Vulnerabilidades do Qualcomm Snapdragon

CVE-2025-47331 Média · 6.1 CWE-126 07/01/2026

Buffer Over-read in Video

Information disclosure while processing a firmware event.

CVE-2025-47330 Média · 5.5 CWE-126 07/01/2026

Buffer Over-read in Video

Transient DOS while parsing video packets received from the video firmware.

CVE-2025-47387 Alta · 7.8 CWE-822 18/12/2025

Untrusted Pointer Dereference in Camera

Memory Corruption when processing IOCTLs for JPEG data without verification.

CVE-2025-47382 Alta · 7.8 CWE-863 18/12/2025

Incorrect Authorization in Boot

Memory corruption while loading an invalid firmware in boot loader.

CVE-2025-47372 Alta · 8.4 CWE-787 18/12/2025

Buffer Copy Without Checking Size of Input in Boot

Memory Corruption when a corrupted ELF image with an oversized file size is read into a buffer without authentication.

CVE-2025-47350 Alta · 7.8 CWE-787 18/12/2025

Use After Free in DSP Service

Memory corruption while handling concurrent memory mapping and unmapping requests from a user-space application.

CVE-2025-47325 Média · 5.5 CWE-822 18/12/2025

Untrusted Pointer Dereference in TZ Firmware

Information disclosure while processing system calls with invalid parameters.

CVE-2025-47323 Alta · 7.8 CWE-190 18/12/2025

Integer Overflow or Wraparound in Audio

Memory corruption while routing GPR packets between user and root when handling large data packet.

CVE-2025-47322 Alta · 7.8 CWE-416 18/12/2025

Use After Free in Automotive Linux OS

Memory corruption while handling IOCTL calls to set mode.

CVE-2025-47321 Alta · 7.8 CWE-120 18/12/2025

Buffer Copy Without Checking Size of Input in Core Services

Memory corruption while copying packets received from unix clients.

CVE-2025-47320 Alta · 7.8 CWE-787 18/12/2025

Out-of-bounds Write in Audio

Memory corruption while processing MFC channel configuration during music playback.

CVE-2025-47319 Média · 6.7 CWE-497 18/12/2025

Exposure of Sensitive System Information to an Unauthorized Control Sphere in HLOS

Information disclosure while exposing internal TA-to-TA communication APIs to HLOS

CVE-2025-27063 Alta · 7.8 CWE-416 18/12/2025

Use After Free in Video

Memory corruption during video playback when video session open fails with time out error.

CVE-2025-47370 Média · 6.5 CWE-617 04/11/2025

Reachable Assertion in BT Controller

Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan.

CVE-2025-47368 Alta · 7.8 CWE-126 04/11/2025

Buffer Over-read in DSP Service

Memory corruption when dereferencing an invalid userspace address in a user buffer during MCDM IOCTL processing.

CVE-2025-47367 Alta · 7.8 CWE-787 04/11/2025

Out-of-bounds Write in WinBlast Driver

Memory corruption while accessing a buffer during IOCTL processing.

CVE-2025-47365 Alta · 7.8 CWE-190 04/11/2025

Integer Overflow or Wraparound in Automotive Platform

Memory corruption while processing large input data from a remote source via a communication interface.

CVE-2025-47362 Média · 6.1 CWE-126 04/11/2025

Buffer Over-read in Automotive Software platform based on QNX

Information disclosure while processing message from client with invalid payload.

CVE-2025-47361 Alta · 7.8 CWE-129 04/11/2025

Improper Validation of Array Index in Automotive Software platform based on QNX

Memory corruption when triggering a subsystem crash with an out-of-range identifier.

CVE-2025-47360 Alta · 7.8 CWE-121 04/11/2025

Stack-based Buffer Overflow in Automotive Software platform based on QNX

Memory corruption while processing client message during device management.

CVE-2025-47357 Alta · 7.8 CWE-306 04/11/2025

Missing Authentication for Critical Function in SMSS

Information Disclosure when a user-level driver performs QFPROM read or write operations on Fuse regions.

CVE-2025-47353 Alta · 7.8 CWE-749 04/11/2025

Exposed Dangerous Method or Function in Automotive Software platform based on QNX

Memory corruption while processing request sent from GVM.

CVE-2025-47352 Alta · 7.8 CWE-129 04/11/2025

Improper Validation of Array Index in Audio

Memory corruption while processing audio streaming operations.

CVE-2025-27074 Alta · 7.8 CWE-131 04/11/2025

Incorrect Calculation of Buffer Size in SCE-Mink

Memory corruption while processing a GP command response.

CVE-2025-27070 Alta · 7.8 CWE-787 04/11/2025

Out-of-bounds Write in Windows Compute

Memory corruption while performing encryption and decryption commands.