Qualcomm Snapdragon 870 5G vulnerabilities
29 vulnerabilities
Known vulnerabilities in Qualcomm Snapdragon 870 5G, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2025-21424qualcomm, inc. · snapdragon +233 moreUse After Free in NPUMemory corruption while calling the NPU driver APIs concurrently.EPSS0.12%MediumCVE-2024-43056qualcomm, inc. · snapdragon +187 moreBuffer Over-read in HypervisorTransient DOS during hypervisor virtual I/O operation in a virtual machine.EPSS0.11%HighCVE-2024-43057qualcomm, inc. · snapdragon +151 moreUse After Free in MProcMemory corruption while processing command in Glink linux.EPSS0.12%MediumCVE-2024-43051qualcomm, inc. · snapdragon +237 moreImproper Authorization in SPS-HLOSInformation disclosure while deriving keys for a session for any Widevine use case.EPSS0.11%HighCVE-2024-53027qualcomm, inc. · snapdragon +206 moreBuffer Copy Without Checking Size of Input in WLAN HostTransient DOS may occur while processing the country IE.EPSS0.30%HighCVE-2024-53014qualcomm, inc. · snapdragon +244 moreImproper Validation of Array Index in AudioMemory corruption may occur while validating ports and channels in Audio driver.EPSS0.12%MediumCVE-2024-38426qualcomm, inc. · snapdragon +163 moreImproper Authentication in ModemWhile processing the authentication message in UE, improper authentication may lead to information disclosure.EPSS0.27%HighCVE-2024-33051qualcomm, inc. · snapdragon +282 moreBuffer Over-read in WLAN FirmwareTransient DOS while processing TIM IE from beacon frame as there is no check for IE length.EPSS0.30%HighCVE-2024-33042qualcomm, inc. · snapdragon +196 moreBuffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in FM HostMemory corruption when Alternative Frequency offset value is set to 255.EPSS0.13%HighCVE-2023-21637qualcomm, inc. · snapdragon +54 moreImproper Restrictions of Operations within the Bounds of a Memory Buffer in LinuxMemory corruption in Linux while calling system configuration APIs.EPSS0.11%MediumCVE-2023-21629qualcomm, inc. · snapdragon +207 moreDouble Free in ModemMemory Corruption in Modem due to double free while parsing the PKCS15 sim files.EPSS0.19%HighCVE-2023-21635qualcomm, inc. · snapdragon +48 moreBuffer Copy without Checking Size of Input in Data Network Stack & ConnectivityMemory Corruption in Data Network Stack & Connectivity when sim gets detected on telephony.EPSS0.11%HighCVE-2023-21633qualcomm, inc. · snapdragon +96 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in LinuxMemory Corruption in Linux while processing QcRilRequestImsRegisterMultiIdentityMessage request.EPSS0.11%HighCVE-2023-21638qualcomm, inc. · snapdragon +35 moreIncorrect Type Conversion or Cast in VideoMemory corruption in Video while calling APIs with different instance ID than the one received in initialization.EPSS0.11%CriticalCVE-2023-21631qualcomm, inc. · snapdragon +155 moreImproper Input Validation in ModemWeak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network.EPSS0.36%HighCVE-2023-22387qualcomm, inc. · snapdragon +266 moreUse of Out-of-range Pointer Offset in Qualcomm IPCArbitrary memory overwrite when VM gets compromised in TX write leading to Memory Corruption.EPSS0.12%HighCVE-2023-22667qualcomm, inc. · snapdragon +200 moreInteger Overflow or Wraparound in AudioMemory Corruption in Audio while allocating the ion buffer during the music playback.EPSS0.12%HighCVE-2023-24854qualcomm, inc. · snapdragon +158 moreStack-based Buffer Overflow in WLAN HOSTMemory Corruption in WLAN HOST while parsing QMI WLAN Firmware response message.EPSS0.12%HighCVE-2023-24851qualcomm, inc. · snapdragon +186 moreBuffer Copy Without Checking Size of Input in WLAN HOSTMemory Corruption in WLAN HOST while parsing QMI response message from firmware.EPSS0.12%HighCVE-2023-28575qualcomm, inc. · snapdragon +59 moreMultiple Type Confusion VulnerabilityThe cam_get_device_priv function does not check the type of handle being returned (device/session/link). This would lead to invalid type usage if a wrong handle is passed to it.EPSS0.12%