Qualcomm Sm8650Q vulnerabilities, page 2
126 vulnerabilities
Known vulnerabilities in Qualcomm Sm8650Q, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2025-21463qualcomm, inc. · snapdragon +210 moreBuffer Over-read in WLAN Host CommunicationTransient DOS while processing the EHT operation IE in the received beacon frame.EPSS0.23%HighCVE-2025-21488qualcomm, inc. · snapdragon +106 moreBuffer Over-read in Data Network Stack & ConnectivityInformation disclosure while decoding this RTP packet headers received by UE from the network when the padding bit is set.EPSS0.27%MediumCVE-2025-59609qualcomm, inc. · snapdragon +186 moreBuffer Over-read in WLAN Host CommunicationInformation Disclosure when processing advertisement frames with malformed MBSSID elements of insufficient length.EPSS0.09%HighCVE-2025-59600qualcomm, inc. · snapdragon +162 moreBuffer Over-read in GraphicsMemory Corruption when adding user-supplied data without checking available buffer space.EPSS0.08%HighCVE-2025-59604qualcomm, inc. · snapdragon +258 moreNULL Pointer Dereference in SPS ApplicationsMemory Corruption when running a memory copy operation due to invalid writes caused by a null pointer.EPSS0.07%MediumCVE-2025-59610qualcomm, inc. · snapdragon +229 moreTime-of-check Time-of-use (TOCTOU) Race Condition in Camera DriverMemory Corruption when processing IOCTL requests with mismatched API versions due to concurrent modification of user-space buffer.EPSS0.06%HighCVE-2025-47376qualcomm, inc. · snapdragon +165 moreUse After Free in Automotive AudioMemory Corruption when concurrent access to shared buffer occurs during IOCTL calls.EPSS0.07%HighCVE-2025-47348qualcomm, inc. · snapdragon +202 moreUse of Uninitialized Variable in HLOSMemory corruption while processing identity credential operations in the trusted application.EPSS0.08%HighCVE-2025-47379qualcomm, inc. · snapdragon +173 moreUse After Free in Automotive AudioMemory Corruption when concurrent access to shared buffer occurs due to improper synchronization between assignment and deallocation of buffer resources.EPSS0.07%HighCVE-2025-47339qualcomm, inc. · snapdragon +185 moreUse After Free in HLOSMemory corruption while deinitializing a HDCP session.EPSS0.08%MediumCVE-2025-47334qualcomm, inc. · snapdragon +144 moreBuffer Copy Without Checking Size of Input in Camera DriverMemory corruption while processing shared command buffer packet between camera userspace and kernel.EPSS0.08%HighCVE-2025-47375qualcomm, inc. · snapdragon +164 moreUse After Free in Automotive AudioMemory corruption while handling different IOCTL calls from the user-space simultaneously.EPSS0.07%MediumCVE-2025-47335qualcomm, inc. · snapdragon +45 moreBuffer Copy Without Checking Size of Input in Camera DriverMemory corruption while parsing clock configuration data for a specific hardware type.EPSS0.08%HighCVE-2025-47391qualcomm, inc. · snapdragon +99 moreStack-based Buffer Overflow in Camera DriverMemory corruption while processing a frame request from user.EPSS0.10%HighCVE-2025-47377qualcomm, inc. · snapdragon +120 moreUse After Free in Automotive AudioMemory Corruption when accessing a buffer after it has been freed while processing IOCTL calls.EPSS0.07%HighCVE-2025-47392qualcomm, inc. · snapdragon +148 moreInteger Overflow or Wraparound in GPSMemory corruption when decoding corrupted satellite data files with invalid signature offsets.EPSS0.17%HighCVE-2025-47401qualcomm, inc. · snapdragon +241 moreBuffer Over-read in WLAN HALTransient DOS when processing target power rate tables during channel configuration.EPSS0.22%HighCVE-2025-47323qualcomm, inc. · snapdragon +176 moreInteger Overflow or Wraparound in AudioMemory corruption while routing GPR packets between user and root when handling large data packet.EPSS0.09%HighCVE-2025-47345qualcomm, inc. · snapdragon +105 moreReusing a Nonce, Key Pair in Encryption in Automotive PlatformCryptographic issue may occur while encrypting license data.EPSS0.08%HighCVE-2025-47320qualcomm, inc. · snapdragon +212 moreOut-of-bounds Write in AudioMemory corruption while processing MFC channel configuration during music playback.EPSS0.08%