Qualcomm Snapdragon 860 vulnerabilities

12 vulnerabilities

Known vulnerabilities in Qualcomm Snapdragon 860, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.8HighCVE-2025-21424qualcomm, inc. · snapdragon +233 moreUse After Free in NPUMemory corruption while calling the NPU driver APIs concurrently.EPSS0.12%6.5MediumCVE-2024-43056qualcomm, inc. · snapdragon +187 moreBuffer Over-read in HypervisorTransient DOS during hypervisor virtual I/O operation in a virtual machine.EPSS0.11%5.5MediumCVE-2024-43051qualcomm, inc. · snapdragon +237 moreImproper Authorization in SPS-HLOSInformation disclosure while deriving keys for a session for any Widevine use case.EPSS0.11%7.8HighCVE-2024-53014qualcomm, inc. · snapdragon +244 moreImproper Validation of Array Index in AudioMemory corruption may occur while validating ports and channels in Audio driver.EPSS0.12%7.5HighCVE-2024-33051qualcomm, inc. · snapdragon +282 moreBuffer Over-read in WLAN FirmwareTransient DOS while processing TIM IE from beacon frame as there is no check for IE length.EPSS0.30%7.8HighCVE-2024-33042qualcomm, inc. · snapdragon +196 moreBuffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in FM HostMemory corruption when Alternative Frequency offset value is set to 255.EPSS0.13%7.5HighCVE-2023-28584qualcomm, inc. · snapdragon +70 moreImproper Authorization in WLAN HostTransient DOS in WLAN Host when a mobile station receives invalid channel in CSA IE while doing channel switch announcement (CSA).EPSS0.35%7.8HighCVE-2023-28565qualcomm, inc. · snapdragon +292 moreImproper Validation of Array Index in WLAN HALMemory corruption in WLAN HAL while handling command streams through WMI interfaces.EPSS0.12%7.8HighCVE-2023-28564qualcomm, inc. · snapdragon +247 moreUse of Out-of-range Pointer Offset in WLAN HALMemory corruption in WLAN HAL while passing command parameters through WMI interfaces.EPSS0.12%9.8CriticalCVE-2023-28562qualcomm, inc. · snapdragon +66 moreBuffer Copy Without Checking Size of Input in QESLMemory corruption while handling payloads from remote ESL.EPSS0.43%7.8HighCVE-2023-28567qualcomm, inc. · snapdragon +285 moreImproper Validation of Array Index in WLAN HALMemory corruption in WLAN HAL while handling command through WMI interfaces.EPSS0.12%8.4HighCVE-2023-33021qualcomm, inc. · snapdragon +163 moreUse After Free in GraphicsMemory corruption in Graphics while processing user packets for command submission.EPSS0.12%