Qualcomm Snapdragon 460 Mobile Platform Firmware vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Qualcomm Snapdragon 460 Mobile Platform Firmware: 75 record(s), with affected versions and fixes.cpe:2.3:o:qualcomm:snapdragon_460_mobile_platform_firmware
CVE-2025-47386
High · 7.8
CWE-416 Mar 2, 2026
Use After Free in Automotive Audio
Memory Corruption while invoking IOCTL calls when concurrent access to shared buffer occurs.
CVE-2025-47383
High · 7.2
CWE-325 Mar 2, 2026
Missing Cryptographic Step in Data Modem
Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE.
CVE-2025-47379
High · 7.8
CWE-416 Mar 2, 2026
Use After Free in Automotive Audio
Memory Corruption when concurrent access to shared buffer occurs due to improper synchronization between assignment and deallocation of buffer resources.
CVE-2025-47377
High · 7.8
CWE-416 Mar 2, 2026
Use After Free in Automotive Audio
Memory Corruption when accessing a buffer after it has been freed while processing IOCTL calls.
CVE-2025-47376
High · 7.8
CWE-416 Mar 2, 2026
Use After Free in Automotive Audio
Memory Corruption when concurrent access to shared buffer occurs during IOCTL calls.
CVE-2025-47375
High · 7.8
CWE-416 Mar 2, 2026
Use After Free in Automotive Audio
Memory corruption while handling different IOCTL calls from the user-space simultaneously.
CVE-2025-47373
High · 7.8
CWE-787 Mar 2, 2026
Out-of-bounds Write in Automotive
Memory Corruption when accessing buffers with invalid length during TA invocation.
CVE-2025-47371
Medium · 6.5
CWE-617 Mar 2, 2026
Reachable Assertion in Modem
Transient DOS when an LTE RLC packet with invalid TB is received by UE.
CVE-2025-47369
Medium · 5.5
CWE-200 Jan 7, 2026
Information Exposure in Computer Vision
Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID.
CVE-2025-47348
High · 7.8
CWE-457 Jan 7, 2026
Use of Uninitialized Variable in HLOS
Memory corruption while processing identity credential operations in the trusted application.
CVE-2025-47334
Medium · 6.7
CWE-120 Jan 7, 2026
Buffer Copy Without Checking Size of Input in Camera Driver
Memory corruption while processing shared command buffer packet between camera userspace and kernel.
CVE-2025-47333
Medium · 6.6
CWE-416 Jan 7, 2026
Use After Free in HLOS
Memory corruption while handling buffer mapping operations in the cryptographic driver.
CVE-2025-47331
Medium · 6.1
CWE-126 Jan 7, 2026
Buffer Over-read in Video
Information disclosure while processing a firmware event.
CVE-2025-47330
Medium · 5.5
CWE-126 Jan 7, 2026
Buffer Over-read in Video
Transient DOS while parsing video packets received from the video firmware.
CVE-2025-47323
High · 7.8
CWE-190 Dec 18, 2025
Integer Overflow or Wraparound in Audio
Memory corruption while routing GPR packets between user and root when handling large data packet.
CVE-2025-47322
High · 7.8
CWE-416 Dec 18, 2025
Use After Free in Automotive Linux OS
Memory corruption while handling IOCTL calls to set mode.
CVE-2025-47320
High · 7.8
CWE-787 Dec 18, 2025
Out-of-bounds Write in Audio
Memory corruption while processing MFC channel configuration during music playback.
CVE-2025-27063
High · 7.8
CWE-416 Dec 18, 2025
Use After Free in Video
Memory corruption during video playback when video session open fails with time out error.
CVE-2025-27070
High · 7.8
CWE-787 Nov 4, 2025
Out-of-bounds Write in Windows Compute
Memory corruption while performing encryption and decryption commands.
CVE-2025-27054
High · 7.8
CWE-787 Oct 9, 2025
Out-of-bounds Write in Display
Memory corruption while processing a malformed license file during reboot.
CVE-2025-27053
High · 7.8
CWE-131 Oct 9, 2025
Incorrect Calculation of Buffer Size in HLOS
Memory corruption during PlayReady APP usecase while processing TA commands.
CVE-2025-21479
High · 8.6
KEV High · 56 Public exploit CWE-863 Jun 3, 2025
Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability
Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.
CVE-2025-21480
High · 8.6
KEV High · 47 CWE-863 Jun 3, 2025
Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability
Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.
CVE-2023-33106
High · 7.8
KEV High · 49 CWE-119 Dec 5, 2023
Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability
Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.
CVE-2023-33107
High · 7.8
KEV High · 55 Public exploit CWE-190 Dec 5, 2023
Qualcomm Multiple Chipsets Integer Overflow Vulnerability
Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.