Qualcomm Snapdragon Xr2 5G Platform vulnerabilities, page 3
259 vulnerabilities
Known vulnerabilities in Qualcomm Snapdragon Xr2 5G Platform, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2025-27063qualcomm, inc. · snapdragon +111 moreUse After Free in VideoMemory corruption during video playback when video session open fails with time out error.EPSS0.10%HighCVE-2025-27037qualcomm, inc. · snapdragon +37 moreUse After Free in Camera DriverMemory corruption while processing config_dev IOCTL when camera kernel driver drops its reference to CPU buffers.EPSS0.09%HighCVE-2025-27073qualcomm, inc. · snapdragon +169 moreReachable Assertion in WLAN FirmwareTransient DOS while creating NDP instance.EPSS0.22%HighCVE-2025-27054qualcomm, inc. · snapdragon +297 moreOut-of-bounds Write in DisplayMemory corruption while processing a malformed license file during reboot.EPSS0.09%HighCVE-2025-27065qualcomm, inc. · snapdragon +149 moreBuffer Over-read in WLAN FirmwareTransient DOS while processing a frame with malformed shared-key descriptor.EPSS0.22%HighCVE-2025-27053qualcomm, inc. · snapdragon +317 moreIncorrect Calculation of Buffer Size in HLOSMemory corruption during PlayReady APP usecase while processing TA commands.EPSS0.09%HighCVE-2025-27066qualcomm, inc. · snapdragon +370 moreReachable Assertion in WLAN FirmwareTransient DOS while processing an ANQP message.EPSS0.28%HighCVE-2022-40523qualcomm, inc. · snapdragon +185 moreInformation exposure in KernelInformation disclosure in Kernel due to indirect branch misprediction.EPSS0.11%HighCVE-2022-40507qualcomm, inc. · snapdragon +242 moreDouble free in CoreMemory corruption due to double free in Core while mapping HLOS address to the list.EPSS1.31%HighCVE-2022-40521qualcomm, inc. · snapdragon +242 moreImproper authorization in ModemTransient DOS due to improper authorization in ModemEPSS0.35%HighCVE-2022-40532qualcomm, inc. · snapdragon +353 moreInteger overflow or wraparound in WLANMemory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target.EPSS0.12%HighCVE-2022-40504qualcomm, inc. · snapdragon +189 moreReachable assertion in ModemTransient DOS due to reachable assertion in Modem when UE received Downlink Data Indication message from the network.EPSS0.38%HighCVE-2022-40508qualcomm, inc. · snapdragon +68 moreReachable assertion in ModemTransient DOS due to reachable assertion in Modem while processing config related to cross carrier scheduling, which is not supported.EPSS0.38%MediumCVE-2022-40533qualcomm, inc. · snapdragon +110 moreUntrusted Pointer Dereference in CoreTransient DOS due to untrusted Pointer Dereference in core while sending USB QMI request.EPSS0.10%HighCVE-2022-40503qualcomm, inc. · snapdragon +185 moreBuffer over-read in Bluetooth Host.Information disclosure due to buffer over-read in Bluetooth Host while A2DP streaming.EPSS0.41%HighCVE-2022-40536qualcomm, inc. · snapdragon +81 moreImproper authentication in ModemTransient DOS due to improper authentication in modem while receiving plain TLB OTA request message from network.EPSS0.40%HighCVE-2022-40529qualcomm, inc. · snapdragon +196 moreImproper access control in KernelMemory corruption due to improper access control in kernel while processing a mapping request from root process.EPSS0.10%HighCVE-2022-25713qualcomm, inc. · snapdragon +55 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in AutomotiveMemory corruption in Automotive due to Improper Restriction of Operations within the Bounds of a Memory Buffer while exporting a shared key.EPSS0.12%HighCVE-2022-22076qualcomm, inc. · snapdragon +348 moreCryptographic issue in Coreinformation disclosure due to cryptographic issue in Core during RPMB read request.EPSS0.11%HighCVE-2022-22060qualcomm, inc. · snapdragon +74 moreReachable Assertion in ModemAssertion occurs while processing Reconfiguration message due to improper validationEPSS0.38%