processing.
CVE-2025-47367
High · 7.8
CWE-787 Nov 4, 2025
Out-of-bounds Write in WinBlast Driver
Memory corruption while accessing a buffer during IOCTL processing.
CVE-2025-47365
High · 7.8
CWE-190 Nov 4, 2025
Integer Overflow or Wraparound in Automotive Platform
Memory corruption while processing large input data from a remote source via a communication interface.
CVE-2025-47362
Medium · 6.1
CWE-126 Nov 4, 2025
Buffer Over-read in Automotive Software platform based on QNX
Information disclosure while processing message from client with invalid payload.
CVE-2025-47361
High · 7.8
CWE-129 Nov 4, 2025
Improper Validation of Array Index in Automotive Software platform based on QNX
Memory corruption when triggering a subsystem crash with an out-of-range identifier.
CVE-2025-47360
High · 7.8
CWE-121 Nov 4, 2025
Stack-based Buffer Overflow in Automotive Software platform based on QNX
Memory corruption while processing client message during device management.
CVE-2025-47357
High · 7.8
CWE-306 Nov 4, 2025
Missing Authentication for Critical Function in SMSS
Information Disclosure when a user-level driver performs QFPROM read or write operations on Fuse regions.
CVE-2025-47353
High · 7.8
CWE-749 Nov 4, 2025
Exposed Dangerous Method or Function in Automotive Software platform based on QNX
Memory corruption while processing request sent from GVM.
CVE-2025-47352
High · 7.8
CWE-129 Nov 4, 2025
Improper Validation of Array Index in Audio
Memory corruption while processing audio streaming operations.
CVE-2025-27074
High · 7.8
CWE-131 Nov 4, 2025
Incorrect Calculation of Buffer Size in SCE-Mink
Memory corruption while processing a GP command response.
CVE-2025-27070
High · 7.8
CWE-787 Nov 4, 2025
Out-of-bounds Write in Windows Compute
Memory corruption while performing encryption and decryption commands.