Qualcomm Snapdragon 4 Gen 2 Mobile Platform Firmware vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Qualcomm Snapdragon 4 Gen 2 Mobile Platform Firmware: 61 record(s), with affected versions and fixes.cpe:2.3:o:qualcomm:snapdragon_4_gen_2_mobile_platform_firmware
CVE-2025-59606
High · 7.8
CWE-476 Jun 1, 2026
NULL Pointer Dereference in HLOS
Memory Corruption when writing to invalid memory locations occurs due to heap memory exhaustion during secure data initialization.
CVE-2025-59605
High · 7.8
CWE-787 Jun 1, 2026
Out-of-bounds Write in HLOS
Memory Corruption when processing device identifier strings that exceed the expected maximum length.
CVE-2025-59604
High · 7.8
CWE-476 Jun 1, 2026
NULL Pointer Dereference in SPS Applications
Memory Corruption when running a memory copy operation due to invalid writes caused by a null pointer.
CVE-2025-47392
High · 8.8
CWE-190 Apr 6, 2026
Integer Overflow or Wraparound in GPS
Memory corruption when decoding corrupted satellite data files with invalid signature offsets.
CVE-2025-47391
High · 7.8
CWE-121 Apr 6, 2026
Stack-based Buffer Overflow in Camera Driver
Memory corruption while processing a frame request from user.
CVE-2025-47389
High · 7.8
CWE-120 Apr 6, 2026
Buffer Copy Without Checking Size of Input in Automotive Platform
Memory corruption when buffer copy operation fails due to integer overflow during attestation report generation.
CVE-2026-21385
High · 7.8
KEV High · 58 Public exploit CWE-190 Mar 2, 2026
Qualcomm Multiple Chipsets Memory Corruption Vulnerability
Memory corruption while using alignments for memory allocation.
CVE-2025-59600
High · 7.8
CWE-126 Mar 2, 2026
Buffer Over-read in Graphics
Memory Corruption when adding user-supplied data without checking available buffer space.
CVE-2025-47385
High · 7.8
CWE-1262 Mar 2, 2026
Improper Access Control for Register Interface in SCE-Mink
Memory Corruption when accessing trusted execution environment without proper privilege check.
CVE-2025-47383
High · 7.2
CWE-325 Mar 2, 2026
Missing Cryptographic Step in Data Modem
Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE.
CVE-2025-47373
High · 7.8
CWE-787 Mar 2, 2026
Out-of-bounds Write in Automotive
Memory Corruption when accessing buffers with invalid length during TA invocation.
CVE-2025-47371
Medium · 6.5
CWE-617 Mar 2, 2026
Reachable Assertion in Modem
Transient DOS when an LTE RLC packet with invalid TB is received by UE.
CVE-2025-47396
High · 7.8
CWE-415 Jan 7, 2026
Double Free in Graphics
Memory corruption occurs when a secure application is launched on a device with insufficient memory.
CVE-2025-47394
High · 7.8
CWE-120 Jan 7, 2026
Buffer Copy Without Checking Size of Input in DSP Service
Memory corruption when copying overlapping buffers during memory operations due to incorrect offset calculations.
CVE-2025-47388
High · 7.8
CWE-120 Jan 7, 2026
Buffer Copy without Checking Size of Input in DSP Service
Memory corruption while passing pages to DSP with an unaligned starting address.
CVE-2025-47369
Medium · 5.5
CWE-200 Jan 7, 2026
Information Exposure in Computer Vision
Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID.
CVE-2025-47348
High · 7.8
CWE-457 Jan 7, 2026
Use of Uninitialized Variable in HLOS
Memory corruption while processing identity credential operations in the trusted application.
CVE-2025-47346
High · 7.8
CWE-787 Jan 7, 2026
Out-of-bounds Write in HLOS
Memory corruption while processing a secure logging command in the trusted application.
CVE-2025-47344
Medium · 6.4
CWE-367 Jan 7, 2026
Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver
Memory corruption while handling sensor utility operations.
CVE-2025-47339
High · 7.8
CWE-416 Jan 7, 2026
Use After Free in HLOS
Memory corruption while deinitializing a HDCP session.
CVE-2025-47334
Medium · 6.7
CWE-120 Jan 7, 2026
Buffer Copy Without Checking Size of Input in Camera Driver
Memory corruption while processing shared command buffer packet between camera userspace and kernel.
CVE-2025-47333
Medium · 6.6
CWE-416 Jan 7, 2026
Use After Free in HLOS
Memory corruption while handling buffer mapping operations in the cryptographic driver.
CVE-2025-47332
Medium · 6.4
CWE-367 Jan 7, 2026
Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver
Memory corruption while processing a config call from userspace.
CVE-2025-47331
Medium · 6.1
CWE-126 Jan 7, 2026
Buffer Over-read in Video
Information disclosure while processing a firmware event.
CVE-2025-47330
Medium · 5.5
CWE-126 Jan 7, 2026
Buffer Over-read in Video
Transient DOS while parsing video packets received from the video firmware.