Qualcomm Sa9000P vulnerabilities, page 3
412 vulnerabilities
Known vulnerabilities in Qualcomm Sa9000P, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2025-21437qualcomm, inc. · snapdragon +31 moreUse After Free in Automotive Linux OSMemory corruption while processing memory map or unmap IOCTL operations simultaneously.EPSS0.11%MediumCVE-2025-21465qualcomm, inc. · snapdragon +347 moreOut-of-bounds Read in CoreInformation disclosure while processing the hash segment in an MBN file.EPSS0.09%HighCVE-2025-21458qualcomm, inc. · snapdragon +24 moreUse After Free in NPUMemory corruption when IOCTL interface is called to map and unmap buffers simultaneously.EPSS0.09%HighCVE-2025-21422qualcomm, inc. · snapdragon +215 moreCryptographic Issues in AutomotiveCryptographic issue while processing crypto API calls, missing checks may lead to corrupted key usage or IV reuses.EPSS0.10%HighCVE-2025-21453qualcomm, inc. · snapdragon +259 moreUse After Free in GPS HLOS DriverMemory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential failures occur.EPSS0.11%HighCVE-2025-21463qualcomm, inc. · snapdragon +210 moreBuffer Over-read in WLAN Host CommunicationTransient DOS while processing the EHT operation IE in the received beacon frame.EPSS0.23%MediumCVE-2025-59609qualcomm, inc. · snapdragon +186 moreBuffer Over-read in WLAN Host CommunicationInformation Disclosure when processing advertisement frames with malformed MBSSID elements of insufficient length.EPSS0.09%HighCVE-2025-59600qualcomm, inc. · snapdragon +162 moreBuffer Over-read in GraphicsMemory Corruption when adding user-supplied data without checking available buffer space.EPSS0.08%HighCVE-2025-59604qualcomm, inc. · snapdragon +258 moreNULL Pointer Dereference in SPS ApplicationsMemory Corruption when running a memory copy operation due to invalid writes caused by a null pointer.EPSS0.07%MediumCVE-2025-59610qualcomm, inc. · snapdragon +229 moreTime-of-check Time-of-use (TOCTOU) Race Condition in Camera DriverMemory Corruption when processing IOCTL requests with mismatched API versions due to concurrent modification of user-space buffer.EPSS0.06%HighCVE-2025-59606qualcomm, inc. · snapdragon +141 moreNULL Pointer Dereference in HLOSMemory Corruption when writing to invalid memory locations occurs due to heap memory exhaustion during secure data initialization.EPSS0.07%HighCVE-2025-59605qualcomm, inc. · snapdragon +134 moreOut-of-bounds Write in HLOSMemory Corruption when processing device identifier strings that exceed the expected maximum length.EPSS0.07%HighCVE-2025-47376qualcomm, inc. · snapdragon +165 moreUse After Free in Automotive AudioMemory Corruption when concurrent access to shared buffer occurs during IOCTL calls.EPSS0.07%MediumCVE-2025-47362qualcomm, inc. · snapdragon +38 moreBuffer Over-read in Automotive Software platform based on QNXInformation disclosure while processing message from client with invalid payload.EPSS0.08%HighCVE-2025-47318qualcomm, inc. · snapdragon +202 moreBuffer Over-read in BT ControllerTransient DOS while parsing the EPTM test control message to get the test pattern.EPSS0.21%HighCVE-2025-47348qualcomm, inc. · snapdragon +202 moreUse of Uninitialized Variable in HLOSMemory corruption while processing identity credential operations in the trusted application.EPSS0.08%HighCVE-2025-47379qualcomm, inc. · snapdragon +173 moreUse After Free in Automotive AudioMemory Corruption when concurrent access to shared buffer occurs due to improper synchronization between assignment and deallocation of buffer resources.EPSS0.07%HighCVE-2025-47360qualcomm, inc. · snapdragon +35 moreStack-based Buffer Overflow in Automotive Software platform based on QNXMemory corruption while processing client message during device management.EPSS0.09%HighCVE-2025-47339qualcomm, inc. · snapdragon +185 moreUse After Free in HLOSMemory corruption while deinitializing a HDCP session.EPSS0.08%MediumCVE-2025-47334qualcomm, inc. · snapdragon +144 moreBuffer Copy Without Checking Size of Input in Camera DriverMemory corruption while processing shared command buffer packet between camera userspace and kernel.EPSS0.08%