Qualcomm Snapdragon X35 5G Modem Rf System vulnerabilities, page 5
100 vulnerabilities
Known vulnerabilities in Qualcomm Snapdragon X35 5G Modem Rf System, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2026-25292qualcomm, inc. · snapdragon +208 moreImproper Validation of Syntactic Correctness of Input in Automotive Linux OSMemory Corruption when processing untrusted user input in the fastboot command handler for audio framework configuration.EPSS0.15%HighCVE-2026-57554qualcomm, inc. · snapdragon +212 moreUse After Free in DSP ServiceMemory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC invocations.EPSS0.07%HighCVE-2026-24079qualcomm, inc. · snapdragon +137 moreMissing Authentication for Critical Function in Data ModemCryptographic Issue while processing registration requests with malformed or missing authentication parameters.EPSS0.21%HighCVE-2026-24085qualcomm, inc. · snapdragon +266 moreStack-based Buffer Overflow in DisplayMemory Corruption when processing display command line information due to improper initialization of a variable.EPSS0.10%HighCVE-2026-24091qualcomm, inc. · snapdragon +266 moreImproper Validation of Syntactic Correctness of Input in DisplayMemory corruption while processing fastboot commands with improperly formatted input.EPSS0.10%MediumCVE-2026-24078qualcomm, inc. · snapdragon +141 moreExposure of Private Personal Information to an Unauthorized Actor in Data ModemInformation Disclosure when IPSec negotiation fails or is not established properly during NG-eCall SIP signaling.EPSS0.17%HighCVE-2026-24092qualcomm, inc. · snapdragon +215 moreImproper Validation of Syntactic Correctness of Input in DisplayMemory Corruption when processing fastboot commands to set display mode.EPSS0.10%HighCVE-2026-24090qualcomm, inc. · snapdragon +214 moreMissing Authentication for Critical Function in HLOSCryptographic issue while processing partition table entries allows unauthorized modification of boot flow.EPSS0.06%HighCVE-2026-24087qualcomm, inc. · snapdragon +212 moreImproper Validation of Syntactic Correctness of Input in KernelMemory corruption while processing fastboot OEM commands.EPSS0.10%HighCVE-2026-24088qualcomm, inc. · snapdragon +243 moreMissing Authentication for Critical Function in BootCryptographic Issue while processing a specific partition which allows unauthorized write access to load a customized bootloader.EPSS0.07%HighCVE-2026-24089qualcomm, inc. · snapdragon +216 moreImproper Validation of Syntactic Correctness of Input in KernelMemory corruption while processing fastboot commands with invalid input.EPSS0.10%HighCVE-2023-43533qualcomm, inc. · snapdragon +232 moreBuffer Over-read in WLAN FirmwareTransient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame.EPSS0.32%HighCVE-2023-43522qualcomm, inc. · snapdragon +280 moreNULL Pointer Dereference in WLAN FirmwareTransient DOS while key unwrapping process, when the given encrypted key is empty or NULL.EPSS0.32%HighCVE-2023-43513qualcomm, inc. · snapdragon +261 moreUse of Out-of-range Pointer Offset in PCIeMemory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element.EPSS0.11%HighCVE-2023-43536qualcomm, inc. · snapdragon +303 moreBuffer Over-read in WLAN FirmwareTransient DOS while parse fils IE with length equal to 1.EPSS0.32%CriticalCVE-2023-28578qualcomm, inc. · snapdragon +333 moreImproper Input Validation in ServicesMemory corruption in Core Services while executing the command for removing a single event listener.EPSS0.12%CriticalCVE-2023-33072qualcomm, inc. · snapdragon +239 moreBuffer copy without checking size of Input in CoreMemory corruption in Core while processing control functions.EPSS0.11%HighCVE-2023-33076qualcomm, inc. · snapdragon +147 moreConfiguration Issue in CoreMemory corruption in Core when updating rollback version for TA and OTA feature is enabled.EPSS0.11%HighCVE-2023-33057qualcomm, inc. · snapdragon +95 moreImproper Input Validation in Multi-Mode Call ProcessorTransient DOS in Multi-Mode Call Processor while processing UE policy container.EPSS0.32%HighCVE-2023-33049qualcomm, inc. · snapdragon +95 moreImproper Release of Memory Before Removing Last Reference in Multi-Mode Call ProcessorTransient DOS in Multi-Mode Call Processor due to UE failure because of heap leakage.EPSS0.32%