Qualcomm Snapdragon 8 Gen 2 vulnerabilities
11 vulnerabilities
Known vulnerabilities in Qualcomm Snapdragon 8 Gen 2, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2025-21424qualcomm, inc. · snapdragon +233 moreUse After Free in NPUMemory corruption while calling the NPU driver APIs concurrently.EPSS0.12%MediumCVE-2024-43056qualcomm, inc. · snapdragon +187 moreBuffer Over-read in HypervisorTransient DOS during hypervisor virtual I/O operation in a virtual machine.EPSS0.11%MediumCVE-2024-43051qualcomm, inc. · snapdragon +237 moreImproper Authorization in SPS-HLOSInformation disclosure while deriving keys for a session for any Widevine use case.EPSS0.11%HighCVE-2024-53027qualcomm, inc. · snapdragon +206 moreBuffer Copy Without Checking Size of Input in WLAN HostTransient DOS may occur while processing the country IE.EPSS0.30%HighCVE-2024-53024qualcomm, inc. · snapdragon +161 moreNULL Pointer Dereference in DisplayMemory corruption in display driver while detaching a device.EPSS0.12%HighCVE-2024-53014qualcomm, inc. · snapdragon +244 moreImproper Validation of Array Index in AudioMemory corruption may occur while validating ports and channels in Audio driver.EPSS0.12%HighCVE-2024-33051qualcomm, inc. · snapdragon +282 moreBuffer Over-read in WLAN FirmwareTransient DOS while processing TIM IE from beacon frame as there is no check for IE length.EPSS0.30%HighCVE-2024-33045qualcomm, inc. · snapdragon +175 moreReturn of Stack Variable Address in BusesMemory corruption when BTFM client sends new messages over Slimbus to ADSP.EPSS0.12%HighCVE-2024-33050qualcomm, inc. · snapdragon +252 moreBuffer Over-read in WLAN Host CommunicationTransient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper.EPSS0.30%HighCVE-2024-33042qualcomm, inc. · snapdragon +196 moreBuffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in FM HostMemory corruption when Alternative Frequency offset value is set to 255.EPSS0.13%HighCVE-2024-33038qualcomm, inc. · snapdragon +43 moreUntrusted Pointer Dereference in Computer VisionMemory corruption while passing untrusted/corrupted pointers from DSP to EVA.EPSS0.10%