Qualcomm, Inc. Snapdragon vulnerabilities, page 5
997 vulnerabilities
Known vulnerabilities in Qualcomm, Inc. Snapdragon, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
MediumCVE-2025-59610qualcomm, inc. · snapdragon +229 moreTime-of-check Time-of-use (TOCTOU) Race Condition in Camera DriverMemory Corruption when processing IOCTL requests with mismatched API versions due to concurrent modification of user-space buffer.EPSS0.06%HighCVE-2025-59606qualcomm, inc. · snapdragon +141 moreNULL Pointer Dereference in HLOSMemory Corruption when writing to invalid memory locations occurs due to heap memory exhaustion during secure data initialization.EPSS0.07%HighCVE-2025-59615qualcomm, inc. · snapdragon +60 moreUse After Free in Computer VisionMemory Corruption when invoking device input/output control operations for mapping and unmapping persistent memory buffers due to improper synchronization.EPSS0.09%MediumCVE-2025-59613qualcomm, inc. · snapdragon +44 moreStack-based Buffer Overflow in Windows ComputeMemory Corruption when output buffer size is smaller than input buffer size during data copying operation.EPSS0.08%MediumCVE-2025-59614qualcomm, inc. · snapdragon +21 moreOut-of-bounds Write in Windows ComputeMemory Corruption when sending random number generator command with insufficient output buffer size.EPSS0.08%HighCVE-2025-59603qualcomm, inc. · snapdragon +29 moreOut-of-bounds Write in Computer VisionMemory Corruption when processing invalid user address with nonstandard buffer address.EPSS0.07%HighCVE-2025-59605qualcomm, inc. · snapdragon +134 moreOut-of-bounds Write in HLOSMemory Corruption when processing device identifier strings that exceed the expected maximum length.EPSS0.07%HighCVE-2025-59616qualcomm, inc. · snapdragon +48 moreUse After Free in Computer VisionMemory Corruption when processing multiple IOCTL calls with the same buffer file descriptor input due to accessing already freed memory.EPSS0.09%HighCVE-2025-47376qualcomm, inc. · snapdragon +165 moreUse After Free in Automotive AudioMemory Corruption when concurrent access to shared buffer occurs during IOCTL calls.EPSS0.07%MediumCVE-2025-47362qualcomm, inc. · snapdragon +38 moreBuffer Over-read in Automotive Software platform based on QNXInformation disclosure while processing message from client with invalid payload.EPSS0.08%HighCVE-2025-47396qualcomm, inc. · snapdragon +45 moreDouble Free in GraphicsMemory corruption occurs when a secure application is launched on a device with insufficient memory.EPSS0.08%HighCVE-2025-47318qualcomm, inc. · snapdragon +202 moreBuffer Over-read in BT ControllerTransient DOS while parsing the EPTM test control message to get the test pattern.EPSS0.21%HighCVE-2025-47348qualcomm, inc. · snapdragon +202 moreUse of Uninitialized Variable in HLOSMemory corruption while processing identity credential operations in the trusted application.EPSS0.08%HighCVE-2025-47359qualcomm, inc. · snapdragon +37 moreUse After Free in Secure ProcessorMemory Corruption when multiple threads simultaneously access a memory free API.EPSS0.10%HighCVE-2025-47379qualcomm, inc. · snapdragon +173 moreUse After Free in Automotive AudioMemory Corruption when concurrent access to shared buffer occurs due to improper synchronization between assignment and deallocation of buffer resources.EPSS0.07%MediumCVE-2025-47384qualcomm, inc. · snapdragon +39 moreReachable Assertion in FWTransient DOS when MAC configures config id greater than supported maximum value.EPSS0.10%HighCVE-2025-47360qualcomm, inc. · snapdragon +35 moreStack-based Buffer Overflow in Automotive Software platform based on QNXMemory corruption while processing client message during device management.EPSS0.09%HighCVE-2025-47339qualcomm, inc. · snapdragon +185 moreUse After Free in HLOSMemory corruption while deinitializing a HDCP session.EPSS0.08%MediumCVE-2025-47334qualcomm, inc. · snapdragon +144 moreBuffer Copy Without Checking Size of Input in Camera DriverMemory corruption while processing shared command buffer packet between camera userspace and kernel.EPSS0.08%HighCVE-2025-47388qualcomm, inc. · snapdragon +45 moreBuffer Copy without Checking Size of Input in DSP ServiceMemory corruption while passing pages to DSP with an unaligned starting address.EPSS0.08%