Qualcomm Snapdragon 765 5G Mobile Platform \(Sm7250 Aa\) vulnerabilities

40 vulnerabilities

Known vulnerabilities in Qualcomm Snapdragon 765 5G Mobile Platform \(Sm7250 Aa\), newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.2HighCVE-2025-21487qualcomm, inc. · snapdragon +225 moreBuffer Over-read in Data Network Stack & ConnectivityInformation disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.EPSS0.26%8.2HighCVE-2025-21484qualcomm, inc. · snapdragon +173 moreBuffer Over-read in Data Network Stack & ConnectivityInformation disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet.EPSS0.26%6.5MediumCVE-2025-21464qualcomm, inc. · snapdragon +340 moreOut-of-bounds Read in CoreInformation disclosure while reading data from an image using specified offset and size parameters.EPSS0.09%7.5HighCVE-2025-21452qualcomm, inc. · snapdragon +80 moreReachable Assertion in ModemTransient DOS while processing a random-access response (RAR) with an invalid PDU length on LTE network.EPSS0.21%7.5HighCVE-2025-21430qualcomm, inc. · snapdragon +223 moreBuffer Over-read in WLAN HostTransient DOS while connecting STA to AP and initiating ADD TS request from AP to establish TSpec session.EPSS0.26%7.5HighCVE-2025-21477qualcomm, inc. · snapdragon +87 moreImproper Input Validation in ModemTransient DOS while processing CCCH data when NW sends data with invalid length.EPSS0.22%7.8HighCVE-2025-21481qualcomm, inc. · snapdragon +249 moreBuffer Copy Without Checking Size of Input in HLOSMemory corruption while performing private key encryption in trusted application.EPSS0.07%9.8CriticalCVE-2025-21483qualcomm, inc. · snapdragon +225 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in Data Network Stack & ConnectivityMemory corruption when the UE receives an RTP packet from the network, during the reassembly of NALUs.EPSS0.42%6.5MediumCVE-2025-21465qualcomm, inc. · snapdragon +347 moreOut-of-bounds Read in CoreInformation disclosure while processing the hash segment in an MBN file.EPSS0.09%7.8HighCVE-2025-47348qualcomm, inc. · snapdragon +202 moreUse of Uninitialized Variable in HLOSMemory corruption while processing identity credential operations in the trusted application.EPSS0.08%7.8HighCVE-2025-47320qualcomm, inc. · snapdragon +212 moreOut-of-bounds Write in AudioMemory corruption while processing MFC channel configuration during music playback.EPSS0.08%6.6MediumCVE-2025-47333qualcomm, inc. · snapdragon +237 moreUse After Free in HLOSMemory corruption while handling buffer mapping operations in the cryptographic driver.EPSS0.08%6.1MediumCVE-2025-47331qualcomm, inc. · snapdragon +297 moreBuffer Over-read in VideoInformation disclosure while processing a firmware event.EPSS0.08%7.8HighCVE-2025-47321qualcomm, inc. · snapdragon +115 moreBuffer Copy Without Checking Size of Input in Core ServicesMemory corruption while copying packets received from unix clients.EPSS0.08%5.5MediumCVE-2025-47369qualcomm, inc. · snapdragon +173 moreInformation Exposure in Computer VisionInformation disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID.EPSS0.08%5.5MediumCVE-2025-47330qualcomm, inc. · snapdragon +221 moreBuffer Over-read in VideoTransient DOS while parsing video packets received from the video firmware.EPSS0.07%7.8HighCVE-2025-27032qualcomm, inc. · snapdragon +191 moreImproper Access Control Applied to Mirrored or Aliased Memory Regions in Hypervisormemory corruption while loading a PIL authenticated VM, when authenticated VM image is loaded without maintaining cache coherency.EPSS0.08%7.8HighCVE-2025-27070qualcomm, inc. · snapdragon +174 moreOut-of-bounds Write in Windows ComputeMemory corruption while performing encryption and decryption commands.EPSS0.06%7.8HighCVE-2025-27063qualcomm, inc. · snapdragon +111 moreUse After Free in VideoMemory corruption during video playback when video session open fails with time out error.EPSS0.10%9.8CriticalCVE-2025-27034qualcomm, inc. · snapdragon +111 moreImproper Validation of Array Index in Multi-Mode Call ProcessorMemory corruption while selecting the PLMN from SOR failed list.EPSS0.41%