Qualcomm Snapdragon X72 5G Modem Rf vulnerabilities, page 3
50 vulnerabilities
Known vulnerabilities in Qualcomm Snapdragon X72 5G Modem Rf, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2026-24082qualcomm, inc. · snapdragon +173 moreUse After Free in Automotive GPUMemory Corruption when copying data from a freed source while executing performance counter deselect operation.EPSS0.07%HighCVE-2023-43526qualcomm, inc. · snapdragon +38 moreBuffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in AudioMemory corruption while querying module parameters from Listen Sound model client in kernel from user space.EPSS0.11%HighCVE-2023-43521qualcomm, inc. · snapdragon +76 moreUse After Free in HLOSMemory corruption when multiple listeners are being registered with the same file descriptor.EPSS0.11%HighCVE-2023-43525qualcomm, inc. · snapdragon +40 moreBuffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in AudioMemory corruption while copying the sound model data from user to kernel buffer during sound model register.EPSS0.11%HighCVE-2023-43524qualcomm, inc. · snapdragon +56 moreBuffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in AudioMemory corruption when the bandpass filter order received from AHAL is not within the expected range.EPSS0.11%HighCVE-2023-43529qualcomm, inc. · snapdragon +154 moreReachable Assertion in Data ModemTransient DOS while processing IKEv2 Informational request messages, when a malformed fragment packet is received.EPSS0.32%HighCVE-2023-43530qualcomm, inc. · snapdragon +154 moreInteger Overflow or Wraparound in HLOSMemory corruption in HLOS while checking for the storage type.EPSS0.11%HighCVE-2023-43531qualcomm, inc. · snapdragon +124 moreAccess of Uninitialized Pointer in SPS ApplicationsMemory corruption while verifying the serialized header when the key pairs are generated.EPSS0.11%MediumCVE-2023-43528qualcomm, inc. · snapdragon +90 moreBuffer Over-read in AudioInformation disclosure when the ADSP payload size received in HLOS in response to Audio Stream Manager matrix session is less than this expected size.EPSS0.11%HighCVE-2023-33119qualcomm, inc. · snapdragon +157 moreTime-of-check Time-of-use (TOCTOU) Race Condition in HypervisorMemory corruption while loading a VM from a signed VM image that is not coherent in the processor cache.EPSS0.08%