Qualcomm Snapdragon 870 5G Mobile Platform vulnerabilities
104 vulnerabilities
Known vulnerabilities in Qualcomm Snapdragon 870 5G Mobile Platform, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-59604qualcomm, inc.snapdragon+258
EPSS score0.07%
Memory Corruption when running a memory copy operation due to invalid writes caused by a null pointer.CVE-2025-59610qualcomm, inc.snapdragon+229EPSS score0.06%
Memory Corruption when processing IOCTL requests with mismatched API versions due to concurrent modification of user-space buffer.CVE-2025-59605qualcomm, inc.snapdragon+134EPSS score0.07%
Memory Corruption when processing device identifier strings that exceed the expected maximum length.CVE-2025-47376qualcomm, inc.snapdragon+165EPSS score0.07%
Memory Corruption when concurrent access to shared buffer occurs during IOCTL calls.CVE-2025-47379qualcomm, inc.snapdragon+173EPSS score0.07%
Memory Corruption when concurrent access to shared buffer occurs due to improper synchronization between assignment and deallocation of buffer resources.CVE-2025-47384qualcomm, inc.snapdragon+39EPSS score0.10%
Transient DOS when MAC configures config id greater than supported maximum value.CVE-2025-47375qualcomm, inc.snapdragon+164EPSS score0.07%
Memory corruption while handling different IOCTL calls from the user-space simultaneously.CVE-2025-47392qualcomm, inc.snapdragon+148EPSS score0.17%
Memory corruption when decoding corrupted satellite data files with invalid signature offsets.CVE-2025-47389qualcomm, inc.snapdragon+176EPSS score0.10%
Memory corruption when buffer copy operation fails due to integer overflow during attestation report generation.CVE-2025-47378qualcomm, inc.snapdragon+72EPSS score0.07%
Cryptographic Issue when a shared VM reference allows HLOS to boot loader and access cert chain.CVE-2025-47386qualcomm, inc.snapdragon+165EPSS score0.07%
Memory Corruption while invoking IOCTL calls when concurrent access to shared buffer occurs.CVE-2025-47383qualcomm, inc.snapdragon+200EPSS score0.14%
Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE.CVE-2025-47371qualcomm, inc.snapdragon+122EPSS score0.10%
Transient DOS when an LTE RLC packet with invalid TB is received by UE.CVE-2024-43052qualcomm, inc.snapdragon+89EPSS score0.10%
Memory corruption while processing API calls to NPU with invalid input.CVE-2024-38415qualcomm, inc.snapdragon+172EPSS score0.10%
Memory corruption while handling session errors from firmware.CVE-2024-38422qualcomm, inc.snapdragon+263EPSS score0.10%
Memory corruption while processing voice packet with arbitrary data received from ADSP.CVE-2024-38423qualcomm, inc.snapdragon+203EPSS score0.10%
Memory corruption while processing GPU page table switch.CVE-2024-38408qualcomm, inc.snapdragon+229EPSS score0.14%
Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.CVE-2024-33044qualcomm, inc.snapdragon+208EPSS score0.10%
Memory corruption while Configuring the SMR/S2CR register in Bypass mode.CVE-2024-33037qualcomm, inc.snapdragon+50EPSS score0.10%
Information disclosure as NPU firmware can send invalid IPC message to NPU driver as the driver doesn`t validate the IPC message received from the firmware.