Qualcomm Sm7325p Firmware vulnerabilities

CVE-2025-47376 High · 7.8 CWE-416 Mar 2, 2026

Use After Free in Automotive Audio

Memory Corruption when concurrent access to shared buffer occurs during IOCTL calls.

CVE-2025-47375 High · 7.8 CWE-416 Mar 2, 2026

Use After Free in Automotive Audio

Memory corruption while handling different IOCTL calls from the user-space simultaneously.

CVE-2025-47369 Medium · 5.5 CWE-200 Jan 7, 2026

Information Exposure in Computer Vision

Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID.

CVE-2025-47348 High · 7.8 CWE-457 Jan 7, 2026

Use of Uninitialized Variable in HLOS

Memory corruption while processing identity credential operations in the trusted application.

CVE-2025-47334 Medium · 6.7 CWE-120 Jan 7, 2026

Buffer Copy Without Checking Size of Input in Camera Driver

Memory corruption while processing shared command buffer packet between camera userspace and kernel.

CVE-2025-47333 Medium · 6.6 CWE-416 Jan 7, 2026

Use After Free in HLOS

Memory corruption while handling buffer mapping operations in the cryptographic driver.

CVE-2025-47331 Medium · 6.1 CWE-126 Jan 7, 2026

Buffer Over-read in Video

Information disclosure while processing a firmware event.

CVE-2025-47330 Medium · 5.5 CWE-126 Jan 7, 2026

Buffer Over-read in Video

Transient DOS while parsing video packets received from the video firmware.

CVE-2025-47323 High · 7.8 CWE-190 Dec 18, 2025

Integer Overflow or Wraparound in Audio

Memory corruption while routing GPR packets between user and root when handling large data packet.

CVE-2025-47320 High · 7.8 CWE-787 Dec 18, 2025

Out-of-bounds Write in Audio

Memory corruption while processing MFC channel configuration during music playback.

CVE-2025-27063 High · 7.8 CWE-416 Dec 18, 2025

Use After Free in Video

Memory corruption during video playback when video session open fails with time out error.

CVE-2025-47370 Medium · 6.5 CWE-617 Nov 4, 2025

Reachable Assertion in BT Controller

Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan.

CVE-2025-27054 High · 7.8 CWE-787 Oct 9, 2025

Out-of-bounds Write in Display

Memory corruption while processing a malformed license file during reboot.

CVE-2025-27053 High · 7.8 CWE-131 Oct 9, 2025

Incorrect Calculation of Buffer Size in HLOS

Memory corruption during PlayReady APP usecase while processing TA commands.

CVE-2025-21479 High · 8.6 KEV High · 56 Public exploit CWE-863 Jun 3, 2025

Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability

Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.

CVE-2025-21480 High · 8.6 KEV High · 47 CWE-863 Jun 3, 2025

Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability

Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.

CVE-2023-33106 High · 7.8 KEV High · 49 CWE-119 Dec 5, 2023

Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability

Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.

CVE-2023-33107 High · 7.8 KEV High · 55 Public exploit CWE-190 Dec 5, 2023

Qualcomm Multiple Chipsets Integer Overflow Vulnerability

Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.

CVE-2023-33063 High · 7.8 KEV High · 49 CWE-416 Dec 5, 2023

Qualcomm Multiple Chipsets Use-After-Free Vulnerability

Memory corruption in DSP Services during a remote call from HLOS to DSP.

CVE-2022-22071 High · 7.8 KEV High · 46 CWE-416 Jun 14, 2022

Qualcomm Multiple Chipsets Use-After-Free Vulnerability

Possible use after free when process shell memory is freed using IOCTL munmap call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music