Vulnerabilities (CVE)

Filtered by vendor Qualcomm Subscribe
Filtered by product Snapdragon Xr2 5g
Total 92 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-49841 1 Qualcomm 346 Aqt1000, Aqt1000 Firmware, Ar8035 and 343 more 2025-08-11 N/A 7.8 HIGH
Memory corruption during memory assignment to headless peripheral VM due to incorrect error code handling.
CVE-2024-53014 1 Qualcomm 502 215, 215 Firmware, 315 5g Iot Modem and 499 more 2025-08-11 N/A 7.8 HIGH
Memory corruption may occur while validating ports and channels in Audio driver.
CVE-2024-53027 1 Qualcomm 424 205, 205 Firmware, Apq8017 and 421 more 2025-08-11 N/A 7.5 HIGH
Transient DOS may occur while processing the country IE.
CVE-2024-53009 1 Qualcomm 378 Aqt1000, Aqt1000 Firmware, Ar8035 and 375 more 2025-08-11 N/A 5.3 MEDIUM
Memory corruption while operating the mailbox in Automotive.
CVE-2023-28541 1 Qualcomm 398 Aqt1000, Aqt1000 Firmware, Ar8031 and 395 more 2025-08-11 N/A 7.8 HIGH
Memory Corruption in Data Modem while processing DMA buffer release event about CFR data.
CVE-2023-43528 1 Qualcomm 182 Ar8035, Ar8035 Firmware, C-v2x 9150 and 179 more 2025-08-11 N/A 6.1 MEDIUM
Information disclosure when the ADSP payload size received in HLOS in response to Audio Stream Manager matrix session is less than this expected size.
CVE-2024-21480 1 Qualcomm 230 Ar8035, Ar8035 Firmware, Fastconnect 6200 and 227 more 2025-08-11 N/A 7.3 HIGH
Memory corruption while playing audio file having large-sized input buffer.
CVE-2023-43521 1 Qualcomm 154 Ar8035, Ar8035 Firmware, C-v2x 9150 and 151 more 2025-08-11 N/A 6.7 MEDIUM
Memory corruption when multiple listeners are being registered with the same file descriptor.
CVE-2023-33111 1 Qualcomm 172 Ar8035, Ar8035 Firmware, C-v2x 9150 and 169 more 2025-08-11 N/A 5.5 MEDIUM
Information disclosure when VI calibration state set by ADSP is greater than MAX_FBSP_STATE in the response payload to AFE calibration command.
CVE-2023-43529 1 Qualcomm 322 315 5g Iot Modem, 315 5g Iot Modem Firmware, Aqt1000 and 319 more 2025-08-11 N/A 7.5 HIGH
Transient DOS while processing IKEv2 Informational request messages, when a malformed fragment packet is received.
CVE-2024-33060 1 Qualcomm 500 215 Mobile, 215 Mobile Firmware, 315 5g Iot and 497 more 2025-08-11 N/A 8.4 HIGH
Memory corruption when two threads try to map and unmap a single node simultaneously.
CVE-2025-21453 1 Qualcomm 532 205 Mobile, 205 Mobile Firmware, 215 Mobile and 529 more 2025-08-11 N/A 7.8 HIGH
Memory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential failures occur.
CVE-2023-33066 1 Qualcomm 626 205 Mobile, 205 Mobile Firmware, 215 Mobile and 623 more 2025-08-11 N/A 8.4 HIGH
Memory corruption in Audio while processing RT proxy port register driver.
CVE-2025-21454 1 Qualcomm 384 315 5g Iot Modem, 315 5g Iot Modem Firmware, 9206 Lte Modem and 381 more 2025-08-11 N/A 7.5 HIGH
Transient DOS while processing received beacon frame.
CVE-2023-43548 1 Qualcomm 284 Aqt1000, Aqt1000 Firmware, Fastconnect 6200 and 281 more 2025-08-11 N/A 7.3 HIGH
Memory corruption while parsing qcp clip with invalid chunk data size.
CVE-2025-21433 1 Qualcomm 550 215 Mobile, 215 Mobile Firmware, Apq8017 and 547 more 2025-08-11 N/A 6.2 MEDIUM
Transient DOS when importing a PKCS#8-encoded RSA private key with a zero-sized modulus.
CVE-2024-49844 1 Qualcomm 362 Ar8035, Ar8035 Firmware, Fastconnect 6200 and 359 more 2025-08-11 N/A 7.8 HIGH
Memory corruption while triggering commands in the PlayReady Trusted application.
CVE-2023-33096 1 Qualcomm 204 315 5g Iot Modem, 315 5g Iot Modem Firmware, Ar8035 and 201 more 2025-08-11 N/A 7.5 HIGH
Transient DOS while processing DL NAS Transport message, as specified in 3GPP 24.501 v16.
CVE-2024-43051 1 Qualcomm 488 Aqt1000, Aqt1000 Firmware, Ar8031 and 485 more 2025-08-11 N/A 5.5 MEDIUM
Information disclosure while deriving keys for a session for any Widevine use case.
CVE-2024-33051 1 Qualcomm 578 315 5g Iot, 315 5g Iot Firmware, 9206 Lte and 575 more 2025-08-11 N/A 7.5 HIGH
Transient DOS while processing TIM IE from beacon frame as there is no check for IE length.