Qualcomm Snapdragon Auto 5g Modem-rf Gen 2 Firmware vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Qualcomm Snapdragon Auto 5g Modem-rf Gen 2 Firmware: 49 record(s), with affected versions and fixes.cpe:2.3:o:qualcomm:snapdragon_auto_5g_modem-rf_gen_2_firmware
CVE-2025-47376
High · 7.8
CWE-416 Mar 2, 2026
Use After Free in Automotive Audio
Memory Corruption when concurrent access to shared buffer occurs during IOCTL calls.
CVE-2025-47375
High · 7.8
CWE-416 Mar 2, 2026
Use After Free in Automotive Audio
Memory corruption while handling different IOCTL calls from the user-space simultaneously.
CVE-2025-47373
High · 7.8
CWE-787 Mar 2, 2026
Out-of-bounds Write in Automotive
Memory Corruption when accessing buffers with invalid length during TA invocation.
CVE-2025-47371
Medium · 6.5
CWE-617 Mar 2, 2026
Reachable Assertion in Modem
Transient DOS when an LTE RLC packet with invalid TB is received by UE.
CVE-2025-47402
Medium · 6.5
CWE-125 Feb 2, 2026
Buffer Over-read in WLAN Firmware
Transient DOS when processing a received frame with an excessively large authentication information element.
CVE-2025-47366
High · 7.8
CWE-749 Feb 2, 2026
Exposed Dangerous Method or Function in HLOS
Cryptographic issue when a Trusted Zone with outdated code is triggered by a HLOS providing incorrect input.
CVE-2025-47348
High · 7.8
CWE-457 Jan 7, 2026
Use of Uninitialized Variable in HLOS
Memory corruption while processing identity credential operations in the trusted application.
CVE-2025-47346
High · 7.8
CWE-787 Jan 7, 2026
Out-of-bounds Write in HLOS
Memory corruption while processing a secure logging command in the trusted application.
CVE-2025-47345
High · 8.4
CWE-323 Jan 7, 2026
Reusing a Nonce, Key Pair in Encryption in Automotive Platform
Cryptographic issue may occur while encrypting license data.
CVE-2025-47339
High · 7.8
CWE-416 Jan 7, 2026
Use After Free in HLOS
Memory corruption while deinitializing a HDCP session.
CVE-2025-47333
Medium · 6.6
CWE-416 Jan 7, 2026
Use After Free in HLOS
Memory corruption while handling buffer mapping operations in the cryptographic driver.
CVE-2025-47331
Medium · 6.1
CWE-126 Jan 7, 2026
Buffer Over-read in Video
Information disclosure while processing a firmware event.
CVE-2025-47330
Medium · 5.5
CWE-126 Jan 7, 2026
Buffer Over-read in Video
Transient DOS while parsing video packets received from the video firmware.
CVE-2025-47323
High · 7.8
CWE-190 Dec 18, 2025
Integer Overflow or Wraparound in Audio
Memory corruption while routing GPR packets between user and root when handling large data packet.
CVE-2025-47322
High · 7.8
CWE-416 Dec 18, 2025
Use After Free in Automotive Linux OS
Memory corruption while handling IOCTL calls to set mode.
CVE-2025-47320
High · 7.8
CWE-787 Dec 18, 2025
Out-of-bounds Write in Audio
Memory corruption while processing MFC channel configuration during music playback.
CVE-2025-47319
Medium · 6.7
CWE-497 Dec 18, 2025
Exposure of Sensitive System Information to an Unauthorized Control Sphere in HLOS
Information disclosure while exposing internal TA-to-TA communication APIs to HLOS
CVE-2025-47370
Medium · 6.5
CWE-617 Nov 4, 2025
Reachable Assertion in BT Controller
Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan.
CVE-2025-27070
High · 7.8
CWE-787 Nov 4, 2025
Out-of-bounds Write in Windows Compute
Memory corruption while performing encryption and decryption commands.
CVE-2025-27064
Medium · 6.1
CWE-126 Nov 4, 2025
Buffer Over-read in Core Services
Information disclosure while registering commands from clients with diag through diagHal.
CVE-2025-27054
High · 7.8
CWE-787 Oct 9, 2025
Out-of-bounds Write in Display
Memory corruption while processing a malformed license file during reboot.
CVE-2025-27053
High · 7.8
CWE-131 Oct 9, 2025
Incorrect Calculation of Buffer Size in HLOS
Memory corruption during PlayReady APP usecase while processing TA commands.
CVE-2025-27041
Medium · 5.5
CWE-126 Oct 9, 2025
Buffer Over-read in Video
Transient DOS while processing video packets received from video firmware.
CVE-2024-43047
High · 7.8
KEV High · 49 CWE-416 Oct 7, 2024
Qualcomm Multiple Chipsets Use-After-Free Vulnerability
Memory corruption while maintaining memory maps of HLOS memory.