Qualcomm Snapdragon 685 4G Mobile Platform \(Sm6225 Ad\) vulnerabilities
56 vulnerabilities
Known vulnerabilities in Qualcomm Snapdragon 685 4G Mobile Platform \(Sm6225 Ad\), newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2025-21479qualcomm, inc. · snapdragon +74 moreIncorrect Authorization in GraphicsMemory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.KEVEPSS0.84%HighCVE-2025-21487qualcomm, inc. · snapdragon +225 moreBuffer Over-read in Data Network Stack & ConnectivityInformation disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.EPSS0.26%HighCVE-2025-21484qualcomm, inc. · snapdragon +173 moreBuffer Over-read in Data Network Stack & ConnectivityInformation disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet.EPSS0.26%HighCVE-2025-21429qualcomm, inc. · snapdragon +182 moreBuffer Over-read in WLAN HostMemory corruption occurs while connecting a STA to an AP and initiating an ADD TS request.EPSS0.26%HighCVE-2025-21480qualcomm, inc. · snapdragon +75 moreIncorrect Authorization in Graphics WindowsMemory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.KEVEPSS0.46%MediumCVE-2025-21464qualcomm, inc. · snapdragon +340 moreOut-of-bounds Read in CoreInformation disclosure while reading data from an image using specified offset and size parameters.EPSS0.09%HighCVE-2025-21430qualcomm, inc. · snapdragon +223 moreBuffer Over-read in WLAN HostTransient DOS while connecting STA to AP and initiating ADD TS request from AP to establish TSpec session.EPSS0.26%HighCVE-2025-21481qualcomm, inc. · snapdragon +249 moreBuffer Copy Without Checking Size of Input in HLOSMemory corruption while performing private key encryption in trusted application.EPSS0.07%CriticalCVE-2025-21483qualcomm, inc. · snapdragon +225 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in Data Network Stack & ConnectivityMemory corruption when the UE receives an RTP packet from the network, during the reassembly of NALUs.EPSS0.42%MediumCVE-2025-21465qualcomm, inc. · snapdragon +347 moreOut-of-bounds Read in CoreInformation disclosure while processing the hash segment in an MBN file.EPSS0.09%HighCVE-2025-21488qualcomm, inc. · snapdragon +106 moreBuffer Over-read in Data Network Stack & ConnectivityInformation disclosure while decoding this RTP packet headers received by UE from the network when the padding bit is set.EPSS0.27%HighCVE-2025-47348qualcomm, inc. · snapdragon +202 moreUse of Uninitialized Variable in HLOSMemory corruption while processing identity credential operations in the trusted application.EPSS0.08%MediumCVE-2025-47334qualcomm, inc. · snapdragon +144 moreBuffer Copy Without Checking Size of Input in Camera DriverMemory corruption while processing shared command buffer packet between camera userspace and kernel.EPSS0.08%HighCVE-2025-47323qualcomm, inc. · snapdragon +176 moreInteger Overflow or Wraparound in AudioMemory corruption while routing GPR packets between user and root when handling large data packet.EPSS0.09%HighCVE-2025-47320qualcomm, inc. · snapdragon +212 moreOut-of-bounds Write in AudioMemory corruption while processing MFC channel configuration during music playback.EPSS0.08%MediumCVE-2025-47333qualcomm, inc. · snapdragon +237 moreUse After Free in HLOSMemory corruption while handling buffer mapping operations in the cryptographic driver.EPSS0.08%MediumCVE-2025-47344qualcomm, inc. · snapdragon +82 moreTime-of-check Time-of-use (TOCTOU) Race Condition in Camera DriverMemory corruption while handling sensor utility operations.EPSS0.06%MediumCVE-2025-47331qualcomm, inc. · snapdragon +297 moreBuffer Over-read in VideoInformation disclosure while processing a firmware event.EPSS0.08%HighCVE-2025-47321qualcomm, inc. · snapdragon +115 moreBuffer Copy Without Checking Size of Input in Core ServicesMemory corruption while copying packets received from unix clients.EPSS0.08%MediumCVE-2025-47369qualcomm, inc. · snapdragon +173 moreInformation Exposure in Computer VisionInformation disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID.EPSS0.08%