Qualcomm Snapdragon 6 Gen 3 Mobile Platform vulnerabilities
42 vulnerabilities
Known vulnerabilities in Qualcomm Snapdragon 6 Gen 3 Mobile Platform, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-59600qualcomm, inc.snapdragon+162
EPSS score0.08%
Memory Corruption when adding user-supplied data without checking available buffer space.CVE-2025-59604qualcomm, inc.snapdragon+258EPSS score0.07%
Memory Corruption when running a memory copy operation due to invalid writes caused by a null pointer.CVE-2025-59610qualcomm, inc.snapdragon+229EPSS score0.06%
Memory Corruption when processing IOCTL requests with mismatched API versions due to concurrent modification of user-space buffer.CVE-2025-59606qualcomm, inc.snapdragon+141EPSS score0.07%
Memory Corruption when writing to invalid memory locations occurs due to heap memory exhaustion during secure data initialization.CVE-2025-59605qualcomm, inc.snapdragon+134EPSS score0.07%
Memory Corruption when processing device identifier strings that exceed the expected maximum length.CVE-2025-47385qualcomm, inc.snapdragon+93EPSS score0.07%
Memory Corruption when accessing trusted execution environment without proper privilege check.CVE-2025-47391qualcomm, inc.snapdragon+99EPSS score0.10%
Memory corruption while processing a frame request from user.CVE-2025-47392qualcomm, inc.snapdragon+148EPSS score0.17%
Memory corruption when decoding corrupted satellite data files with invalid signature offsets.CVE-2025-47389qualcomm, inc.snapdragon+176EPSS score0.10%
Memory corruption when buffer copy operation fails due to integer overflow during attestation report generation.CVE-2025-47373qualcomm, inc.snapdragon+184EPSS score0.07%
Memory Corruption when accessing buffers with invalid length during TA invocation.CVE-2025-47383qualcomm, inc.snapdragon+200EPSS score0.14%
Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE.CVE-2025-47371qualcomm, inc.snapdragon+122EPSS score0.10%
Transient DOS when an LTE RLC packet with invalid TB is received by UE.CVE-2026-21381qualcomm, inc.snapdragon+102EPSS score0.15%
Transient DOS when receiving a service data frame with excessive length during device matching over a neighborhood awareness network protocol connection.CVE-2026-21370qualcomm, inc.snapdragon+90EPSS score0.08%
Memory Corruption when validating input batch size and buffer plane count exceeds maximum allowed values.CVE-2026-21384qualcomm, inc.snapdragon+79EPSS score0.08%
Memory Corruption when updating prepared commands with invalid port indices based on user space input exceeds supported read client limits.CVE-2026-21368qualcomm, inc.snapdragon+90EPSS score0.08%
Memory Corruption when parsing jpeg commands due to unaccounted extra writes to the buffer during validation checks.CVE-2026-21367qualcomm, inc.snapdragon+149EPSS score0.20%
Transient DOS when processing nonstandard FILS Discovery Frames with out-of-range action sizes during initial scans.CVE-2026-21385qualcomm, inc.snapdragon+230KEVEPSS score1.29%
Memory corruption while using alignments for memory allocation.CVE-2026-25275qualcomm, inc.snapdragon+369EPSS score0.19%
Transient DOS when processing authentication frames with invalid FILS information element header lengths.CVE-2026-25270qualcomm, inc.snapdragon+197EPSS score0.07%
Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver.